$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y0Eshijyo0jfn4KkgUFW49_2FyQ.roa File: Y0Eshijyo0jfn4KkgUFW49_2FyQ.roa (raw, json) Hash identifier: 4H6mfWyh/B8CkWBz23c0t4bSk9Ckuf4rxt16O0UR5fw= Subject key identifier: 63:41:2C:86:28:F2:A3:48:DF:9F:82:A4:81:41:56:E3:DF:F6:17:24 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1217 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y0Eshijyo0jfn4KkgUFW49_2FyQ.roa Signing time: Sun 01 Mar 2026 02:48:43 +0000 ROA not before: Sun 01 Mar 2026 02:48:43 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4631 (0x1217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:48:43 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=63412C8628F2A348DF9F82A4814156E3DFF61724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:4f:f8:0c:60:57:50:8d:67:c8:18:df:57: 4f:b8:6b:f5:1c:72:cc:63:49:02:69:ae:3b:e4:19: 3c:d6:ba:d3:c9:55:cf:ac:dc:0c:4c:f5:43:a7:45: c0:70:bd:bc:21:5d:4e:97:b5:26:1a:6d:58:5d:5c: fa:e0:a8:4d:7c:ba:4f:e2:08:52:00:bc:85:0d:1b: 6f:32:1f:eb:c4:f4:79:a3:d7:bd:b9:02:87:9c:d8: 21:92:53:90:c3:fb:d0:9c:77:95:15:29:14:cd:54: f5:d7:3c:77:0e:5d:d1:e5:4b:93:2d:27:8c:b0:32: 52:2d:e5:ed:e6:25:0e:6c:30:5b:64:f2:22:b4:74: 44:83:64:aa:8e:f4:1b:2d:16:54:99:0f:0f:0d:3f: 8d:c2:db:78:3b:ea:41:99:89:51:4f:3d:97:d2:b8: 77:ea:40:a3:0f:aa:f9:7a:40:6c:67:1a:3f:56:24: 0d:c5:49:b2:f4:d4:2f:9f:49:40:6b:44:3f:2b:fe: aa:ae:ca:b7:1f:11:5a:0c:79:ac:68:07:70:55:65: 7c:68:6c:9e:b9:eb:d0:d1:5e:20:cc:34:7d:c5:ba: 94:36:b1:65:d9:92:98:b0:fd:10:bd:5f:c3:eb:e9: 6a:75:ab:ef:28:17:13:20:e4:d7:a8:e6:1d:4a:94: 7f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:41:2C:86:28:F2:A3:48:DF:9F:82:A4:81:41:56:E3:DF:F6:17:24 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y0Eshijyo0jfn4KkgUFW49_2FyQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.28.0/23 Signature Algorithm: sha256WithRSAEncryption c0:a9:35:4a:88:a2:03:76:01:79:f3:94:a9:36:0c:2c:b6:b6: 8a:5d:47:77:df:5b:d3:3c:01:03:0a:0a:5c:25:9c:1c:1e:5e: bb:e3:fc:cf:1c:79:30:08:53:50:95:cb:06:c0:81:28:00:af: 85:52:83:35:f6:eb:59:8c:e3:59:8f:b7:cb:8c:0c:83:bd:c5: 86:9b:98:53:1e:b2:34:7e:f2:2b:3f:29:9d:34:8e:a0:b0:d2: 58:43:80:46:24:76:f5:ca:9f:9a:c6:5d:45:1d:5e:98:6a:11: 87:93:ae:29:11:89:14:25:ac:8c:a1:39:33:0b:31:a5:a8:21: 1f:4c:64:45:79:bb:32:c4:61:17:2e:ca:59:9d:20:3f:9c:98: 5c:99:f2:d5:8a:f6:76:11:d8:10:5a:80:36:dc:88:f3:55:c0: 21:6e:f9:38:dd:eb:f1:77:19:66:0b:90:89:46:d4:05:41:05: 48:05:5b:09:06:c1:50:d4:60:da:63:b9:68:18:5f:4a:d1:c7: f3:f9:5f:de:3f:90:78:ec:52:df:11:a2:a6:6b:8c:1a:75:95: 04:21:93:0d:ca:5a:f4:2b:ea:af:45:bf:a5:60:40:75:ba:a6: d7:b7:ec:8f:8d:7b:3a:b7:2d:cf:79:80:28:75:26:a8:25:5e: 43:f0:74:d2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQ4NDNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYzNDEyQzg2MjhGMkEz NDhERjlGODJBNDgxNDE1NkUzREZGNjE3MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGb0/4DGBXUI1nyBjfV0+4a/UccsxjSQJprjvkGTzWutPJVc+s 3AxM9UOnRcBwvbwhXU6XtSYabVhdXPrgqE18uk/iCFIAvIUNG28yH+vE9Hmj1725 Aoec2CGSU5DD+9Ccd5UVKRTNVPXXPHcOXdHlS5MtJ4ywMlIt5e3mJQ5sMFtk8iK0 dESDZKqO9BstFlSZDw8NP43C23g76kGZiVFPPZfSuHfqQKMPqvl6QGxnGj9WJA3F SbL01C+fSUBrRD8r/qquyrcfEVoMeaxoB3BVZXxobJ6569DRXiDMNH3FupQ2sWXZ kpiw/RC9X8Pr6Wp1q+8oFxMg5Neo5h1KlH+DAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUY0Eshijyo0jfn4KkgUFW49/2FyQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1kwRXNoaWp5bzBqZm40S2tnVUZXNDlfMkZ5US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTxwwDQYJKoZIhvcNAQELBQADggEBAMCpNUqIogN2AXnzlKk2DCy2topd R3ffW9M8AQMKClwlnBweXrvj/M8ceTAIU1CVywbAgSgAr4VSgzX261mM41mPt8uM DIO9xYabmFMesjR+8is/KZ00jqCw0lhDgEYkdvXKn5rGXUUdXphqEYeTrikRiRQl rIyhOTMLMaWoIR9MZEV5uzLEYRcuylmdID+cmFyZ8tWK9nYR2BBagDbciPNVwCFu +Tjd6/F3GWYLkIlG1AVBBUgFWwkGwVDUYNpjuWgYX0rRx/P5X94/kHjsUt8RoqZr jBp1lQQhkw3KWvQr6q9Fv6VgQHW6pte37I+Nezq3Lc95gCh1JqglXkPwdNI= -----END CERTIFICATE-----Generated at Mon Mar 2 10:35:06 2026 by rpki-client