$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VGVFBCiglWuh8TnOoFEgvM7ifMc.roa File: VGVFBCiglWuh8TnOoFEgvM7ifMc.roa (raw, json) Hash identifier: W6DIO0rjCAwsWgDdC0jdTLl9tbz9/3sRAB0qiAYoOWY= Subject key identifier: 54:65:45:04:28:A0:95:6B:A1:F1:39:CE:A0:51:20:BC:CE:E2:7C:C7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12A0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VGVFBCiglWuh8TnOoFEgvM7ifMc.roa Signing time: Sun 01 Mar 2026 03:08:49 +0000 ROA not before: Sun 01 Mar 2026 03:08:49 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 27.230.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4768 (0x12a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:08:49 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=5465450428A0956BA1F139CEA05120BCCEE27CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:45:13:80:21:9e:af:cd:f0:34:de:3b:2a: 85:a2:ab:77:e4:90:36:c5:79:5f:02:08:57:f3:5a: 7c:95:a5:38:a2:d8:e2:e2:3e:4d:be:a7:c7:a4:f1: de:b0:fa:7f:5d:fd:8e:6e:82:c8:b6:bb:3e:bf:7f: bd:00:3e:f9:46:d6:8d:36:56:b8:55:5b:53:33:8f: 36:3c:70:2e:5f:c3:be:2d:3a:cf:6a:47:a8:ea:2b: 2e:a2:e9:47:4a:9e:1f:84:0c:09:cb:9d:6a:2e:d7: 75:39:bf:87:f6:8d:2b:fd:4c:3c:b2:e7:91:74:31: 30:f9:63:24:b9:91:d6:63:0d:32:06:67:dc:c6:4d: 92:f9:99:37:5d:a9:23:6d:2c:ed:fa:5f:d5:6b:85: 20:28:74:cf:8d:8b:ea:9c:23:d5:18:b5:ab:0f:1c: 28:48:00:ab:ff:d9:ae:d6:7c:9d:31:f5:9a:b9:25: 7a:3e:3c:27:6e:05:74:56:c1:c7:33:77:33:e2:f9: 97:f7:fa:84:87:59:72:8b:51:61:cb:58:a9:b1:3b: c3:e2:c6:eb:5a:c1:a3:f5:7a:68:64:b9:93:e7:8d: 48:c9:dd:d8:bc:bb:a6:de:36:61:28:b1:70:fa:ca: 82:59:6b:4b:ec:70:9f:5a:5b:6b:5b:67:52:64:3e: 80:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:65:45:04:28:A0:95:6B:A1:F1:39:CE:A0:51:20:BC:CE:E2:7C:C7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VGVFBCiglWuh8TnOoFEgvM7ifMc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.80.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:1c:8f:bd:51:65:04:50:87:82:04:13:26:d4:d3:9c:e1:6c: 1e:10:e2:6d:70:38:fc:7a:49:81:69:0e:42:5e:0b:9b:8e:fc: f9:88:bc:4a:4b:5a:59:d5:de:1e:5f:bd:34:fa:fd:71:92:46: be:95:45:74:c1:b5:72:98:52:0e:94:b6:38:88:32:0d:fe:d2: f5:72:d0:47:4a:e4:43:33:52:fe:d0:7e:31:fe:d7:91:35:91: bd:33:da:cd:eb:8e:7f:b2:00:d4:34:b9:ca:4e:70:40:af:95: 3c:9d:d2:3f:29:fd:46:50:fe:5a:d1:ca:f9:e2:21:11:7a:e7: 4d:6c:cc:00:71:00:47:9f:7a:25:33:98:65:0a:a9:f2:3d:d0: c5:03:43:cf:a2:09:d0:29:79:f1:c2:34:01:27:f0:51:6c:fd: 39:d3:90:c3:1f:c6:25:28:3b:70:c3:0e:7b:e7:75:06:99:fb: 04:d2:fb:dc:bf:35:7d:f7:4e:dc:82:0e:0c:ba:45:f6:b1:c1: 47:e9:b6:5b:59:78:83:03:c7:4a:15:87:ef:a7:38:ac:a7:8f: ba:29:8d:33:13:b6:68:6e:95:a4:db:8b:92:b1:3c:98:ad:6e: a4:0b:cb:c2:f9:c1:a2:d8:14:b5:e7:e4:b8:54:8e:b8:e4:5e: 9d:2e:20:4e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzA4NDlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU0NjU0NTA0MjhBMDk1 NkJBMUYxMzlDRUEwNTEyMEJDQ0VFMjdDQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/+EUTgCGer83wNN47KoWiq3fkkDbFeV8CCFfzWnyVpTii2OLi Pk2+p8ek8d6w+n9d/Y5ugsi2uz6/f70APvlG1o02VrhVW1MzjzY8cC5fw74tOs9q R6jqKy6i6UdKnh+EDAnLnWou13U5v4f2jSv9TDyy55F0MTD5YyS5kdZjDTIGZ9zG TZL5mTddqSNtLO36X9VrhSAodM+Ni+qcI9UYtasPHChIAKv/2a7WfJ0x9Zq5JXo+ PCduBXRWwcczdzPi+Zf3+oSHWXKLUWHLWKmxO8PixutawaP1emhkuZPnjUjJ3di8 u6beNmEosXD6yoJZa0vscJ9aW2tbZ1JkPoB5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVGVFBCiglWuh8TnOoFEgvM7ifMcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ZHVkZCQ2lnbFd1aDhUbk9vRkVndk03aWZNYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMb5lAwDQYJKoZIhvcNAQELBQADggEBAB0cj71RZQRQh4IEEybU05zhbB4Q 4m1wOPx6SYFpDkJeC5uO/PmIvEpLWlnV3h5fvTT6/XGSRr6VRXTBtXKYUg6UtjiI Mg3+0vVy0EdK5EMzUv7QfjH+15E1kb0z2s3rjn+yANQ0ucpOcECvlTyd0j8p/UZQ /lrRyvniIRF6501szABxAEefeiUzmGUKqfI90MUDQ8+iCdApefHCNAEn8FFs/TnT kMMfxiUoO3DDDnvndQaZ+wTS+9y/NX33TtyCDgy6RfaxwUfptltZeIMDx0oVh++n OKynj7opjTMTtmhulaTbi5KxPJitbqQLy8L5waLYFLXn5LhUjrjkXp0uIE4= -----END CERTIFICATE-----Generated at Mon Mar 2 10:06:48 2026 by rpki-client