$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/X3gZAfCMHdpJuba6wRYZI8wInoQ.roa File: X3gZAfCMHdpJuba6wRYZI8wInoQ.roa (raw, json) Hash identifier: 4h4qCbTtTCHdQehI13msgMmlpr99RvjyeY1hrjI1MY4= Subject key identifier: 5F:78:19:01:F0:8C:1D:DA:49:B9:B6:BA:C1:16:19:23:CC:08:9E:84 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 133A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X3gZAfCMHdpJuba6wRYZI8wInoQ.roa Signing time: Sun 01 Mar 2026 03:36:30 +0000 ROA not before: Sun 01 Mar 2026 03:36:30 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4922 (0x133a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:36:30 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=5F781901F08C1DDA49B9B6BAC1161923CC089E84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:08:34:ef:14:6b:78:d9:77:b3:0c:86:65:1f: 04:e9:d5:b8:bf:9c:e6:9c:82:85:a8:e0:16:fa:bc: db:45:aa:a5:a6:4a:f4:a7:dc:d0:77:43:e7:3b:1b: 07:76:18:dd:92:0a:2a:39:e4:f0:72:b6:c7:b8:1e: 15:ac:87:ac:3c:37:ca:a4:3e:09:ba:cd:2b:eb:81: 9d:47:5d:3e:39:ce:b7:4b:63:e3:46:df:6e:f3:92: f3:8e:e8:03:ec:a9:af:e5:9c:32:c7:68:6c:3e:33: 43:8e:39:a4:f2:39:15:65:44:1a:c1:87:ae:ff:08: 23:99:88:9e:74:ca:10:95:5f:52:39:90:f0:b1:d1: ee:a5:3d:9a:53:f5:4c:a9:8d:03:48:8e:1a:c2:f1: 7e:21:ac:b6:c9:10:17:b7:b0:de:c8:37:b0:88:33: 51:60:2e:67:0c:e2:1d:17:49:7b:a6:ad:8a:0e:59: db:a1:dc:bf:ea:76:e8:95:49:50:7f:2c:36:b8:1c: b0:70:62:40:3f:f2:6e:ec:14:1d:52:e8:ad:d2:7a: 07:4c:12:ee:c2:d7:d7:be:1a:19:a5:0a:26:5d:42: 72:14:2c:ad:47:b1:5d:ce:c2:6c:61:30:28:0e:fe: fd:45:0c:28:ca:f6:bd:63:31:7e:1e:a5:6a:37:28: 47:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:78:19:01:F0:8C:1D:DA:49:B9:B6:BA:C1:16:19:23:CC:08:9E:84 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/X3gZAfCMHdpJuba6wRYZI8wInoQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.216.0/21 Signature Algorithm: sha256WithRSAEncryption 44:19:ca:7f:32:cc:7c:40:dc:1b:23:29:1e:02:e8:f6:2a:6a: 5b:d0:7d:a6:b2:98:50:d5:53:8a:47:8a:f2:9d:24:14:2c:83: 8c:b7:91:42:5f:90:c3:57:4b:f5:59:95:27:a9:1b:f7:15:78: 00:cc:3b:38:83:03:bd:bf:fb:81:8e:9a:59:bf:40:93:81:2d: 8f:0f:31:bf:9b:1e:80:ec:79:33:dd:78:15:c8:7a:cd:0d:3a: ee:0a:68:72:b4:87:0d:2d:45:0d:31:4c:98:ce:96:c0:dc:6d: 98:dc:40:bf:38:3f:41:e5:31:06:7e:ee:6f:a2:a4:71:9b:a5: 77:35:8b:02:b4:53:a7:8e:a3:58:cd:b3:6e:c6:cf:b9:64:4c: 86:b8:15:a7:52:76:d3:73:0b:22:fe:13:62:5a:26:11:66:85: 0c:2b:0b:d3:cf:5a:af:d6:87:c1:7c:9d:dc:ef:a5:c4:d4:1f: fa:0e:20:eb:bb:05:36:d8:a1:92:e3:8d:94:1c:dc:27:54:96: 6d:6c:85:64:5d:d2:f4:67:fa:d9:9b:0b:3d:ba:4f:2b:af:e9: 0b:37:75:ae:48:cc:25:8a:16:1f:1a:bd:59:b8:ae:5b:04:4d: 3b:00:39:3b:2b:5a:da:8f:01:26:2e:1d:f4:ac:3d:5e:22:91: 0d:07:54:27 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEzowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzM2MzBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVGNzgxOTAxRjA4QzFE REE0OUI5QjZCQUMxMTYxOTIzQ0MwODlFODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhCDTvFGt42XezDIZlHwTp1bi/nOacgoWo4Bb6vNtFqqWmSvSn 3NB3Q+c7Gwd2GN2SCio55PBytse4HhWsh6w8N8qkPgm6zSvrgZ1HXT45zrdLY+NG 327zkvOO6APsqa/lnDLHaGw+M0OOOaTyORVlRBrBh67/CCOZiJ50yhCVX1I5kPCx 0e6lPZpT9UypjQNIjhrC8X4hrLbJEBe3sN7IN7CIM1FgLmcM4h0XSXumrYoOWduh 3L/qduiVSVB/LDa4HLBwYkA/8m7sFB1S6K3SegdMEu7C19e+GhmlCiZdQnIULK1H sV3OwmxhMCgO/v1FDCjK9r1jMX4epWo3KEeFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUX3gZAfCMHdpJuba6wRYZI8wInoQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1gzZ1pBZkNNSGRwSnViYTZ3UllaSTh3SW5vUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPcn9gwDQYJKoZIhvcNAQELBQADggEBAEQZyn8yzHxA3BsjKR4C6PYqalvQ faaymFDVU4pHivKdJBQsg4y3kUJfkMNXS/VZlSepG/cVeADMOziDA72/+4GOmlm/ QJOBLY8PMb+bHoDseTPdeBXIes0NOu4KaHK0hw0tRQ0xTJjOlsDcbZjcQL84P0Hl MQZ+7m+ipHGbpXc1iwK0U6eOo1jNs27Gz7lkTIa4FadSdtNzCyL+E2JaJhFmhQwr C9PPWq/Wh8F8ndzvpcTUH/oOIOu7BTbYoZLjjZQc3CdUlm1shWRd0vRn+tmbCz26 Tyuv6Qs3da5IzCWKFh8avVm4rlsETTsAOTsrWtqPASYuHfSsPV4ikQ0HVCc= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:15 2026 by rpki-client