$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fyUSJerxK9WuxIzypiV2NiFMnwI.roa File: fyUSJerxK9WuxIzypiV2NiFMnwI.roa (raw, json) Hash identifier: nSbOlxLlYCEnDmWMv3/ZF3dOX4cSiq2f7dX1ePFXP7o= Subject key identifier: 7F:25:12:25:EA:F1:2B:D5:AE:C4:8C:F2:A6:25:76:36:21:4C:9F:02 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1237 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fyUSJerxK9WuxIzypiV2NiFMnwI.roa Signing time: Sun 01 Mar 2026 02:52:32 +0000 ROA not before: Sun 01 Mar 2026 02:52:32 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4663 (0x1237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:52:32 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=7F251225EAF12BD5AEC48CF2A6257636214C9F02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:c5:05:f8:79:5c:de:a0:2b:af:fe:64:3c: 98:ac:a2:0c:20:7b:e9:bd:62:35:43:ad:c8:0d:0d: a9:67:99:52:6b:df:3b:91:15:97:a0:76:99:fb:98: 61:02:0a:ae:93:ad:2a:af:27:5c:66:d0:ed:7b:24: af:ea:7d:95:7a:64:0f:26:68:b0:40:32:ea:30:16: 17:20:32:a0:ba:97:ce:3e:c7:85:8e:bb:55:11:c3: cf:76:62:34:ac:76:ce:ae:cc:4b:18:ab:3c:bb:38: 25:d1:60:5a:1d:49:fa:87:fa:b0:5f:72:40:8d:2b: 34:2f:4e:1f:f1:7b:bf:a8:c4:9a:08:1e:5e:10:33: 6c:84:cd:12:ba:50:29:b2:10:f9:59:32:d5:d5:5b: ff:d1:0c:56:70:8a:9b:8e:4a:b8:76:f8:9a:69:c2: 8b:7a:51:0d:5a:e2:f8:89:74:17:07:c0:23:35:91: 50:4d:36:2f:01:9b:59:a7:19:df:f4:7f:7a:8c:d0: 3f:0f:ad:eb:8a:b2:4c:c3:3e:cc:b1:2d:b5:1e:d5: 73:90:bd:0d:a1:d0:21:21:29:1a:07:c4:48:5c:08: 53:fd:68:5f:4c:34:9b:34:e0:0a:c6:a6:0f:b6:cb: 81:bc:86:a5:6a:55:e8:72:6b:42:70:43:75:41:b2: 0c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:25:12:25:EA:F1:2B:D5:AE:C4:8C:F2:A6:25:76:36:21:4C:9F:02 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fyUSJerxK9WuxIzypiV2NiFMnwI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.212.0/22 Signature Algorithm: sha256WithRSAEncryption 59:b4:e1:bf:d0:81:26:c3:66:c4:1a:12:b1:5a:86:fa:00:8d: 13:35:bb:30:ac:6b:0a:91:a3:c4:8a:29:40:ba:24:ac:54:62: e8:bb:ae:91:16:5a:33:5b:c6:75:fc:f7:23:af:4b:c0:1c:23: dd:c4:ae:f1:52:96:aa:33:e2:7c:1b:98:d6:11:7f:ec:fd:49: ec:08:0d:d3:10:04:d9:25:a4:90:99:dc:f6:01:dd:cc:fb:97: d3:be:9c:2b:0d:52:8d:90:44:75:ff:1d:b9:ec:ee:b2:92:b3: 03:60:09:2a:9f:f7:8d:c6:ae:19:5e:29:3c:18:00:90:6d:b4: ca:eb:ac:83:e1:3d:00:e8:80:f3:cc:e5:0c:57:38:e6:ca:69: cd:34:75:42:b6:92:39:ee:50:ba:cf:4e:a7:c6:f1:ab:64:9b: 41:24:65:0c:bf:e9:3e:3b:ff:08:cc:c0:7a:7b:9f:c2:34:3d: 23:c9:fe:74:ec:1f:43:ef:62:bf:df:f5:00:d0:b0:a1:9a:4e: 49:ce:54:f1:68:f0:0a:1e:11:d4:8f:c2:ea:b4:c2:d7:1a:09: fd:9f:96:56:e3:02:e0:c9:5d:a3:96:87:b5:89:6c:57:ea:36: 1d:9f:31:2c:3c:be:f8:15:fe:dd:ea:a8:ad:3e:39:ed:df:76: 20:f1:4f:59 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjUyMzJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdGMjUxMjI1RUFGMTJC RDVBRUM0OENGMkE2MjU3NjM2MjE0QzlGMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/nsUF+Hlc3qArr/5kPJisogwge+m9YjVDrcgNDalnmVJr3zuR FZegdpn7mGECCq6TrSqvJ1xm0O17JK/qfZV6ZA8maLBAMuowFhcgMqC6l84+x4WO u1URw892YjSsds6uzEsYqzy7OCXRYFodSfqH+rBfckCNKzQvTh/xe7+oxJoIHl4Q M2yEzRK6UCmyEPlZMtXVW//RDFZwipuOSrh2+Jppwot6UQ1a4viJdBcHwCM1kVBN Ni8Bm1mnGd/0f3qM0D8PreuKskzDPsyxLbUe1XOQvQ2h0CEhKRoHxEhcCFP9aF9M NJs04ArGpg+2y4G8hqVqVehya0JwQ3VBsgxdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfyUSJerxK9WuxIzypiV2NiFMnwIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2Z5VVNKZXJ4SzlXdXhJenlwaVYyTmlGTW53SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBS9QwDQYJKoZIhvcNAQELBQADggEBAFm04b/QgSbDZsQaErFahvoAjRM1 uzCsawqRo8SKKUC6JKxUYui7rpEWWjNbxnX89yOvS8AcI93ErvFSlqoz4nwbmNYR f+z9SewIDdMQBNklpJCZ3PYB3cz7l9O+nCsNUo2QRHX/Hbns7rKSswNgCSqf943G rhleKTwYAJBttMrrrIPhPQDogPPM5QxXOObKac00dUK2kjnuULrPTqfG8atkm0Ek ZQy/6T47/wjMwHp7n8I0PSPJ/nTsH0PvYr/f9QDQsKGaTknOVPFo8AoeEdSPwuq0 wtcaCf2fllbjAuDJXaOWh7WJbFfqNh2fMSw8vvgV/t3qqK0+Oe3fdiDxT1k= -----END CERTIFICATE-----Generated at Mon Mar 2 10:18:27 2026 by rpki-client