$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nXdba5qduW5v607g5bFnROebOgc.roa File: nXdba5qduW5v607g5bFnROebOgc.roa (raw, json) Hash identifier: Dv8LOyEZeE+UotsHHBjUvp7wRiRWCOc2kA8QiWbIRX0= Subject key identifier: 9D:77:5B:6B:9A:9D:B9:6E:6F:EB:4E:E0:E5:B1:67:44:E7:9B:3A:07 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 119B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nXdba5qduW5v607g5bFnROebOgc.roa Signing time: Sun 01 Mar 2026 02:31:15 +0000 ROA not before: Sun 01 Mar 2026 02:31:15 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4507 (0x119b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:31:15 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=9D775B6B9A9DB96E6FEB4EE0E5B16744E79B3A07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:4e:25:fa:f6:7d:d3:9b:1b:3f:e0:24:f3: 2b:19:01:38:40:f7:97:f2:05:0a:2e:44:46:1e:0d: 67:41:d7:23:f1:84:98:9b:f3:76:a5:4b:2f:9f:a8: 39:8f:0d:13:b9:5d:ee:03:f8:6e:39:55:61:b2:c3: 5a:92:4d:e8:02:40:91:f4:fe:14:74:bd:9c:96:be: b8:8a:65:95:68:cc:80:2f:ed:ad:9e:88:d7:5e:39: 0b:6f:c8:cb:59:4b:53:cd:94:e6:75:fb:45:10:5f: e7:4f:84:04:65:b0:12:df:3c:63:5d:d7:bf:fa:3d: c6:52:1e:89:fc:1c:cc:87:3a:01:89:4b:7a:fc:87: e3:c4:b6:61:0f:7f:cf:38:f6:87:40:40:8d:81:e8: ba:e2:49:9c:14:b2:89:08:e9:0f:4a:f9:9d:45:61: 5e:e3:9a:a9:c4:35:27:6f:3d:5b:31:59:c4:d6:54: 99:45:ab:0b:5d:da:d9:13:77:9d:bb:43:16:61:08: 00:16:0f:a5:a1:17:bd:35:e3:9c:64:71:5d:82:27: 8e:12:3f:5f:86:39:27:70:aa:d6:5c:49:1d:35:0e: be:3e:72:68:6c:79:ce:53:9c:cb:26:fa:bb:b8:61: 76:ff:bc:b0:40:ea:5d:a3:30:89:d5:bc:a3:e8:08: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:77:5B:6B:9A:9D:B9:6E:6F:EB:4E:E0:E5:B1:67:44:E7:9B:3A:07 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nXdba5qduW5v607g5bFnROebOgc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.208.0/21 Signature Algorithm: sha256WithRSAEncryption 9a:ae:d5:0e:7c:b9:95:51:85:9a:d9:8f:1f:a4:b9:37:68:67: 0f:d5:46:19:3f:ad:9b:eb:c9:9c:71:3d:17:8d:12:f3:1a:57: c1:ad:e8:f3:45:b2:05:9e:d4:cc:f3:fa:68:f7:2b:c1:2f:69: c5:b6:88:db:8f:54:c5:40:b7:1f:b6:05:14:db:e8:2a:5d:1b: 26:b0:66:0c:50:4f:5c:02:34:52:bf:48:65:55:7b:00:84:52: c7:d9:09:bf:c7:6f:74:7e:22:23:57:dd:07:da:86:a9:ff:40: 1f:a9:25:95:29:b7:d3:87:1d:35:79:0f:f2:bc:7e:cd:1a:c0: 60:7f:26:a7:49:f2:38:1b:00:26:e2:f0:96:da:af:70:9c:c8: 9e:a4:99:9f:93:23:37:c6:7b:c9:ce:8e:b9:88:29:60:56:5a: 8e:77:f5:b7:d8:70:82:c0:90:1f:3d:2e:d8:31:52:d9:2b:88: 7c:53:3b:db:e0:18:c6:47:e2:02:51:4e:2b:60:12:cb:8e:4c: cd:06:3a:63:63:d0:32:4b:3d:25:87:73:25:64:df:0c:73:1b: 27:c0:c9:a5:85:30:19:b9:03:64:84:c0:8e:f1:3a:16:97:cb: b6:83:d2:fb:4c:8a:1c:af:1d:72:b4:c0:51:87:dd:ce:24:a1: da:28:1a:b3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjMxMTVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlENzc1QjZCOUE5REI5 NkU2RkVCNEVFMEU1QjE2NzQ0RTc5QjNBMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyWk4l+vZ905sbP+Ak8ysZAThA95fyBQouREYeDWdB1yPxhJib 83alSy+fqDmPDRO5Xe4D+G45VWGyw1qSTegCQJH0/hR0vZyWvriKZZVozIAv7a2e iNdeOQtvyMtZS1PNlOZ1+0UQX+dPhARlsBLfPGNd17/6PcZSHon8HMyHOgGJS3r8 h+PEtmEPf8849odAQI2B6LriSZwUsokI6Q9K+Z1FYV7jmqnENSdvPVsxWcTWVJlF qwtd2tkTd527QxZhCAAWD6WhF70145xkcV2CJ44SP1+GOSdwqtZcSR01Dr4+cmhs ec5TnMsm+ru4YXb/vLBA6l2jMInVvKPoCNRtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnXdba5qduW5v607g5bFnROebOgcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L25YZGJhNXFkdVc1djYwN2c1YkZuUk9lYk9nYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPcn9AwDQYJKoZIhvcNAQELBQADggEBAJqu1Q58uZVRhZrZjx+kuTdoZw/V Rhk/rZvryZxxPReNEvMaV8Gt6PNFsgWe1Mzz+mj3K8EvacW2iNuPVMVAtx+2BRTb 6CpdGyawZgxQT1wCNFK/SGVVewCEUsfZCb/Hb3R+IiNX3Qfahqn/QB+pJZUpt9OH HTV5D/K8fs0awGB/JqdJ8jgbACbi8Jbar3CcyJ6kmZ+TIzfGe8nOjrmIKWBWWo53 9bfYcILAkB89LtgxUtkriHxTO9vgGMZH4gJRTitgEsuOTM0GOmNj0DJLPSWHcyVk 3wxzGyfAyaWFMBm5A2SEwI7xOhaXy7aD0vtMihyvHXK0wFGH3c4kodooGrM= -----END CERTIFICATE-----Generated at Mon Mar 2 13:10:49 2026 by rpki-client