$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lQDyxBMByQ8uIfA8SZNICFY9GeU.roa File: lQDyxBMByQ8uIfA8SZNICFY9GeU.roa (raw, json) Hash identifier: Am2kdZ87t/i5Igg+Pfw30wszqR4IlAd9IhTQMCn9vkI= Subject key identifier: 95:00:F2:C4:13:01:C9:0F:2E:21:F0:3C:49:93:48:08:56:3D:19:E5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 121F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lQDyxBMByQ8uIfA8SZNICFY9GeU.roa Signing time: Sun 01 Mar 2026 02:52:20 +0000 ROA not before: Sun 01 Mar 2026 02:52:20 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.74.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4639 (0x121f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:52:20 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=9500F2C41301C90F2E21F03C49934808563D19E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:51:22:2f:7f:6b:bf:52:fa:4a:20:d3:48: db:13:9a:10:0d:27:bc:19:ce:83:1f:64:df:04:e9: 0a:b6:70:78:8a:64:55:99:76:37:25:a9:76:3a:4d: 93:29:e7:4b:88:dc:2a:c9:8f:3f:a0:54:83:8b:69: 7b:4a:e6:fc:74:fc:e7:7d:b1:6b:34:53:d7:e1:91: cb:5b:2d:9e:fb:13:af:22:9c:bd:86:92:e1:ca:39: ad:bd:35:ca:e4:d5:e4:fe:6f:dc:02:c8:be:35:86: a7:a2:ee:e5:96:1d:ea:07:83:b0:c5:e1:af:7e:34: 0d:54:f1:e6:ed:f6:8c:4d:7a:52:74:3b:3a:3f:bf: e5:3c:1e:e9:09:b6:79:c2:52:5c:f5:41:03:da:93: ec:63:74:d8:11:2b:a2:5e:27:5a:12:c9:7e:ae:c0: 70:9a:ca:32:9c:9a:8c:70:2b:6c:e6:f6:c9:1c:6a: 22:bf:73:80:f2:42:72:45:a1:6a:f4:8c:00:e4:cf: ac:00:c2:52:d8:90:7b:1f:e5:2d:1c:c0:15:85:5b: ce:73:a3:04:3b:fc:d6:98:a6:90:b2:bb:13:fa:0d: 34:43:f3:f2:db:8f:68:6d:6f:75:43:93:a1:0c:95: 3f:2a:a5:a5:1d:72:8a:b0:bb:f2:8e:2d:fe:fd:8a: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:00:F2:C4:13:01:C9:0F:2E:21:F0:3C:49:93:48:08:56:3D:19:E5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lQDyxBMByQ8uIfA8SZNICFY9GeU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.192.0/23 Signature Algorithm: sha256WithRSAEncryption 94:29:1a:a2:34:a0:b5:c3:8e:bd:df:c9:c5:4b:a0:64:79:03: 39:fa:50:2f:a3:3f:75:76:ea:4b:c4:34:b1:20:73:95:ff:38: 19:62:ac:0f:0d:6a:a7:84:e2:b3:07:31:8b:3c:98:fb:35:cc: 04:44:dd:83:8d:33:cf:b2:a1:63:14:69:11:ae:6b:b2:69:4d: a6:da:e3:83:17:06:8f:12:14:0e:85:4d:d6:ca:1b:16:f2:3a: 0a:3d:bd:b4:d8:7f:4f:1f:ba:0a:f2:5d:80:aa:99:ff:f7:60: 57:4d:4b:31:2b:23:a4:be:fb:13:2f:96:cd:96:34:fc:f8:b1: 9b:01:24:80:68:dc:16:d3:40:5f:f2:3e:ed:06:7e:db:ea:23: 2c:be:03:9b:3e:39:00:76:b6:8d:3c:2a:de:9e:21:f1:08:19: c3:ed:49:37:57:8c:4c:a8:7d:2e:34:47:a0:5d:ce:67:82:cf: 54:fb:59:c2:6a:58:43:67:ab:8d:ba:91:08:c6:d7:d9:81:e4: 96:02:62:bd:d5:b3:fd:23:50:6f:2f:75:e8:bc:09:d3:53:cd: 75:f3:63:3d:1c:46:e0:0a:8c:df:f1:62:49:5d:d1:95:b4:71: 56:85:2e:f5:86:88:67:46:91:06:20:91:17:e0:f8:88:3a:b2: 7f:27:4a:69 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjUyMjBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk1MDBGMkM0MTMwMUM5 MEYyRTIxRjAzQzQ5OTM0ODA4NTYzRDE5RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnbFEiL39rv1L6SiDTSNsTmhANJ7wZzoMfZN8E6Qq2cHiKZFWZ djclqXY6TZMp50uI3CrJjz+gVIOLaXtK5vx0/Od9sWs0U9fhkctbLZ77E68inL2G kuHKOa29Ncrk1eT+b9wCyL41hqei7uWWHeoHg7DF4a9+NA1U8ebt9oxNelJ0Ozo/ v+U8HukJtnnCUlz1QQPak+xjdNgRK6JeJ1oSyX6uwHCayjKcmoxwK2zm9skcaiK/ c4DyQnJFoWr0jADkz6wAwlLYkHsf5S0cwBWFW85zowQ7/NaYppCyuxP6DTRD8/Lb j2htb3VDk6EMlT8qpaUdcoqwu/KOLf79irqhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlQDyxBMByQ8uIfA8SZNICFY9GeUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2xRRHl4Qk1CeVE4dUlmQThTWk5JQ0ZZOUdlVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSsAwDQYJKoZIhvcNAQELBQADggEBAJQpGqI0oLXDjr3fycVLoGR5Azn6 UC+jP3V26kvENLEgc5X/OBlirA8NaqeE4rMHMYs8mPs1zARE3YONM8+yoWMUaRGu a7JpTaba44MXBo8SFA6FTdbKGxbyOgo9vbTYf08fugryXYCqmf/3YFdNSzErI6S+ +xMvls2WNPz4sZsBJIBo3BbTQF/yPu0GftvqIyy+A5s+OQB2to08Kt6eIfEIGcPt STdXjEyofS40R6BdzmeCz1T7WcJqWENnq426kQjG19mB5JYCYr3Vs/0jUG8vdei8 CdNTzXXzYz0cRuAKjN/xYkld0ZW0cVaFLvWGiGdGkQYgkRfg+Ig6sn8nSmk= -----END CERTIFICATE-----Generated at Mon Mar 2 06:55:40 2026 by rpki-client