$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rGJqq3GyRpTCcls4DoZU7Pc5fPk.roa File: rGJqq3GyRpTCcls4DoZU7Pc5fPk.roa (raw, json) Hash identifier: LOjJIOETqE21rBrLe2gPD9HYAKAdBKJ92H41nONpL7Y= Subject key identifier: AC:62:6A:AB:71:B2:46:94:C2:72:5B:38:0E:86:54:EC:F7:39:7C:F9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12A5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rGJqq3GyRpTCcls4DoZU7Pc5fPk.roa Signing time: Sun 01 Mar 2026 03:12:29 +0000 ROA not before: Sun 01 Mar 2026 03:12:29 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4773 (0x12a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:12:29 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=AC626AAB71B24694C2725B380E8654ECF7397CF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:5b:05:03:0b:89:1f:a2:6e:e9:02:2b:c8: cc:75:d8:3c:be:f2:4d:11:35:f0:98:7b:4c:aa:5d: 92:72:01:13:19:02:66:89:8c:ae:4c:28:eb:03:ce: 12:74:db:fe:62:ff:52:b2:96:8d:c0:b7:e9:22:7a: fc:ef:52:b1:5d:16:e1:eb:ee:27:36:ab:0d:5f:60: f2:0b:f3:18:b3:8a:33:e0:96:26:d6:86:e4:1e:8e: e6:9c:38:e3:3b:fb:48:f4:41:9a:95:96:15:02:6d: a9:26:f7:44:6e:95:2c:8c:ec:b7:44:4c:cd:a4:ae: ff:d8:99:68:c8:74:06:70:30:ae:f0:b0:9e:83:68: 6f:70:96:aa:2a:bf:2a:ee:20:d0:de:25:23:b2:61: 51:71:6d:c7:e3:e8:e7:38:c6:b9:51:2a:d9:f7:d8: ba:8e:4a:85:3d:64:b3:bb:d6:5a:27:6b:98:16:b3: 86:9c:54:59:ab:e1:b3:08:e5:dc:c7:21:d9:5a:b5: 03:91:7f:82:a5:bc:18:75:f4:85:70:75:09:9a:44: f4:bc:8c:e2:98:d9:8a:12:1e:66:31:7b:67:1a:02: e8:97:48:88:78:e7:91:9a:2c:e7:b8:51:35:5d:c6: 5a:62:b4:75:ff:d4:46:16:72:d2:9e:cd:4e:fb:2d: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:62:6A:AB:71:B2:46:94:C2:72:5B:38:0E:86:54:EC:F7:39:7C:F9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rGJqq3GyRpTCcls4DoZU7Pc5fPk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.0.0/20 Signature Algorithm: sha256WithRSAEncryption 15:c5:55:02:b6:70:86:21:50:80:87:ef:08:c2:ab:95:d6:35: a3:9b:1e:38:fa:7c:16:d1:9b:be:a8:d9:f8:9c:20:a4:ad:93: 00:a1:9d:bc:8d:05:b9:7a:2a:63:c2:ed:d3:41:fc:bf:97:3b: 07:86:7e:10:45:8f:10:90:80:de:61:ba:64:2b:75:cf:dd:21: b8:d2:11:f8:bc:27:24:ae:f8:85:ba:94:a1:8d:93:7c:fb:47: 53:42:60:08:d4:7b:7f:80:5a:63:4c:a0:a8:9a:2e:e7:d1:c2: e9:7f:f1:21:84:65:9b:2f:3f:14:a2:2f:d9:9d:44:48:33:3b: d6:31:c8:28:2b:2a:d2:23:24:1f:bb:fd:5b:f8:f9:27:6c:d6: 09:9f:b3:72:3c:fc:3f:39:3a:ed:80:d2:a4:b0:f0:09:b9:83: 82:b2:44:6d:37:77:c3:7d:bb:da:68:80:ac:f5:3d:8d:33:78: c4:03:d5:7a:1c:de:78:d4:93:14:3c:01:5b:40:cf:52:19:5e: 6b:54:42:8f:59:c8:69:22:2a:05:11:3d:10:e0:78:6e:f6:06: 96:36:2c:d1:e2:c4:9b:2b:ae:e9:52:5d:b9:36:37:65:c7:4f: 65:9a:a1:80:2a:7e:2f:d3:09:d4:b4:e3:a8:ee:45:1b:a5:ed: 4b:88:53:43 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEqUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzEyMjlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFDNjI2QUFCNzFCMjQ2 OTRDMjcyNUIzODBFODY1NEVDRjczOTdDRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIpVsFAwuJH6Ju6QIryMx12Dy+8k0RNfCYe0yqXZJyARMZAmaJ jK5MKOsDzhJ02/5i/1Kylo3At+kievzvUrFdFuHr7ic2qw1fYPIL8xizijPglibW huQejuacOOM7+0j0QZqVlhUCbakm90RulSyM7LdETM2krv/YmWjIdAZwMK7wsJ6D aG9wlqoqvyruINDeJSOyYVFxbcfj6Oc4xrlRKtn32LqOSoU9ZLO71lona5gWs4ac VFmr4bMI5dzHIdlatQORf4KlvBh19IVwdQmaRPS8jOKY2YoSHmYxe2caAuiXSIh4 55GaLOe4UTVdxlpitHX/1EYWctKezU77LecRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrGJqq3GyRpTCcls4DoZU7Pc5fPkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3JHSnFxM0d5UnBUQ2NsczREb1pVN1BjNWZQay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATc0gAwDQYJKoZIhvcNAQELBQADggEBABXFVQK2cIYhUICH7wjCq5XWNaOb Hjj6fBbRm76o2ficIKStkwChnbyNBbl6KmPC7dNB/L+XOweGfhBFjxCQgN5humQr dc/dIbjSEfi8JySu+IW6lKGNk3z7R1NCYAjUe3+AWmNMoKiaLufRwul/8SGEZZsv PxSiL9mdREgzO9YxyCgrKtIjJB+7/Vv4+Sds1gmfs3I8/D85Ou2A0qSw8Am5g4Ky RG03d8N9u9pogKz1PY0zeMQD1Xoc3njUkxQ8AVtAz1IZXmtUQo9ZyGkiKgURPRDg eG72BpY2LNHixJsrrulSXbk2N2XHT2WaoYAqfi/TCdS046juRRul7UuIU0M= -----END CERTIFICATE-----Generated at Mon Mar 2 13:09:27 2026 by rpki-client