$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qbZ_H6BIaJVmrSKJmgNZyRZITDU.roa File: qbZ_H6BIaJVmrSKJmgNZyRZITDU.roa (raw, json) Hash identifier: ALaWg3t0tzz61WPaISG5+pNF1LdveL4UKMQku7oEkKM= Subject key identifier: A9:B6:7F:1F:A0:48:68:95:66:AD:22:89:9A:03:59:C9:16:48:4C:35 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12F6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qbZ_H6BIaJVmrSKJmgNZyRZITDU.roa Signing time: Sun 01 Mar 2026 03:27:55 +0000 ROA not before: Sun 01 Mar 2026 03:27:55 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4854 (0x12f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:27:55 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=A9B67F1FA048689566AD22899A0359C916484C35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:eb:ae:73:08:48:93:a6:82:da:79:1f:b0: 8c:10:0b:87:25:f1:3a:77:97:da:5e:68:60:8c:12: aa:e9:20:29:85:94:1a:84:06:5e:8d:51:5c:5b:6b: e6:b7:e3:93:ee:ff:e0:c7:58:a6:36:f6:0f:f1:4c: b8:a7:c5:f2:63:20:21:42:74:8c:9c:bb:ce:a0:0d: b8:be:66:8d:24:57:7d:10:1c:c2:af:9b:4d:78:9e: e9:5a:63:8a:4d:18:d6:08:28:18:50:54:4a:ba:27: 16:2a:4a:ad:d5:06:8e:6d:cb:b7:b3:4d:85:00:54: b0:c0:92:ad:73:76:ac:97:d5:19:2d:b0:a9:45:e1: 40:29:15:0b:74:56:23:3d:25:44:f8:10:cb:a7:93: 94:07:d7:2b:bb:b4:12:4b:b3:14:c7:c5:9d:da:ec: 59:fa:1d:e5:09:cc:49:f6:f1:ea:22:7d:53:c6:67: c5:b5:fe:7e:bd:50:bd:86:b9:a8:6c:25:ec:2e:df: e1:64:d1:23:90:84:64:78:39:f7:76:c2:31:59:8c: 8e:0a:8d:67:10:47:28:fa:d5:5f:10:cb:78:69:a6: 1b:7e:dd:db:fc:11:a1:de:04:0d:45:d0:31:0f:11: ea:75:eb:04:5e:18:ef:21:55:8c:90:07:0a:17:4d: 66:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B6:7F:1F:A0:48:68:95:66:AD:22:89:9A:03:59:C9:16:48:4C:35 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qbZ_H6BIaJVmrSKJmgNZyRZITDU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.68.0/22 Signature Algorithm: sha256WithRSAEncryption 07:c9:72:ec:b9:05:0b:8e:1a:ae:4f:1e:1c:a2:75:5b:d5:bc: 9f:6d:27:fa:65:42:32:34:4b:e1:50:eb:0a:b2:86:27:d8:9d: 71:fb:d0:f8:84:bb:f9:ff:27:05:82:42:f2:b1:61:b3:cb:7e: 5c:7c:ed:55:21:f0:4e:64:07:7a:7d:c9:cd:29:85:47:24:24: 4c:5d:20:d5:ff:b2:9b:a7:90:bb:df:b8:12:90:82:21:0b:d1: 97:06:57:76:4b:b7:6f:b6:cc:f1:c0:69:2e:77:f7:bb:15:f5: 1b:c2:1e:46:6a:f4:09:cb:b5:1e:e3:db:c8:f4:14:d7:ed:f8: 2a:52:f0:25:8b:55:9b:31:0a:e1:7d:76:b6:7c:c9:35:76:74: 5b:44:58:ab:92:a6:c8:9c:6c:56:46:62:2a:2c:e8:d9:94:8c: e9:10:32:f6:67:93:95:bb:2e:ff:62:a7:cf:a6:cb:cb:30:35: 1a:a9:c9:fc:f7:e1:19:6f:77:df:1b:4f:cb:e9:58:97:25:8f: 1a:1b:47:9a:91:9b:7c:b1:df:20:89:79:43:ac:b1:77:29:53: 89:25:11:f3:e4:81:76:b1:3a:38:35:61:01:2a:8d:cb:4e:a2: c7:f5:dd:f6:b0:1b:91:fd:b0:39:c3:24:6c:d4:67:06:71:ce: bc:01:cf:64 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzI3NTVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE5QjY3RjFGQTA0ODY4 OTU2NkFEMjI4OTlBMDM1OUM5MTY0ODRDMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjPOuucwhIk6aC2nkfsIwQC4cl8Tp3l9peaGCMEqrpICmFlBqE Bl6NUVxba+a345Pu/+DHWKY29g/xTLinxfJjICFCdIycu86gDbi+Zo0kV30QHMKv m014nulaY4pNGNYIKBhQVEq6JxYqSq3VBo5ty7ezTYUAVLDAkq1zdqyX1RktsKlF 4UApFQt0ViM9JUT4EMunk5QH1yu7tBJLsxTHxZ3a7Fn6HeUJzEn28eoifVPGZ8W1 /n69UL2GuahsJewu3+Fk0SOQhGR4Ofd2wjFZjI4KjWcQRyj61V8Qy3hppht+3dv8 EaHeBA1F0DEPEep16wReGO8hVYyQBwoXTWY/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqbZ/H6BIaJVmrSKJmgNZyRZITDUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3FiWl9INkJJYUpWbXJTS0ptZ05aeVJaSVREVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBQkQwDQYJKoZIhvcNAQELBQADggEBAAfJcuy5BQuOGq5PHhyidVvVvJ9t J/plQjI0S+FQ6wqyhifYnXH70PiEu/n/JwWCQvKxYbPLflx87VUh8E5kB3p9yc0p hUckJExdINX/spunkLvfuBKQgiEL0ZcGV3ZLt2+2zPHAaS5397sV9RvCHkZq9AnL tR7j28j0FNft+CpS8CWLVZsxCuF9drZ8yTV2dFtEWKuSpsicbFZGYios6NmUjOkQ MvZnk5W7Lv9ip8+my8swNRqpyfz34Rlvd98bT8vpWJcljxobR5qRm3yx3yCJeUOs sXcpU4klEfPkgXaxOjg1YQEqjctOosf13fawG5H9sDnDJGzUZwZxzrwBz2Q= -----END CERTIFICATE-----Generated at Mon Mar 2 11:29:31 2026 by rpki-client