$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XIR2le9OZBd7FwcjYywt9og0Q44.roa File: XIR2le9OZBd7FwcjYywt9og0Q44.roa (raw, json) Hash identifier: YnwMSm3iRqFkF6saya5vfmxIKBoS0GQbs4PaCozMd3c= Subject key identifier: 5C:84:76:95:EF:4E:64:17:7B:17:07:23:63:2C:2D:F6:88:34:43:8E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 10D9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XIR2le9OZBd7FwcjYywt9og0Q44.roa Signing time: Sun 01 Mar 2026 01:54:50 +0000 ROA not before: Sun 01 Mar 2026 01:54:50 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4313 (0x10d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:54:50 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=5C847695EF4E64177B170723632C2DF68834438E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:7d:c5:84:92:e8:54:ba:48:0e:6e:7e:af: 38:4b:ca:97:f0:d3:8b:de:b6:0d:4a:60:d5:57:a0: 95:16:82:61:83:bb:9a:f6:56:07:30:5e:2b:50:5c: dc:69:c1:53:3a:0b:36:2a:30:47:d3:94:6e:52:bd: ca:69:ec:45:f2:84:d7:dc:a0:ed:9b:63:17:e6:df: fa:84:4e:61:a7:cc:af:c4:7a:f8:cd:4d:01:bd:ff: f1:17:a1:44:28:4a:04:0f:45:81:b2:eb:79:f4:da: f0:fa:88:b1:46:b8:b4:a8:7b:92:9f:2b:63:56:83: 3f:bf:78:49:e4:27:0b:5a:5e:74:5a:87:ee:ef:06: a1:9a:a0:0a:e5:19:5c:66:ee:36:8a:71:a8:e8:bc: aa:07:8a:79:3b:74:f4:33:41:21:6a:63:03:0e:08: d5:f8:30:20:08:82:aa:91:d7:fb:cb:f6:4c:dc:4f: e3:4f:3f:11:6d:27:7d:d4:63:de:6c:3a:4b:16:71: 41:b1:e2:aa:69:0a:4c:c1:cd:0f:f6:c3:9f:19:0f: e3:af:14:d9:4c:98:da:b3:0f:cf:34:2e:55:b4:48: b8:51:45:72:7a:d3:dd:75:20:91:44:34:3c:7c:96: ec:4d:b0:51:19:e0:a5:9d:7f:6d:ef:ac:e7:fa:79: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:84:76:95:EF:4E:64:17:7B:17:07:23:63:2C:2D:F6:88:34:43:8E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XIR2le9OZBd7FwcjYywt9og0Q44.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.32.0/22 Signature Algorithm: sha256WithRSAEncryption cc:bc:e9:67:e0:ba:ab:be:26:89:87:7f:fc:61:e1:ab:71:19: 37:60:6e:7e:36:f0:d4:17:3a:3c:c9:8a:40:36:df:58:ea:42: dd:6e:ef:61:d1:bf:b1:34:b0:1c:bc:b0:0d:0d:05:e7:07:4f: cd:dd:f1:c5:9b:4e:36:23:8d:f8:fb:7a:cf:1e:c2:0e:8e:7d: 97:40:07:68:78:95:00:69:ca:74:53:bf:62:da:8c:92:aa:cb: db:be:e1:07:49:7e:5d:7d:e9:d3:32:42:d8:0b:2b:a8:c0:62: 28:77:1b:dc:e7:fe:ae:1b:a0:b9:77:57:13:25:1f:a9:e9:2c: 69:3a:53:13:ae:cd:0e:11:4a:15:2b:d6:ad:ac:2f:f2:29:41: 79:72:fe:66:1e:d6:6c:ba:30:ed:ac:1c:97:2a:d3:7a:2a:97: 1f:a3:c4:ef:28:b0:34:c2:a2:70:c9:9b:08:77:fb:f9:50:fd: 4b:2c:17:2c:99:45:6a:93:3d:15:d7:ef:cb:10:a6:94:ac:88: e4:bc:76:12:b5:df:f1:7a:39:ed:1c:48:c0:fd:f0:ac:7e:c6: 4a:70:c6:1e:be:16:09:db:02:1d:97:46:f2:ec:e3:df:f4:b8: c4:d2:e3:05:c1:ad:98:02:c5:17:20:0e:40:09:de:c0:c1:50: 04:ad:99:48 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICENkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTU0NTBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVDODQ3Njk1RUY0RTY0 MTc3QjE3MDcyMzYzMkMyREY2ODgzNDQzOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzfn3FhJLoVLpIDm5+rzhLypfw04vetg1KYNVXoJUWgmGDu5r2 VgcwXitQXNxpwVM6CzYqMEfTlG5Svcpp7EXyhNfcoO2bYxfm3/qETmGnzK/EevjN TQG9//EXoUQoSgQPRYGy63n02vD6iLFGuLSoe5KfK2NWgz+/eEnkJwtaXnRah+7v BqGaoArlGVxm7jaKcajovKoHink7dPQzQSFqYwMOCNX4MCAIgqqR1/vL9kzcT+NP PxFtJ33UY95sOksWcUGx4qppCkzBzQ/2w58ZD+OvFNlMmNqzD880LlW0SLhRRXJ6 0911IJFENDx8luxNsFEZ4KWdf23vrOf6ecfvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXIR2le9OZBd7FwcjYywt9og0Q44wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hJUjJsZTlPWkJkN0Z3Y2pZeXd0OW9nMFE0NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTyAwDQYJKoZIhvcNAQELBQADggEBAMy86Wfguqu+JomHf/xh4atxGTdg bn428NQXOjzJikA231jqQt1u72HRv7E0sBy8sA0NBecHT83d8cWbTjYjjfj7es8e wg6OfZdAB2h4lQBpynRTv2LajJKqy9u+4QdJfl196dMyQtgLK6jAYih3G9zn/q4b oLl3VxMlH6npLGk6UxOuzQ4RShUr1q2sL/IpQXly/mYe1my6MO2sHJcq03oqlx+j xO8osDTConDJmwh3+/lQ/UssFyyZRWqTPRXX78sQppSsiOS8dhK13/F6Oe0cSMD9 8Kx+xkpwxh6+FgnbAh2XRvLs49/0uMTS4wXBrZgCxRcgDkAJ3sDBUAStmUg= -----END CERTIFICATE-----Generated at Mon Mar 2 11:26:24 2026 by rpki-client