$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fUcBokZOsiL1_IXMGP_zuWLN89M.roa File: fUcBokZOsiL1_IXMGP_zuWLN89M.roa (raw, json) Hash identifier: p4e7S/TRgLoJwneY0cGUOggXEpQEM1/skK/IKurRWZc= Subject key identifier: 7D:47:01:A2:46:4E:B2:22:F5:FC:85:CC:18:FF:F3:B9:62:CD:F3:D3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1211 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fUcBokZOsiL1_IXMGP_zuWLN89M.roa Signing time: Sun 01 Mar 2026 02:48:40 +0000 ROA not before: Sun 01 Mar 2026 02:48:40 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4625 (0x1211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:48:40 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=7D4701A2464EB222F5FC85CC18FFF3B962CDF3D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:50:75:d3:cc:af:4f:c1:4d:0b:3f:f5:54:3b: 8c:ba:c7:8a:90:7c:db:35:c8:cd:b8:71:96:33:37: b9:32:70:b7:a4:fb:b0:05:80:88:9a:6b:47:b9:59: 31:b6:c3:fe:20:ca:df:d8:ab:db:1e:94:67:80:9c: 3f:f4:b2:be:b0:fb:03:34:01:7e:38:0b:a4:72:02: 65:6b:3a:4d:f1:5b:8f:00:f5:c4:fe:e4:7b:04:57: 20:0e:52:94:a2:4f:f4:b8:51:32:12:f8:61:e7:b4: c5:bb:07:5b:6d:95:da:12:fa:cf:a8:2d:9b:3c:a4: 15:29:72:63:c8:0a:16:f3:2c:64:83:62:62:a9:de: d7:0f:5f:45:f6:15:e9:17:dc:8c:3e:9c:e5:89:27: ec:17:42:3f:75:49:6d:0a:88:fb:49:9b:d2:b1:84: e2:c4:a1:e9:b9:d4:f6:86:3c:c1:a4:1c:e1:e6:bc: ba:fd:f6:8a:6a:69:3a:8a:75:66:c4:c0:58:62:30: df:6f:f8:dc:49:52:fb:d1:4b:e2:08:b1:f1:4c:a6: 11:59:f3:14:06:b3:34:97:21:26:79:69:56:38:55: d4:9a:41:53:78:bf:eb:9b:fd:51:03:e2:a1:78:ec: 25:8a:fa:4b:0e:8c:6b:a5:af:bf:21:88:58:dd:3a: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:47:01:A2:46:4E:B2:22:F5:FC:85:CC:18:FF:F3:B9:62:CD:F3:D3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fUcBokZOsiL1_IXMGP_zuWLN89M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.24.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:a8:e9:ce:db:bf:ea:63:10:d0:18:39:56:93:f6:df:2c:f9: 4f:06:9e:96:88:8e:b3:ec:68:09:a8:f2:95:ae:f8:b9:11:e3: 9b:21:bb:28:43:c5:9b:4d:c3:7f:af:36:f8:86:00:46:05:3c: f5:49:23:db:73:bc:4b:76:a2:37:cd:4c:36:ab:3e:49:c7:3f: e3:af:3f:20:4f:da:5d:3d:a2:88:72:27:bc:e4:7c:da:70:21: 8a:74:a4:4b:7c:ec:91:c1:23:95:83:95:33:e7:a4:03:28:85: 39:fb:3f:24:f2:31:52:3f:f5:55:75:ed:e1:4c:c3:5b:45:8b: 03:d0:04:e0:76:4a:df:43:2f:e7:43:fb:4a:df:fe:bc:31:9f: f9:44:fc:84:af:2b:ff:4c:c5:76:c0:f8:0f:0c:8f:2e:a3:09: cd:ac:53:d7:07:2a:29:3e:98:68:68:33:f1:44:d4:3a:14:26: fc:2d:e0:94:c9:99:be:d0:49:12:7d:41:80:92:c2:7a:f7:97: 57:32:52:8d:ec:d1:79:63:4d:53:0c:38:df:3c:4c:4b:42:04: be:6b:56:09:84:80:95:e2:66:1b:48:33:1a:b0:1a:e4:80:1a: 54:82:4c:f7:94:b9:cc:38:e9:00:2b:10:74:2f:d4:1d:15:f7: 62:14:a8:f8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEhEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQ4NDBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdENDcwMUEyNDY0RUIy MjJGNUZDODVDQzE4RkZGM0I5NjJDREYzRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyUHXTzK9PwU0LP/VUO4y6x4qQfNs1yM24cZYzN7kycLek+7AF gIiaa0e5WTG2w/4gyt/Yq9selGeAnD/0sr6w+wM0AX44C6RyAmVrOk3xW48A9cT+ 5HsEVyAOUpSiT/S4UTIS+GHntMW7B1ttldoS+s+oLZs8pBUpcmPIChbzLGSDYmKp 3tcPX0X2FekX3Iw+nOWJJ+wXQj91SW0KiPtJm9KxhOLEoem51PaGPMGkHOHmvLr9 9opqaTqKdWbEwFhiMN9v+NxJUvvRS+IIsfFMphFZ8xQGszSXISZ5aVY4VdSaQVN4 v+ub/VED4qF47CWK+ksOjGulr78hiFjdOrLHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfUcBokZOsiL1/IXMGP/zuWLN89MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ZVY0Jva1pPc2lMMV9JWE1HUF96dVdMTjg5TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBThgwDQYJKoZIhvcNAQELBQADggEBAD6o6c7bv+pjENAYOVaT9t8s+U8G npaIjrPsaAmo8pWu+LkR45shuyhDxZtNw3+vNviGAEYFPPVJI9tzvEt2ojfNTDar PknHP+OvPyBP2l09oohyJ7zkfNpwIYp0pEt87JHBI5WDlTPnpAMohTn7PyTyMVI/ 9VV17eFMw1tFiwPQBOB2St9DL+dD+0rf/rwxn/lE/ISvK/9MxXbA+A8Mjy6jCc2s U9cHKik+mGhoM/FE1DoUJvwt4JTJmb7QSRJ9QYCSwnr3l1cyUo3s0XljTVMMON88 TEtCBL5rVgmEgJXiZhtIMxqwGuSAGlSCTPeUucw46QArEHQv1B0V92IUqPg= -----END CERTIFICATE-----Generated at Mon Mar 2 13:08:05 2026 by rpki-client