$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TfBroUiNFMDtEkzlOrKw65GpQgU.roa File: TfBroUiNFMDtEkzlOrKw65GpQgU.roa (raw, json) Hash identifier: k7MJAphxMebsBREfdLN41qkjG8cg3xPNtXPk1MUSbn4= Subject key identifier: 4D:F0:6B:A1:48:8D:14:C0:ED:12:4C:E5:3A:B2:B0:EB:91:A9:42:05 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1134 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TfBroUiNFMDtEkzlOrKw65GpQgU.roa Signing time: Sun 01 Mar 2026 02:12:41 +0000 ROA not before: Sun 01 Mar 2026 02:12:41 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.76.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4404 (0x1134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:12:41 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=4DF06BA1488D14C0ED124CE53AB2B0EB91A94205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:58:b7:2a:ed:9a:2d:f2:40:80:1d:fa:62: 8e:63:97:c9:fa:8e:84:fe:13:68:bd:1b:82:af:03: 0c:83:83:30:55:f9:71:9e:69:58:3e:bc:f1:29:ef: 16:7c:20:7b:14:2e:93:0c:56:13:fd:37:08:73:92: 3a:8d:34:5e:e5:82:1b:ab:06:7f:50:84:64:1b:16: 93:52:b5:3a:d1:aa:8e:6e:ce:83:dd:ac:ee:50:ad: a1:48:00:6e:63:2c:be:c1:e2:7b:2d:9c:a2:91:bb: b7:da:45:de:12:5c:e3:3b:d6:e8:5a:93:24:2e:f9: 1a:45:98:5d:24:5e:7f:5b:9e:32:96:04:b0:78:75: 3d:8e:70:cb:17:10:f1:2e:0f:48:e8:ee:74:e5:15: 11:62:5c:87:74:eb:6f:5e:2c:bb:4b:c5:dc:00:d1: 28:cb:5c:b5:b2:6e:d5:b9:fe:e7:a2:aa:e5:63:2f: b0:ca:da:7d:02:d3:27:61:39:36:d1:f6:ee:e9:6b: 28:c4:21:9d:d0:be:5f:f6:db:7f:d9:97:14:98:60: b8:c6:4e:2a:82:ae:07:2e:24:82:46:c6:1b:e1:e7: 7c:cb:53:64:50:d1:e8:0b:e6:d3:89:f7:1a:e4:eb: 35:95:6b:51:ae:aa:fe:9a:ab:33:99:95:d0:f8:4f: bf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F0:6B:A1:48:8D:14:C0:ED:12:4C:E5:3A:B2:B0:EB:91:A9:42:05 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TfBroUiNFMDtEkzlOrKw65GpQgU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.80.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:e7:5b:5b:7c:f4:af:40:38:3b:7b:7e:32:6e:d1:6b:67:f3: d4:0c:81:e8:7e:d4:59:fe:05:9f:1e:72:4a:b6:73:5c:84:fb: 04:d0:74:99:19:b9:4d:de:e0:33:44:51:be:3e:a9:86:5a:5c: ee:01:03:00:4c:b0:e5:6d:c0:eb:26:2f:94:27:b9:b4:3f:ad: b3:c8:ff:22:6a:b0:0f:d7:8d:1a:5a:37:c9:00:d7:64:12:3b: fe:85:38:82:a0:b5:9b:43:12:81:62:9b:d9:c8:33:27:ec:ea: b9:76:a2:ff:92:04:92:65:7d:c0:ce:18:4b:8d:9f:dd:0b:ea: 83:9f:72:d4:f6:be:99:94:40:99:40:4c:2d:25:59:e7:88:0a: d7:69:7e:ef:50:50:02:a5:7c:57:e1:d0:06:cc:90:dd:c6:35: 83:c5:37:52:cf:36:eb:fc:2c:c2:c1:b4:bd:d3:96:61:c4:c6: 57:0a:ce:cb:01:87:34:48:79:8a:ce:15:02:37:67:a4:62:45: 5c:51:8b:f8:32:84:5b:20:c8:8e:44:fa:bc:cc:c7:fd:d9:cd: ba:be:dd:f1:1e:82:2a:80:70:55:42:19:62:9a:84:d5:00:33: 36:de:23:49:cb:4e:d5:da:04:72:83:65:a4:a8:23:73:57:9c: 82:f9:56:a2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICETQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjEyNDFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRERjA2QkExNDg4RDE0 QzBFRDEyNENFNTNBQjJCMEVCOTFBOTQyMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ0Fi3Ku2aLfJAgB36Yo5jl8n6joT+E2i9G4KvAwyDgzBV+XGe aVg+vPEp7xZ8IHsULpMMVhP9NwhzkjqNNF7lghurBn9QhGQbFpNStTrRqo5uzoPd rO5QraFIAG5jLL7B4nstnKKRu7faRd4SXOM71uhakyQu+RpFmF0kXn9bnjKWBLB4 dT2OcMsXEPEuD0jo7nTlFRFiXId0629eLLtLxdwA0SjLXLWybtW5/ueiquVjL7DK 2n0C0ydhOTbR9u7payjEIZ3Qvl/223/ZlxSYYLjGTiqCrgcuJIJGxhvh53zLU2RQ 0egL5tOJ9xrk6zWVa1Guqv6aqzOZldD4T7+dAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTfBroUiNFMDtEkzlOrKw65GpQgUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RmQnJvVWlORk1EdEVremxPckt3NjVHcFFnVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBTFAwDQYJKoZIhvcNAQELBQADggEBAE/nW1t89K9AODt7fjJu0Wtn89QM geh+1Fn+BZ8eckq2c1yE+wTQdJkZuU3e4DNEUb4+qYZaXO4BAwBMsOVtwOsmL5Qn ubQ/rbPI/yJqsA/XjRpaN8kA12QSO/6FOIKgtZtDEoFim9nIMyfs6rl2ov+SBJJl fcDOGEuNn90L6oOfctT2vpmUQJlATC0lWeeICtdpfu9QUAKlfFfh0AbMkN3GNYPF N1LPNuv8LMLBtL3TlmHExlcKzssBhzRIeYrOFQI3Z6RiRVxRi/gyhFsgyI5E+rzM x/3Zzbq+3fEegiqAcFVCGWKahNUAMzbeI0nLTtXaBHKDZaSoI3NXnIL5VqI= -----END CERTIFICATE-----Generated at Mon Mar 2 10:10:09 2026 by rpki-client