$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hcLj6ePssbIaFP1I3JD22KSeN6M.roa File: hcLj6ePssbIaFP1I3JD22KSeN6M.roa (raw, json) Hash identifier: FPD50U6UOpKHURda6j7SlEYsuIJ/+Ys/UFJ/plIoEho= Subject key identifier: 85:C2:E3:E9:E3:EC:B1:B2:1A:14:FD:48:DC:90:F6:D8:A4:9E:37:A3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 11DF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hcLj6ePssbIaFP1I3JD22KSeN6M.roa Signing time: Sun 01 Mar 2026 02:40:46 +0000 ROA not before: Sun 01 Mar 2026 02:40:46 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4575 (0x11df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:40:46 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=85C2E3E9E3ECB1B21A14FD48DC90F6D8A49E37A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:33:c0:1e:ee:33:af:f4:04:b6:20:72:3f: 9a:ff:d0:66:66:bc:7d:e7:27:a9:2b:14:13:81:f9: 21:85:bd:c7:ad:70:0d:dd:c4:9d:09:85:f6:4f:5e: fb:30:59:c7:ce:7c:76:90:f8:b3:0a:09:d8:79:84: 3f:8b:0c:da:00:6f:fe:ed:7b:71:c9:db:b4:c0:79: 66:57:1b:ba:55:ef:31:5a:81:bd:df:a8:7f:d8:1e: ab:a7:8c:40:18:f9:cb:9b:d4:08:1b:d3:23:5f:6e: a1:f6:b4:f4:3e:55:36:4e:ea:2f:0d:8e:e1:81:4d: 71:f0:1e:04:22:4a:17:d3:d6:7d:a4:3a:b6:0f:e5: 6b:88:64:ba:ed:66:5b:7c:bf:9a:64:a1:62:92:1f: 20:70:45:aa:61:bf:7f:66:9b:f6:bf:1b:d7:e1:6f: e4:8b:ee:be:8e:9a:22:f4:34:19:0a:2e:1e:9d:79: 1e:12:93:52:74:d0:6e:ba:54:4c:e0:e6:c5:ec:4a: 63:5c:32:0f:4a:50:92:29:00:82:dc:2c:8b:78:ca: d3:b5:15:78:0d:92:58:5d:59:fa:37:ff:87:44:65: 32:ce:ff:9d:c6:72:d0:23:7b:e1:d9:99:9d:47:dc: a9:6a:46:bf:ed:0e:d5:24:93:4b:bf:7c:c6:f6:1d: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C2:E3:E9:E3:EC:B1:B2:1A:14:FD:48:DC:90:F6:D8:A4:9E:37:A3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hcLj6ePssbIaFP1I3JD22KSeN6M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.64.0/18 Signature Algorithm: sha256WithRSAEncryption be:75:b3:f9:7a:6f:05:6e:be:bc:74:85:a6:3a:f3:63:f8:5f: ec:1a:0f:1c:48:22:5d:6d:c4:f5:f9:a5:a6:c8:06:10:0c:d5: 4a:27:75:84:8f:1b:52:cd:f2:9d:71:d0:31:32:75:01:8d:17: c8:4c:0d:cb:ba:ae:28:4f:0b:d4:20:51:89:eb:86:fb:dc:b7: db:d4:ca:38:54:fc:a5:42:c2:52:70:30:32:6c:f2:1e:7e:69: ac:ac:05:38:d7:61:05:4c:4a:77:f7:64:60:9a:a1:35:41:94: c3:3c:a6:0b:69:de:c1:59:a2:ab:e2:a7:f9:e2:84:1f:2a:e7: 87:ea:1e:6b:f8:f8:00:ef:b6:68:f3:b8:17:b5:55:29:01:d5: 3f:42:6a:79:61:43:93:8b:6e:09:b8:6b:29:aa:56:00:5a:cc: 5d:32:82:9c:c6:d1:ec:b2:ea:05:42:14:5f:0f:10:3b:1f:65: d6:36:7c:09:bf:54:f0:dc:0f:98:91:16:ed:b0:16:fc:a7:7c: b4:25:73:1c:9f:fd:a0:96:7b:9d:ff:4a:8a:85:5e:64:b6:be: 44:17:8d:5f:9d:ac:78:34:17:67:f8:d3:46:68:68:fd:c0:59: 80:2e:4e:de:b7:40:68:48:8c:44:e6:46:bc:55:0d:57:d8:28: 38:82:23:fe -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQwNDZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg1QzJFM0U5RTNFQ0Ix QjIxQTE0RkQ0OERDOTBGNkQ4QTQ5RTM3QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIrTPAHu4zr/QEtiByP5r/0GZmvH3nJ6krFBOB+SGFvcetcA3d xJ0JhfZPXvswWcfOfHaQ+LMKCdh5hD+LDNoAb/7te3HJ27TAeWZXG7pV7zFagb3f qH/YHqunjEAY+cub1Agb0yNfbqH2tPQ+VTZO6i8NjuGBTXHwHgQiShfT1n2kOrYP 5WuIZLrtZlt8v5pkoWKSHyBwRaphv39mm/a/G9fhb+SL7r6OmiL0NBkKLh6deR4S k1J00G66VEzg5sXsSmNcMg9KUJIpAILcLIt4ytO1FXgNklhdWfo3/4dEZTLO/53G ctAje+HZmZ1H3KlqRr/tDtUkk0u/fMb2HWCRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhcLj6ePssbIaFP1I3JD22KSeN6MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2hjTGo2ZVBzc2JJYUZQMUkzSkQyMktTZU42TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYBSEAwDQYJKoZIhvcNAQELBQADggEBAL51s/l6bwVuvrx0haY682P4X+wa DxxIIl1txPX5pabIBhAM1UondYSPG1LN8p1x0DEydQGNF8hMDcu6rihPC9QgUYnr hvvct9vUyjhU/KVCwlJwMDJs8h5+aaysBTjXYQVMSnf3ZGCaoTVBlMM8pgtp3sFZ oqvip/nihB8q54fqHmv4+ADvtmjzuBe1VSkB1T9CanlhQ5OLbgm4aymqVgBazF0y gpzG0eyy6gVCFF8PEDsfZdY2fAm/VPDcD5iRFu2wFvynfLQlcxyf/aCWe53/SoqF XmS2vkQXjV+drHg0F2f400ZoaP3AWYAuTt63QGhIjETmRrxVDVfYKDiCI/4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:08:03 2026 by rpki-client