$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_5t7ieQijCRK9pgN_9qCiG0dHc4.roa File: _5t7ieQijCRK9pgN_9qCiG0dHc4.roa (raw, json) Hash identifier: VRmyn+Qp6MtPtwAN26QHGBVdFO2bQqXMYOtkSLreL/s= Subject key identifier: FF:9B:7B:89:E4:22:8C:24:4A:F6:98:0D:FF:DA:82:88:6D:1D:1D:CE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1129 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_5t7ieQijCRK9pgN_9qCiG0dHc4.roa Signing time: Sun 01 Mar 2026 02:07:40 +0000 ROA not before: Sun 01 Mar 2026 02:07:40 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4393 (0x1129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:07:40 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=FF9B7B89E4228C244AF6980DFFDA82886D1D1DCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:d6:7b:18:93:ce:8d:65:80:0b:38:39:0a: 40:87:b3:96:8b:ee:c5:46:86:ca:90:29:a4:6a:ce: 34:9a:72:e3:39:65:83:1b:03:7b:33:53:23:0c:ad: 55:5a:07:51:f3:b6:d5:85:77:c5:b4:5c:85:3d:57: 69:65:8e:18:78:96:0c:ef:c5:87:81:99:87:8c:5f: 6e:e2:18:e4:47:17:73:2c:4b:26:de:fd:d5:3f:f7: 4e:79:ca:0b:79:e7:62:41:b9:bb:45:fa:ee:bf:8f: b3:fb:3f:53:36:8f:0d:4b:a3:a8:05:ad:02:f5:46: 9e:12:8b:09:2d:1c:e6:47:0a:2d:56:bf:33:31:c7: 18:0f:88:d3:be:77:5e:53:e0:20:1e:fa:91:1c:84: cc:44:d1:77:a9:ba:7e:bf:94:8c:69:21:fa:9d:95: fa:54:0e:98:81:db:a3:e4:03:c6:8f:27:43:bc:ac: 05:7c:61:61:81:f9:1b:be:ff:a1:c6:af:04:41:24: c4:b9:7e:b5:24:51:66:4e:5f:d7:b8:96:93:28:44: 1d:32:0a:40:0f:fc:3a:b0:29:58:00:49:70:b2:ab: 92:c6:89:0d:9b:3d:95:07:10:6b:66:32:ec:c9:03: fc:25:8c:2f:89:1f:c2:ff:e0:3b:54:9c:47:7e:91: fb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9B:7B:89:E4:22:8C:24:4A:F6:98:0D:FF:DA:82:88:6D:1D:1D:CE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_5t7ieQijCRK9pgN_9qCiG0dHc4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.20.0/22 Signature Algorithm: sha256WithRSAEncryption 44:63:3e:ce:e3:d6:98:8f:71:b5:aa:4e:a2:54:cc:ff:ad:d8: 6a:57:53:60:ad:c7:fe:95:72:d5:8e:70:35:47:a7:e8:68:73: ea:7a:96:18:86:93:f1:b0:d0:2e:e3:0a:ca:2b:48:10:84:c7: d3:11:66:79:0e:6f:2f:0c:99:52:f0:23:ed:ae:9b:12:f6:fd: 16:cd:bf:cd:cd:3a:2f:ae:85:9d:f7:32:59:15:b7:e0:c0:f3: 3e:d0:7d:4d:77:ae:b8:1d:56:f0:50:df:e8:3f:5b:5e:a2:88: 90:3a:dc:87:e0:14:20:54:2e:37:5b:98:2b:82:ea:43:65:11: cc:15:fe:10:6e:99:d4:0d:1d:71:cb:f6:89:17:aa:be:20:b2: f6:52:47:65:8e:83:72:bf:e9:a8:bc:1d:9a:bd:35:ad:0a:80: 98:d3:17:60:61:f5:cf:85:4f:38:6d:90:1f:82:f6:4c:46:70: a8:f3:14:d6:7d:94:b3:65:16:43:2c:5e:3e:50:8d:c2:7d:b3: 37:17:70:fb:04:f8:e1:57:5a:c8:5a:9a:99:61:c0:ff:58:93: 01:3b:4e:c3:b7:39:ef:3e:25:5d:f9:ec:fa:7c:c4:69:fc:37: 3f:e4:28:14:70:ec:b5:80:93:57:b6:5a:86:3c:2a:74:55:10: ea:25:2e:ef -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICESkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjA3NDBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZGOUI3Qjg5RTQyMjhD MjQ0QUY2OTgwREZGREE4Mjg4NkQxRDFEQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP6dZ7GJPOjWWACzg5CkCHs5aL7sVGhsqQKaRqzjSacuM5ZYMb A3szUyMMrVVaB1HzttWFd8W0XIU9V2lljhh4lgzvxYeBmYeMX27iGORHF3MsSybe /dU/9055ygt552JBubtF+u6/j7P7P1M2jw1Lo6gFrQL1Rp4SiwktHOZHCi1WvzMx xxgPiNO+d15T4CAe+pEchMxE0Xepun6/lIxpIfqdlfpUDpiB26PkA8aPJ0O8rAV8 YWGB+Ru+/6HGrwRBJMS5frUkUWZOX9e4lpMoRB0yCkAP/DqwKVgASXCyq5LGiQ2b PZUHEGtmMuzJA/wljC+JH8L/4DtUnEd+kfuvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/5t7ieQijCRK9pgN/9qCiG0dHc4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L181dDdpZVFpakNSSzlwZ05fOXFDaUcwZEhjNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBQhQwDQYJKoZIhvcNAQELBQADggEBAERjPs7j1piPcbWqTqJUzP+t2GpX U2Ctx/6VctWOcDVHp+hoc+p6lhiGk/Gw0C7jCsorSBCEx9MRZnkOby8MmVLwI+2u mxL2/RbNv83NOi+uhZ33MlkVt+DA8z7QfU13rrgdVvBQ3+g/W16iiJA63IfgFCBU LjdbmCuC6kNlEcwV/hBumdQNHXHL9okXqr4gsvZSR2WOg3K/6ai8HZq9Na0KgJjT F2Bh9c+FTzhtkB+C9kxGcKjzFNZ9lLNlFkMsXj5QjcJ9szcXcPsE+OFXWshamplh wP9YkwE7TsO3Oe8+JV357Pp8xGn8Nz/kKBRw7LWAk1e2WoY8KnRVEOolLu8= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:07 2026 by rpki-client