$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z2cqVsizKyvEoBV-nF-1ri3I-GQ.roa File: Z2cqVsizKyvEoBV-nF-1ri3I-GQ.roa (raw, json) Hash identifier: FQZJzm2MCLXwoed4ffaniAl/IeacpHD0FuL2Dn4qyeE= Subject key identifier: 67:67:2A:56:C8:B3:2B:2B:C4:A0:15:7E:9C:5F:B5:AE:2D:C8:F8:64 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1345 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z2cqVsizKyvEoBV-nF-1ri3I-GQ.roa Signing time: Sun 01 Mar 2026 03:40:40 +0000 ROA not before: Sun 01 Mar 2026 03:40:40 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4933 (0x1345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:40:40 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=67672A56C8B32B2BC4A0157E9C5FB5AE2DC8F864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d7:7c:43:b4:be:fb:13:43:ca:73:9c:2d:ba: 9b:e8:20:57:18:ed:f3:40:81:bb:7c:ed:31:a1:9b: 92:6f:f6:e6:34:be:97:31:90:5b:c0:5a:0b:af:39: e2:2b:ed:d7:ec:9c:b1:b1:e8:f2:af:99:b9:ab:d4: d3:28:54:ad:c6:9b:38:75:36:e0:64:9e:8d:1c:bf: 55:3e:31:74:fb:92:2b:95:55:75:a1:fc:8a:ed:3a: 8b:68:d9:60:a3:c3:11:23:da:51:df:d3:4b:2b:ca: 31:2f:da:7d:a0:cb:26:e4:7c:51:5d:12:a6:7e:64: eb:94:2b:a3:a6:71:c5:c0:92:64:9a:52:69:1a:3c: 1a:ba:56:af:12:e4:43:b7:f7:e0:27:37:60:f4:38: a0:ae:41:64:0c:be:14:28:32:ad:92:1c:55:a7:ac: 57:a9:3a:0e:a4:b1:2a:79:b8:95:8e:fc:dd:53:35: ea:28:9f:c1:93:bd:c0:0b:30:a4:b0:fb:2b:24:69: 9a:b0:80:38:6a:db:66:f9:13:ea:d6:86:0b:fd:1f: f9:2b:44:3c:17:7d:4b:ac:42:bb:0e:c3:44:ec:ad: 4a:19:fd:6c:f5:98:ac:0d:8a:09:d6:2c:77:dc:32: 08:52:fb:8b:d5:96:bc:b5:b2:f1:b1:05:8a:cd:b5: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:67:2A:56:C8:B3:2B:2B:C4:A0:15:7E:9C:5F:B5:AE:2D:C8:F8:64 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z2cqVsizKyvEoBV-nF-1ri3I-GQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.2.0/23 Signature Algorithm: sha256WithRSAEncryption 30:3f:da:cb:81:db:24:a6:45:01:cc:f7:48:26:e0:96:74:ba: 35:95:0a:ee:ff:8f:b5:ff:1e:17:89:4b:cb:50:bf:64:dc:d3: 06:32:47:27:a1:c3:f5:e7:9f:aa:8c:1e:1c:aa:15:f0:9d:dd: e0:c7:1f:7e:8f:0e:2c:7a:6e:af:77:33:29:d8:84:36:f8:e7: 98:ef:e9:91:9b:c0:91:90:1f:21:f6:06:b7:4b:20:c6:db:04: 70:aa:97:e6:29:09:1b:ea:e6:5f:7d:c2:8d:39:07:fe:7a:35: 2f:3d:f3:a9:0f:a3:af:f0:f5:b5:cd:dc:6f:80:36:40:75:61: 1a:01:1b:a6:8b:6b:ea:0d:18:e8:4e:64:7e:28:2b:d9:4e:a9: 15:0b:8e:8b:52:cf:4e:7c:bb:16:67:4a:a4:d1:5b:06:6d:b6: b9:9a:41:26:a2:46:9e:55:24:30:8f:24:92:87:ec:4d:3c:4b: d6:cd:6d:2b:e5:51:d9:ab:af:ea:c4:53:f1:dd:42:78:4f:03: 01:1e:97:de:56:89:fa:80:91:d9:3e:ee:de:fc:99:ea:43:28: 07:25:d1:1b:3e:6b:21:eb:57:ec:f1:1d:55:b3:e6:32:3f:ba: 75:2f:a6:b0:eb:25:85:c4:c6:12:93:8b:d8:16:64:2c:06:73: ef:73:10:f0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICE0UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzQwNDBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY3NjcyQTU2QzhCMzJC MkJDNEEwMTU3RTlDNUZCNUFFMkRDOEY4NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDx13xDtL77E0PKc5wtupvoIFcY7fNAgbt87TGhm5Jv9uY0vpcx kFvAWguvOeIr7dfsnLGx6PKvmbmr1NMoVK3Gmzh1NuBkno0cv1U+MXT7kiuVVXWh /IrtOoto2WCjwxEj2lHf00sryjEv2n2gyybkfFFdEqZ+ZOuUK6OmccXAkmSaUmka PBq6Vq8S5EO39+AnN2D0OKCuQWQMvhQoMq2SHFWnrFepOg6ksSp5uJWO/N1TNeoo n8GTvcALMKSw+yskaZqwgDhq22b5E+rWhgv9H/krRDwXfUusQrsOw0TsrUoZ/Wz1 mKwNignWLHfcMghS+4vVlry1svGxBYrNtVzNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZ2cqVsizKyvEoBV+nF+1ri3I+GQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1oyY3FWc2l6S3l2RW9CVi1uRi0xcmkzSS1HUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTgIwDQYJKoZIhvcNAQELBQADggEBADA/2suB2ySmRQHM90gm4JZ0ujWV Cu7/j7X/HheJS8tQv2Tc0wYyRyehw/Xnn6qMHhyqFfCd3eDHH36PDix6bq93MynY hDb455jv6ZGbwJGQHyH2BrdLIMbbBHCql+YpCRvq5l99wo05B/56NS8986kPo6/w 9bXN3G+ANkB1YRoBG6aLa+oNGOhOZH4oK9lOqRULjotSz058uxZnSqTRWwZttrma QSaiRp5VJDCPJJKH7E08S9bNbSvlUdmrr+rEU/HdQnhPAwEel95WifqAkdk+7t78 mepDKAcl0Rs+ayHrV+zxHVWz5jI/unUvprDrJYXExhKTi9gWZCwGc+9zEPA= -----END CERTIFICATE-----Generated at Mon Mar 2 11:29:23 2026 by rpki-client