$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SFxPNJRSZ-Or1iKPZ1Ky0go6mK0.roa File: SFxPNJRSZ-Or1iKPZ1Ky0go6mK0.roa (raw, json) Hash identifier: 7mnuuWEfi0PhYXSX+Kbk2lyHQHwAlTaT19UPbR02mIo= Subject key identifier: 48:5C:4F:34:94:52:67:E3:AB:D6:22:8F:67:52:B2:D2:0A:3A:98:AD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12D3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SFxPNJRSZ-Or1iKPZ1Ky0go6mK0.roa Signing time: Sun 01 Mar 2026 03:16:30 +0000 ROA not before: Sun 01 Mar 2026 03:16:30 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4819 (0x12d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:16:30 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=485C4F34945267E3ABD6228F6752B2D20A3A98AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:82:df:8f:f7:7f:ef:40:21:3f:4e:db:dd:34: 19:24:6b:e4:72:24:c0:56:bd:b6:48:23:0f:05:9d: 6b:46:36:b3:9c:ab:04:08:dc:cf:f5:88:66:fb:de: 14:c9:92:78:26:c3:97:20:10:77:4c:11:21:7c:bb: 4e:31:5b:ca:55:89:ee:56:23:e7:ae:f7:2e:08:bb: b3:f4:1f:cc:15:90:0c:a0:bc:ad:9f:42:da:18:a8: 2b:52:f3:b2:bb:17:8a:7b:92:ee:88:4d:cb:a2:09: e2:df:30:88:5a:fa:a7:42:d4:fb:dd:1c:52:18:ca: de:3a:2f:3b:c6:b9:d5:d3:35:2c:4e:e8:a9:66:cb: 2e:a2:8f:c3:70:42:1a:0c:90:c6:fe:8a:5a:e7:ed: 45:ae:09:80:44:da:17:16:1a:4d:53:78:3d:e7:b1: d8:87:7c:bb:23:9a:79:98:1c:54:66:95:bb:19:ab: 1a:cf:60:f7:be:53:df:c3:f5:f7:0d:22:87:34:59: 47:49:d3:eb:55:c8:7b:cd:0b:44:43:0c:f7:b9:09: 56:25:66:11:fb:4e:6d:95:6e:53:73:b4:d9:2c:0a: 2c:4c:5a:08:f6:cb:88:91:90:90:56:7a:42:b1:b7: c6:ad:12:ca:a9:d4:2f:28:2c:f2:50:6f:70:02:64: e7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5C:4F:34:94:52:67:E3:AB:D6:22:8F:67:52:B2:D2:0A:3A:98:AD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SFxPNJRSZ-Or1iKPZ1Ky0go6mK0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.88.0/23 Signature Algorithm: sha256WithRSAEncryption bf:b4:84:69:c3:6b:71:4a:55:e6:7b:e0:07:82:50:83:5b:69: c6:97:7c:44:3e:44:e1:f6:16:92:58:19:ae:74:20:cd:83:9d: f2:66:d1:ee:f3:7c:a3:b4:9d:ff:e9:c2:b1:a4:84:e2:45:59: 49:e5:a1:80:2d:49:34:2a:3d:b6:79:bc:c9:2a:3b:8c:72:58: a9:3f:9f:06:50:05:d4:57:a5:94:ae:0e:9b:3c:e6:44:98:ae: 34:ef:45:31:49:ab:f0:9d:55:66:2b:b3:a0:a5:e2:3b:1f:35: 21:8c:c7:45:ad:04:38:2d:c7:5c:dc:95:f4:1e:52:13:95:ed: 4b:82:9f:b7:fd:5b:85:af:e3:52:15:db:c8:db:6b:61:7e:6c: cf:51:15:76:4f:3e:97:2f:e0:f7:be:01:2c:08:fd:68:ca:01: 47:28:3c:05:d1:b1:4b:22:5c:2e:15:00:8f:2b:71:db:28:4f: e5:12:cb:f9:5f:f6:0b:82:e7:bc:63:d2:a2:5a:ef:9c:81:27: 5c:51:b3:75:94:a2:8c:30:e1:6e:bf:bb:11:ae:35:da:72:9d: a9:b5:23:ea:2f:f5:b3:91:aa:b2:5e:65:07:b7:6a:40:60:c0: 84:d8:3e:8e:48:ea:f2:0e:fc:d1:74:47:a2:a1:6e:13:68:64: cc:d2:30:e0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEtMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzE2MzBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ4NUM0RjM0OTQ1MjY3 RTNBQkQ2MjI4RjY3NTJCMkQyMEEzQTk4QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCegt+P93/vQCE/TtvdNBkka+RyJMBWvbZIIw8FnWtGNrOcqwQI 3M/1iGb73hTJkngmw5cgEHdMESF8u04xW8pVie5WI+eu9y4Iu7P0H8wVkAygvK2f QtoYqCtS87K7F4p7ku6ITcuiCeLfMIha+qdC1PvdHFIYyt46LzvGudXTNSxO6Klm yy6ij8NwQhoMkMb+ilrn7UWuCYBE2hcWGk1TeD3nsdiHfLsjmnmYHFRmlbsZqxrP YPe+U9/D9fcNIoc0WUdJ0+tVyHvNC0RDDPe5CVYlZhH7Tm2VblNztNksCixMWgj2 y4iRkJBWekKxt8atEsqp1C8oLPJQb3ACZOf9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSFxPNJRSZ+Or1iKPZ1Ky0go6mK0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1NGeFBOSlJTWi1PcjFpS1BaMUt5MGdvNm1LMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBT1gwDQYJKoZIhvcNAQELBQADggEBAL+0hGnDa3FKVeZ74AeCUINbacaX fEQ+ROH2FpJYGa50IM2DnfJm0e7zfKO0nf/pwrGkhOJFWUnloYAtSTQqPbZ5vMkq O4xyWKk/nwZQBdRXpZSuDps85kSYrjTvRTFJq/CdVWYrs6Cl4jsfNSGMx0WtBDgt x1zclfQeUhOV7UuCn7f9W4Wv41IV28jba2F+bM9RFXZPPpcv4Pe+ASwI/WjKAUco PAXRsUsiXC4VAI8rcdsoT+USy/lf9guC57xj0qJa75yBJ1xRs3WUooww4W6/uxGu Ndpynam1I+ov9bORqrJeZQe3akBgwITYPo5I6vIO/NF0R6KhbhNoZMzSMOA= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:09 2026 by rpki-client