$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dyR-obOX6B4-GjZKn6lvE1eyTRg.roa File: dyR-obOX6B4-GjZKn6lvE1eyTRg.roa (raw, json) Hash identifier: K7MuPG0wQXbSNYnmshgXbVUqpfVk2dQ3DZktRkRHD9o= Subject key identifier: 77:24:7E:A1:B3:97:E8:1E:3E:1A:36:4A:9F:A9:6F:13:57:B2:4D:18 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12C8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dyR-obOX6B4-GjZKn6lvE1eyTRg.roa Signing time: Sun 01 Mar 2026 03:16:23 +0000 ROA not before: Sun 01 Mar 2026 03:16:23 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4808 (0x12c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:16:23 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=77247EA1B397E81E3E1A364A9FA96F1357B24D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:2a:c5:4d:79:ea:22:3b:fd:d7:ec:d3:33: d8:e6:49:dc:e3:56:e4:60:75:ed:b3:6d:1d:6f:91: bf:2f:4c:b1:dd:04:ad:38:c7:c3:26:f6:75:5b:a0: fb:62:97:28:a0:2c:53:56:1d:5f:26:8b:4e:d3:6c: ae:7a:cc:0d:c4:07:87:49:e0:f8:1a:19:8b:14:47: 99:22:da:c3:ef:31:89:5f:5e:58:47:7d:91:ab:33: 8c:07:94:96:2b:d5:c3:5c:3b:84:f1:f5:8e:39:ce: cc:3f:85:3a:f2:09:ab:3e:5c:bc:5c:2f:b0:ad:c2: 24:1b:fd:0f:a7:d4:71:60:ef:b7:95:dd:60:2e:bb: f2:83:4d:d2:bd:d2:0b:05:66:c8:b2:95:fe:b6:92: ee:95:99:28:88:bd:7f:14:85:d2:0c:6e:86:a6:11: 6c:98:91:8f:14:e1:73:9c:35:af:19:4b:46:c3:67: 17:f2:4e:56:be:2f:a9:22:ac:5e:bb:79:b3:a0:31: d1:4c:63:71:fb:89:bd:74:10:ac:cd:e2:27:c7:4d: d5:b2:90:de:af:5b:95:ef:62:c1:ac:94:eb:49:87: 37:22:81:e5:b7:7f:43:df:36:e0:e4:31:4e:99:2e: e2:06:e9:66:ff:cd:83:c2:fb:c3:55:c0:a6:a2:95: fd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:24:7E:A1:B3:97:E8:1E:3E:1A:36:4A:9F:A9:6F:13:57:B2:4D:18 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dyR-obOX6B4-GjZKn6lvE1eyTRg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.246.0/23 Signature Algorithm: sha256WithRSAEncryption 64:fe:6f:2e:e1:a0:d7:ba:aa:4b:77:20:fd:85:ec:a6:cf:5c: fb:a9:9b:76:75:50:11:bf:f1:de:46:23:92:23:b0:b3:d1:33: 43:4a:33:8a:ff:6a:ef:b0:df:e2:5c:c9:3d:a0:7d:bf:95:07: d8:e8:fd:83:12:d0:f4:ea:03:61:80:4f:d1:1f:81:8a:20:46: 68:16:ea:71:d7:fe:cc:d4:a4:00:ad:d0:ae:2e:2a:53:05:ca: 6d:16:aa:93:77:c8:4c:22:7c:a2:92:1b:84:7e:de:77:53:b3: 8c:96:0d:a7:6a:5e:a2:9c:8d:ac:8e:8e:64:0b:22:2c:86:51: 4c:7f:50:0b:f3:6c:69:a7:99:ec:18:89:00:4a:db:ff:02:ac: 70:6c:e3:7c:2c:2b:db:44:e2:c6:c8:17:61:9a:e5:4f:b5:86: 98:cd:a7:6f:f2:37:d6:09:a1:8f:ca:b1:44:7f:40:a2:87:8c: 80:e9:13:c5:66:87:e3:46:8b:4b:91:69:ed:ee:f4:4e:21:b0: 54:64:26:98:0b:69:c9:a2:17:ce:80:8d:25:b9:0b:be:95:a0: 7f:e4:95:e4:1e:ea:7f:f9:06:81:6f:10:1e:a8:90:ec:6e:73: fc:72:81:f6:ab:0d:cf:c2:e6:30:0b:a5:5d:c3:49:5c:2a:8d: 23:10:86:92 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEsgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzE2MjNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc3MjQ3RUExQjM5N0U4 MUUzRTFBMzY0QTlGQTk2RjEzNTdCMjREMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw7SrFTXnqIjv91+zTM9jmSdzjVuRgde2zbR1vkb8vTLHdBK04 x8Mm9nVboPtilyigLFNWHV8mi07TbK56zA3EB4dJ4PgaGYsUR5ki2sPvMYlfXlhH fZGrM4wHlJYr1cNcO4Tx9Y45zsw/hTryCas+XLxcL7CtwiQb/Q+n1HFg77eV3WAu u/KDTdK90gsFZsiylf62ku6VmSiIvX8UhdIMboamEWyYkY8U4XOcNa8ZS0bDZxfy Tla+L6kirF67ebOgMdFMY3H7ib10EKzN4ifHTdWykN6vW5XvYsGslOtJhzcigeW3 f0PfNuDkMU6ZLuIG6Wb/zYPC+8NVwKailf2lAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdyR+obOX6B4+GjZKn6lvE1eyTRgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2R5Ui1vYk9YNkI0LUdqWktuNmx2RTFleVRSZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS/YwDQYJKoZIhvcNAQELBQADggEBAGT+by7hoNe6qkt3IP2F7KbPXPup m3Z1UBG/8d5GI5IjsLPRM0NKM4r/au+w3+JcyT2gfb+VB9jo/YMS0PTqA2GAT9Ef gYogRmgW6nHX/szUpACt0K4uKlMFym0WqpN3yEwifKKSG4R+3ndTs4yWDadqXqKc jayOjmQLIiyGUUx/UAvzbGmnmewYiQBK2/8CrHBs43wsK9tE4sbIF2Ga5U+1hpjN p2/yN9YJoY/KsUR/QKKHjIDpE8Vmh+NGi0uRae3u9E4hsFRkJpgLacmiF86AjSW5 C76VoH/kleQe6n/5BoFvEB6okOxuc/xygfarDc/C5jALpV3DSVwqjSMQhpI= -----END CERTIFICATE-----Generated at Mon Mar 2 06:55:48 2026 by rpki-client