$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nIGNYcOi0jJZm1A9Dx6ME8PTTSw.roa File: nIGNYcOi0jJZm1A9Dx6ME8PTTSw.roa (raw, json) Hash identifier: 4tDaSPviCDNoNe8mQbAunrnowA6tixwn+Z6FZ82Gkdg= Subject key identifier: 9C:81:8D:61:C3:A2:D2:32:59:9B:50:3D:0F:1E:8C:13:C3:D3:4D:2C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 10EA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nIGNYcOi0jJZm1A9Dx6ME8PTTSw.roa Signing time: Sun 01 Mar 2026 01:58:41 +0000 ROA not before: Sun 01 Mar 2026 01:58:41 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4330 (0x10ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:58:41 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=9C818D61C3A2D232599B503D0F1E8C13C3D34D2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:47:0d:b7:90:a2:ec:84:bc:bd:2d:7c:89:4f: e1:be:fb:57:c8:ee:3d:46:b4:f0:3f:13:9e:3b:c3: fa:03:11:6e:dd:10:3d:71:2f:c4:08:bc:9b:1b:9c: 9b:c8:eb:b6:f9:88:23:4d:e0:82:59:64:7b:65:d9: 30:d7:4c:e3:51:f0:87:f9:64:79:b9:ce:01:62:7c: 05:07:c0:cb:da:cc:03:13:5f:5f:7b:41:a4:9d:9c: 4e:da:ea:ad:1f:fa:77:d3:f6:ce:9b:81:09:2b:dc: eb:98:f7:25:83:28:15:f0:43:64:6e:28:38:f1:23: 04:2e:66:7a:89:3d:34:0d:a3:8e:e4:f5:05:2d:dc: 45:04:3e:57:c1:3d:2c:d6:e2:ab:c2:91:fc:6f:4f: e7:54:c7:1f:de:95:64:5b:e5:c1:aa:9d:21:9c:77: 0b:d8:c4:12:bf:3f:08:06:6f:dd:28:da:15:1e:06: bd:ca:7a:31:43:a3:76:36:0b:67:38:9a:a2:1b:50: 57:6b:3e:f7:a4:5a:65:74:25:a7:fe:b7:9a:43:52: e1:7f:2c:29:c5:d1:ac:13:36:38:6e:13:d3:38:cf: ab:7b:db:65:33:e4:e6:87:58:45:80:9c:74:78:05: ff:6c:88:0d:75:b7:f6:ac:95:09:c1:92:0b:58:4d: 07:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:81:8D:61:C3:A2:D2:32:59:9B:50:3D:0F:1E:8C:13:C3:D3:4D:2C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nIGNYcOi0jJZm1A9Dx6ME8PTTSw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.204.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:67:ee:ba:4f:4b:6c:67:d6:c7:20:05:2c:2e:84:34:bd:43: b5:d0:4c:0b:d6:3d:89:1e:86:fe:0f:fa:aa:ac:f4:c5:93:ba: 33:c6:b7:87:3f:b5:e0:4f:5d:27:4e:00:97:07:d6:11:2e:cd: ae:4e:0e:e0:0a:7f:c2:43:04:67:2f:5e:29:0e:a5:4c:12:bd: 57:34:43:2d:27:b5:c1:50:e3:da:cb:4e:52:b9:89:13:4b:ec: 32:66:19:63:92:6d:09:06:34:4f:6f:25:6f:e4:f2:ec:ec:6a: af:78:a9:82:18:41:de:2b:06:db:5f:6d:60:a0:35:78:a2:fd: 03:f0:24:e1:8f:f7:91:c7:31:5a:d0:1d:a4:90:73:4f:cc:8c: 93:a7:24:ba:8b:75:1d:cc:97:ff:d7:41:d5:de:34:ae:93:b9: 1b:48:c5:0a:2b:49:c2:c2:54:7e:e4:e5:c6:dd:9e:19:85:18: b7:21:d9:f2:de:92:43:6d:f5:f0:90:ef:2a:c1:81:26:55:54: ed:6e:70:31:5d:64:76:46:99:a4:70:07:40:96:1d:13:6c:4d: aa:44:13:ff:0a:2c:9f:ab:a5:40:99:95:de:b2:52:a2:f4:f8: 17:3d:dc:90:6c:81:c4:6c:33:f6:27:11:95:41:e0:77:ef:98: 00:e0:1c:7f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEOowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTU4NDFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlDODE4RDYxQzNBMkQy MzI1OTlCNTAzRDBGMUU4QzEzQzNEMzREMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRRw23kKLshLy9LXyJT+G++1fI7j1GtPA/E547w/oDEW7dED1x L8QIvJsbnJvI67b5iCNN4IJZZHtl2TDXTONR8If5ZHm5zgFifAUHwMvazAMTX197 QaSdnE7a6q0f+nfT9s6bgQkr3OuY9yWDKBXwQ2RuKDjxIwQuZnqJPTQNo47k9QUt 3EUEPlfBPSzW4qvCkfxvT+dUxx/elWRb5cGqnSGcdwvYxBK/PwgGb90o2hUeBr3K ejFDo3Y2C2c4mqIbUFdrPvekWmV0Jaf+t5pDUuF/LCnF0awTNjhuE9M4z6t722Uz 5OaHWEWAnHR4Bf9siA11t/aslQnBkgtYTQdzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnIGNYcOi0jJZm1A9Dx6ME8PTTSwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L25JR05ZY09pMGpKWm0xQTlEeDZNRThQVFRTdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBS8wwDQYJKoZIhvcNAQELBQADggEBAAtn7rpPS2xn1scgBSwuhDS9Q7XQ TAvWPYkehv4P+qqs9MWTujPGt4c/teBPXSdOAJcH1hEuza5ODuAKf8JDBGcvXikO pUwSvVc0Qy0ntcFQ49rLTlK5iRNL7DJmGWOSbQkGNE9vJW/k8uzsaq94qYIYQd4r BttfbWCgNXii/QPwJOGP95HHMVrQHaSQc0/MjJOnJLqLdR3Ml//XQdXeNK6TuRtI xQorScLCVH7k5cbdnhmFGLch2fLekkNt9fCQ7yrBgSZVVO1ucDFdZHZGmaRwB0CW HRNsTapEE/8KLJ+rpUCZld6yUqL0+Bc93JBsgcRsM/YnEZVB4HfvmADgHH8= -----END CERTIFICATE-----Generated at Mon Mar 2 03:54:15 2026 by rpki-client