$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/legr_1n0Pr7r1BGgh5KP1d1oSmk.roa File: legr_1n0Pr7r1BGgh5KP1d1oSmk.roa (raw, json) Hash identifier: xpt3a3Z3yo1nn2Q5psIryYuDbZz1nxMqvmaIwYEb2CQ= Subject key identifier: 95:E8:2B:FF:59:F4:3E:BE:EB:D4:11:A0:87:92:8F:D5:DD:68:4A:69 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1231 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/legr_1n0Pr7r1BGgh5KP1d1oSmk.roa Signing time: Sun 01 Mar 2026 02:52:29 +0000 ROA not before: Sun 01 Mar 2026 02:52:29 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4657 (0x1231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:52:29 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=95E82BFF59F43EBEEBD411A087928FD5DD684A69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f9:7e:90:65:d6:a3:5e:55:8e:0a:df:81:0c: 51:5f:c8:5d:d0:d0:4f:da:5a:6e:5c:3b:9d:4d:a5: 0c:63:dc:31:31:14:83:6e:0b:a0:36:65:98:a6:22: 18:1e:63:79:01:72:16:0a:70:64:2d:3d:d5:4f:4c: 74:16:74:ea:e1:14:b0:e8:c0:e4:25:cb:5f:ac:d7: 7f:fb:e8:73:81:38:32:c6:af:d4:18:93:eb:28:bd: 00:29:fa:cd:b8:b3:e0:38:61:b8:a8:cb:bf:67:cd: 97:5b:09:b9:76:f2:15:7c:a1:ef:4a:2e:95:e6:90: 79:4c:09:3c:dd:aa:d6:8d:0e:ac:c6:8a:3c:1e:b7: b0:75:da:05:86:98:10:eb:c0:70:65:51:56:39:0a: e1:40:0d:47:ac:e9:43:8d:1e:83:ba:8e:62:5e:d8: eb:6d:9c:27:e6:39:be:c0:2b:15:55:c5:eb:de:50: 32:8b:e2:fb:f0:fd:66:fe:c9:7e:bd:54:b4:63:75: 40:37:e6:6b:97:58:be:b1:fd:d4:b2:37:3e:bd:83: d7:42:cf:83:92:95:1a:ae:42:10:37:35:7d:7e:84: c4:6a:dc:2d:c9:45:0e:79:1a:d2:a6:08:71:15:7d: 30:09:cf:f9:e7:d1:2d:96:9a:78:1a:bd:e1:bf:bf: a6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E8:2B:FF:59:F4:3E:BE:EB:D4:11:A0:87:92:8F:D5:DD:68:4A:69 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/legr_1n0Pr7r1BGgh5KP1d1oSmk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.60.0/22 Signature Algorithm: sha256WithRSAEncryption 46:38:20:ad:a5:26:a8:9a:d5:9e:32:4b:53:ac:42:c6:68:a9: 1d:b7:4d:eb:66:ac:e3:43:ab:c9:73:a4:cf:fb:fc:59:6b:18: 4b:64:8b:5d:f4:98:cb:9e:f5:8b:f1:5d:f9:91:20:c6:b2:70: 65:e7:fa:3e:67:ac:70:d8:c2:9d:75:db:3e:6c:95:26:9b:39: 66:f1:a9:57:9d:6e:81:dc:8f:9a:3d:c3:7e:a1:3d:9f:35:33: 7f:74:ae:ab:b0:37:fd:0f:af:4f:0a:87:6f:5a:6c:36:c8:77: 4a:72:41:bd:11:0d:fc:5c:8d:80:78:82:3f:79:0e:d2:78:77: 1b:54:06:47:04:b8:77:dc:45:c4:f1:19:99:ad:bb:ab:aa:61: db:97:d1:8f:94:e8:50:d0:be:e6:67:e4:05:29:b2:87:73:a7: 33:b4:3b:1b:53:44:08:44:3d:61:fb:4b:79:15:7b:45:3e:40: e3:12:2d:1d:1d:a4:bb:10:23:8d:3d:11:94:9e:44:24:5b:18: 23:eb:2e:c9:01:cd:ad:3a:8e:f3:86:09:d8:7e:a3:8e:10:3b: 73:4c:57:0b:6a:24:a1:03:dc:4a:e2:14:1e:a5:b2:82:44:d3: 64:b9:03:88:50:0e:fe:10:16:0d:62:2f:7f:da:10:82:54:57: ad:01:7a:1f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEjEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjUyMjlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk1RTgyQkZGNTlGNDNF QkVFQkQ0MTFBMDg3OTI4RkQ1REQ2ODRBNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa+X6QZdajXlWOCt+BDFFfyF3Q0E/aWm5cO51NpQxj3DExFINu C6A2ZZimIhgeY3kBchYKcGQtPdVPTHQWdOrhFLDowOQly1+s13/76HOBODLGr9QY k+sovQAp+s24s+A4Ybioy79nzZdbCbl28hV8oe9KLpXmkHlMCTzdqtaNDqzGijwe t7B12gWGmBDrwHBlUVY5CuFADUes6UONHoO6jmJe2OttnCfmOb7AKxVVxeveUDKL 4vvw/Wb+yX69VLRjdUA35muXWL6x/dSyNz69g9dCz4OSlRquQhA3NX1+hMRq3C3J RQ55GtKmCHEVfTAJz/nn0S2WmngaveG/v6bdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlegr/1n0Pr7r1BGgh5KP1d1oSmkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2xlZ3JfMW4wUHI3cjFCR2doNUtQMWQxb1Ntay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALcnzwwDQYJKoZIhvcNAQELBQADggEBAEY4IK2lJqia1Z4yS1OsQsZoqR23 TetmrONDq8lzpM/7/FlrGEtki130mMue9YvxXfmRIMaycGXn+j5nrHDYwp112z5s lSabOWbxqVedboHcj5o9w36hPZ81M390rquwN/0Pr08Kh29abDbId0pyQb0RDfxc jYB4gj95DtJ4dxtUBkcEuHfcRcTxGZmtu6uqYduX0Y+U6FDQvuZn5AUpsodzpzO0 OxtTRAhEPWH7S3kVe0U+QOMSLR0dpLsQI409EZSeRCRbGCPrLskBza06jvOGCdh+ o44QO3NMVwtqJKED3EriFB6lsoJE02S5A4hQDv4QFg1iL3/aEIJUV60Beh8= -----END CERTIFICATE-----Generated at Mon Mar 2 10:06:10 2026 by rpki-client