$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TxBCnk7B15KuQuNMV0xvAVFYpkg.roa File: TxBCnk7B15KuQuNMV0xvAVFYpkg.roa (raw, json) Hash identifier: F+q1MNJ6DmfgGQEJCHT0I/Gm1PbkB4qsO3oAR3+iJ4U= Subject key identifier: 4F:10:42:9E:4E:C1:D7:92:AE:42:E3:4C:57:4C:6F:01:51:58:A6:48 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 10E2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TxBCnk7B15KuQuNMV0xvAVFYpkg.roa Signing time: Sun 01 Mar 2026 01:58:38 +0000 ROA not before: Sun 01 Mar 2026 01:58:38 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 27.230.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4322 (0x10e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:58:38 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=4F10429E4EC1D792AE42E34C574C6F015158A648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:3e:fc:03:a5:a2:0b:f0:6b:f4:55:07:2d: a3:be:fd:70:04:85:ef:b0:c9:8d:49:c5:87:c8:f0: 32:33:a1:87:b0:3c:b0:bf:e4:f0:db:91:73:4a:6c: 91:96:e3:68:f6:f6:20:50:0b:70:14:ca:f4:e0:98: d3:8e:26:f7:e8:a2:ae:06:de:3e:59:fb:72:f0:cf: 60:7e:d8:d2:87:ae:c3:15:ad:d4:b9:b1:90:2c:29: 0d:86:30:81:29:6f:0f:03:84:7f:fa:0f:be:ab:53: a4:95:c6:ed:57:90:02:cb:bd:0d:78:b9:86:ab:4d: 05:2c:0a:01:d1:94:6e:b3:19:2b:87:39:eb:a8:b9: ca:bd:8c:bd:77:9d:21:1a:e7:53:b0:32:b7:b5:a4: ab:83:96:19:57:9d:8d:88:ef:25:ad:9c:cd:0d:25: f5:6c:e5:f3:9f:e3:e1:97:82:e4:96:2b:d1:8c:de: af:ff:dd:65:02:d9:9a:d0:ed:73:af:77:2d:c6:79: 68:6b:54:f2:97:79:0c:4d:73:16:6f:4a:05:13:ce: 7f:e7:9c:6e:ad:8e:a4:4e:43:4b:06:bf:14:57:b8: 94:fc:91:75:a4:3d:2c:47:c0:86:7b:bc:93:e7:40: 51:99:4a:05:42:3c:ff:51:31:94:55:35:a4:3a:63: e6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:10:42:9E:4E:C1:D7:92:AE:42:E3:4C:57:4C:6F:01:51:58:A6:48 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TxBCnk7B15KuQuNMV0xvAVFYpkg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.96.0/23 Signature Algorithm: sha256WithRSAEncryption dd:0e:8b:6c:9f:c2:f0:d9:a1:07:ac:b6:03:56:18:3b:cb:ef: 14:1f:75:fe:9d:c6:dc:b7:e7:50:6a:59:f2:3a:58:b8:ce:ae: 60:86:b7:73:71:52:cf:0d:1b:81:36:37:97:ba:d6:fc:84:c9: 01:80:5e:91:a2:8b:8b:39:a6:0a:de:6b:d0:7f:92:42:a1:82: 67:65:83:cd:18:92:ee:28:22:3a:75:d1:64:96:6a:7e:91:5c: db:42:92:e1:73:dc:a9:9a:a9:5c:88:54:71:72:92:c1:fc:55: c7:95:c0:3b:8e:e9:4c:e6:8e:39:3a:ac:56:8d:c1:3e:75:60: 7c:9f:06:c6:05:94:00:2d:53:be:ce:62:ec:b2:45:ce:31:ed: 98:b5:a2:f3:99:76:56:b4:08:e7:20:8e:7a:3f:76:2b:35:34: ec:91:5b:32:30:a9:d5:af:0e:56:4d:fa:97:96:df:0a:cb:b8: b6:f8:8f:c6:ce:a6:f2:aa:80:ac:28:62:52:87:f0:5e:b1:14: 31:48:b1:11:a8:a2:85:c6:67:45:d2:5d:80:3c:51:91:5d:a7: e9:53:fa:29:fb:d4:76:ec:8c:91:21:38:97:7d:9c:5c:15:11: c4:85:b7:c3:30:d3:f2:99:13:59:6f:ad:b1:fc:82:a2:3e:1f: c8:c7:82:75 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEOIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTU4MzhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRGMTA0MjlFNEVDMUQ3 OTJBRTQyRTM0QzU3NEM2RjAxNTE1OEE2NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7LD78A6WiC/Br9FUHLaO+/XAEhe+wyY1JxYfI8DIzoYewPLC/ 5PDbkXNKbJGW42j29iBQC3AUyvTgmNOOJvfooq4G3j5Z+3Lwz2B+2NKHrsMVrdS5 sZAsKQ2GMIEpbw8DhH/6D76rU6SVxu1XkALLvQ14uYarTQUsCgHRlG6zGSuHOeuo ucq9jL13nSEa51OwMre1pKuDlhlXnY2I7yWtnM0NJfVs5fOf4+GXguSWK9GM3q// 3WUC2ZrQ7XOvdy3GeWhrVPKXeQxNcxZvSgUTzn/nnG6tjqROQ0sGvxRXuJT8kXWk PSxHwIZ7vJPnQFGZSgVCPP9RMZRVNaQ6Y+aHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTxBCnk7B15KuQuNMV0xvAVFYpkgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1R4QkNuazdCMTVLdVF1Tk1WMHh2QVZGWXBrZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEb5mAwDQYJKoZIhvcNAQELBQADggEBAN0Oi2yfwvDZoQestgNWGDvL7xQf df6dxty351BqWfI6WLjOrmCGt3NxUs8NG4E2N5e61vyEyQGAXpGii4s5pgrea9B/ kkKhgmdlg80Yku4oIjp10WSWan6RXNtCkuFz3KmaqVyIVHFyksH8VceVwDuO6Uzm jjk6rFaNwT51YHyfBsYFlAAtU77OYuyyRc4x7Zi1ovOZdla0COcgjno/dis1NOyR WzIwqdWvDlZN+peW3wrLuLb4j8bOpvKqgKwoYlKH8F6xFDFIsRGoooXGZ0XSXYA8 UZFdp+lT+in71HbsjJEhOJd9nFwVEcSFt8Mw0/KZE1lvrbH8gqI+H8jHgnU= -----END CERTIFICATE-----Generated at Mon Mar 2 13:07:57 2026 by rpki-client