$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oGFtAi-S7GrIXWeEMJ3dUTM-Af4.roa File: oGFtAi-S7GrIXWeEMJ3dUTM-Af4.roa (raw, json) Hash identifier: oRtMog4XvGl+PmOJ6vmA70AsFU0pkq/0ynJQjhb7Oqo= Subject key identifier: A0:61:6D:02:2F:92:EC:6A:C8:5D:67:84:30:9D:DD:51:33:3E:01:FE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 11CC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oGFtAi-S7GrIXWeEMJ3dUTM-Af4.roa Signing time: Sun 01 Mar 2026 02:40:34 +0000 ROA not before: Sun 01 Mar 2026 02:40:34 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4556 (0x11cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:40:34 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=A0616D022F92EC6AC85D6784309DDD51333E01FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:89:ff:9c:e3:ea:4f:27:ef:05:72:c5:1c: 0e:40:30:ec:22:9b:65:cc:99:1b:99:fd:9e:5d:ae: 76:b8:de:35:b3:e9:c3:1d:9d:9f:3d:7e:cc:6d:91: be:a1:a0:e1:64:25:5b:1f:9e:55:a0:fb:eb:3c:b2: 22:4a:dc:0c:9c:a1:20:e4:6c:3e:cd:09:1c:ef:83: 3f:6a:ed:45:b6:19:f7:91:ac:86:75:0d:bf:28:61: 8a:51:27:6e:3f:c8:96:5e:a7:03:07:0b:a1:06:99: 06:5e:43:cd:d7:fd:bf:5d:3c:fe:8b:29:74:e9:85: ca:77:2b:c2:ee:78:d6:9c:c1:c9:73:2b:bb:e2:fd: f2:4e:d4:92:2e:1e:90:62:da:ab:97:20:bd:e6:bb: 12:ef:d7:ec:da:ab:95:fc:de:2d:2c:7f:e5:38:87: 3b:5f:1c:cb:6d:5a:0d:2d:5e:7a:61:94:21:52:34: e5:33:5d:f2:c7:ce:a5:1a:be:98:7c:7f:12:34:98: 87:0b:03:65:63:d1:c6:12:6e:da:76:7f:1d:fa:f8: 76:33:6d:35:b9:32:7e:76:18:ff:68:84:00:c4:f1: a9:a9:3b:16:2d:56:7c:bd:67:18:da:a0:71:99:97: 07:8b:dc:56:2c:09:63:97:da:98:f3:8e:5f:63:9a: 5a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:61:6D:02:2F:92:EC:6A:C8:5D:67:84:30:9D:DD:51:33:3E:01:FE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oGFtAi-S7GrIXWeEMJ3dUTM-Af4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.68.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:c2:66:85:6f:a8:84:7a:3c:80:16:ed:13:a5:5d:04:94:04: fa:51:0e:f7:01:5c:ab:65:89:81:92:1d:76:55:17:75:8c:d6: 7e:1c:52:5e:6b:d8:66:0a:cc:d2:d7:35:6d:2d:bc:08:da:cc: a4:4c:0a:3c:77:41:5b:b2:ee:a7:19:1f:ad:c8:5b:1e:07:2c: 19:01:13:ba:ea:06:f8:b2:76:56:9e:f0:c6:98:85:7b:07:79: a7:b3:3f:d0:00:38:bb:65:dc:b5:c3:27:77:70:44:05:92:6e: d5:e7:e6:8d:07:1b:9b:9c:bc:a1:fc:90:10:36:f3:89:1b:a0: ad:36:a3:79:76:f3:f7:bf:62:52:ed:18:a0:45:bd:99:b6:f6: d8:8a:50:a6:d7:20:5d:60:0b:ca:a9:96:42:7a:d7:7e:2b:0b: c7:63:94:18:a4:8f:5c:c4:99:d8:32:48:fc:1e:a2:c2:41:e0: ad:31:b8:91:40:8d:a8:fc:d2:ce:f2:94:82:c6:ef:34:6c:ad: f8:90:48:d7:7a:f5:e2:43:fb:af:8b:21:28:08:f8:30:60:a2: 65:d7:cc:1a:7d:fd:0d:64:ff:06:14:be:b6:d8:28:4f:b7:8d: a9:6d:60:3b:e0:36:99:c0:07:95:92:dc:9e:0b:40:1e:ab:dc: dc:be:e6:d8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEcwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQwMzRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEwNjE2RDAyMkY5MkVD NkFDODVENjc4NDMwOURERDUxMzMzRTAxRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjAYn/nOPqTyfvBXLFHA5AMOwim2XMmRuZ/Z5drna43jWz6cMd nZ89fsxtkb6hoOFkJVsfnlWg++s8siJK3AycoSDkbD7NCRzvgz9q7UW2GfeRrIZ1 Db8oYYpRJ24/yJZepwMHC6EGmQZeQ83X/b9dPP6LKXTphcp3K8LueNacwclzK7vi /fJO1JIuHpBi2quXIL3muxLv1+zaq5X83i0sf+U4hztfHMttWg0tXnphlCFSNOUz XfLHzqUavph8fxI0mIcLA2Vj0cYSbtp2fx36+HYzbTW5Mn52GP9ohADE8ampOxYt Vny9ZxjaoHGZlweL3FYsCWOX2pjzjl9jmlplAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoGFtAi+S7GrIXWeEMJ3dUTM+Af4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L29HRnRBaS1TN0dySVhXZUVNSjNkVVRNLUFmNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0kQwDQYJKoZIhvcNAQELBQADggEBAB7CZoVvqIR6PIAW7ROlXQSUBPpR DvcBXKtliYGSHXZVF3WM1n4cUl5r2GYKzNLXNW0tvAjazKRMCjx3QVuy7qcZH63I Wx4HLBkBE7rqBviydlae8MaYhXsHeaezP9AAOLtl3LXDJ3dwRAWSbtXn5o0HG5uc vKH8kBA284kboK02o3l28/e/YlLtGKBFvZm29tiKUKbXIF1gC8qplkJ6134rC8dj lBikj1zEmdgySPweosJB4K0xuJFAjaj80s7ylILG7zRsrfiQSNd69eJD+6+LISgI +DBgomXXzBp9/Q1k/wYUvrbYKE+3jaltYDvgNpnAB5WS3J4LQB6r3Ny+5tg= -----END CERTIFICATE-----Generated at Mon Mar 2 14:50:06 2026 by rpki-client