$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Za3hNycMHows_NUNNUiLupNdqT4.roa File: Za3hNycMHows_NUNNUiLupNdqT4.roa (raw, json) Hash identifier: W9/Rtl5d1xKZuiZ1tWswBki2tl3O7tI7QZhzSXI3Ftg= Subject key identifier: 65:AD:E1:37:27:0C:1E:8C:2C:FC:D5:0D:35:48:8B:BA:93:5D:A9:3E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 10B1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Za3hNycMHows_NUNNUiLupNdqT4.roa Signing time: Sun 01 Mar 2026 01:49:15 +0000 ROA not before: Sun 01 Mar 2026 01:49:15 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4273 (0x10b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:49:15 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=65ADE137270C1E8C2CFCD50D35488BBA935DA93E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:55:85:b9:7f:16:8c:bf:07:12:b1:d4:f9: 6e:d8:7a:59:33:6a:9e:af:2b:42:50:8b:04:b1:2f: b2:c8:84:f5:8b:1b:cd:8f:7a:3a:48:01:12:be:28: fd:15:73:fb:d9:ad:cc:36:29:03:52:9a:fa:83:d6: 27:bd:2d:49:4a:d7:d3:b7:96:ea:d6:84:49:99:83: 83:31:01:5e:2c:78:e9:11:4d:d2:04:07:a0:2b:68: e7:2d:76:a3:ea:e2:77:57:14:7e:6a:58:49:0a:1c: b4:42:04:55:63:8b:37:e6:a8:4c:d9:a8:19:7c:23: 3f:80:4a:a8:80:cb:ba:14:ad:3e:14:f8:6f:bf:37: 42:75:31:1d:0a:f6:4b:5d:ba:4f:c3:43:79:d0:00: b7:49:92:b3:14:56:8e:8a:17:4f:ce:6c:de:0e:81: 11:ce:a1:bc:3f:8c:e5:9a:97:a6:8f:66:73:4f:74: 63:6d:87:40:a7:85:0a:2b:e2:56:44:4c:1c:43:61: ac:1a:b3:47:60:f5:d7:0b:b3:95:a7:5a:d4:ec:30: 08:b8:cd:f4:dc:23:83:37:f1:24:01:e3:78:6b:11: 65:e4:27:fe:2a:34:3d:bc:4d:73:b3:9e:74:a5:fd: 05:45:d2:5f:d3:5e:91:ea:47:ea:df:98:6e:68:7d: e0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AD:E1:37:27:0C:1E:8C:2C:FC:D5:0D:35:48:8B:BA:93:5D:A9:3E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Za3hNycMHows_NUNNUiLupNdqT4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.21.0/24 Signature Algorithm: sha256WithRSAEncryption 55:a0:e6:68:d4:82:b6:42:23:84:ba:b3:ab:2b:7a:74:29:42: e6:40:2d:c0:40:07:93:9a:b3:fd:a2:94:ef:67:38:10:7f:94: 5b:2b:70:80:27:e3:49:71:38:26:a4:48:65:ff:2f:ba:2c:b3: 3d:31:7a:d4:49:d2:69:ee:78:29:55:1e:08:65:6a:3d:f2:aa: a5:e8:3d:bd:b8:9a:3f:6b:02:ce:a8:ef:1f:12:e7:8b:7a:9d: 27:ef:fd:d4:c5:54:75:65:95:2f:08:e4:40:9c:bc:7a:93:6e: db:42:0a:91:c0:85:be:14:ce:5d:f6:e7:6e:96:54:66:67:d5: 04:c9:14:81:21:e1:5d:b4:63:34:98:e0:92:cb:6b:d5:13:ec: 2f:05:cd:58:60:3d:39:7f:db:5b:f3:99:cb:2a:b2:23:9d:95: 81:88:0d:49:01:53:80:ec:6d:b8:92:81:68:da:b4:b2:43:09: 82:24:56:cb:ce:56:f1:33:fa:49:23:3d:6b:c7:1d:84:09:c4: ad:f4:50:71:b3:27:de:9e:03:0f:48:14:5b:9c:29:39:6a:b4: da:15:a1:49:53:5e:06:e8:14:96:e9:a1:35:ad:b4:fa:2c:aa: 8f:68:b2:8d:22:05:22:b8:c9:8c:4d:ce:9b:67:0e:26:56:0c: 21:34:87:f5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICELEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTQ5MTVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY1QURFMTM3MjcwQzFF OEMyQ0ZDRDUwRDM1NDg4QkJBOTM1REE5M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRalWFuX8WjL8HErHU+W7Yelkzap6vK0JQiwSxL7LIhPWLG82P ejpIARK+KP0Vc/vZrcw2KQNSmvqD1ie9LUlK19O3lurWhEmZg4MxAV4seOkRTdIE B6AraOctdqPq4ndXFH5qWEkKHLRCBFVjizfmqEzZqBl8Iz+ASqiAy7oUrT4U+G+/ N0J1MR0K9ktduk/DQ3nQALdJkrMUVo6KF0/ObN4OgRHOobw/jOWal6aPZnNPdGNt h0CnhQor4lZETBxDYawas0dg9dcLs5WnWtTsMAi4zfTcI4M38SQB43hrEWXkJ/4q ND28TXOznnSl/QVF0l/TXpHqR+rfmG5ofeBlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZa3hNycMHows/NUNNUiLupNdqT4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1phM2hOeWNNSG93c19OVU5OVWlMdXBOZHFUNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABTxUwDQYJKoZIhvcNAQELBQADggEBAFWg5mjUgrZCI4S6s6srenQpQuZA LcBAB5Oas/2ilO9nOBB/lFsrcIAn40lxOCakSGX/L7ossz0xetRJ0mnueClVHghl aj3yqqXoPb24mj9rAs6o7x8S54t6nSfv/dTFVHVllS8I5ECcvHqTbttCCpHAhb4U zl32526WVGZn1QTJFIEh4V20YzSY4JLLa9UT7C8FzVhgPTl/21vzmcsqsiOdlYGI DUkBU4DsbbiSgWjatLJDCYIkVsvOVvEz+kkjPWvHHYQJxK30UHGzJ96eAw9IFFuc KTlqtNoVoUlTXgboFJbpoTWttPosqo9oso0iBSK4yYxNzptnDiZWDCE0h/U= -----END CERTIFICATE-----Generated at Mon Mar 2 13:10:44 2026 by rpki-client