$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/r_u1Q8SRLEM5W5HQWKm_70vIMy4.roa File: r_u1Q8SRLEM5W5HQWKm_70vIMy4.roa (raw, json) Hash identifier: uQMdMx8KUYDupTS+HAs6tHQ8U8/Fi5IL70DtaTANbO8= Subject key identifier: AF:FB:B5:43:C4:91:2C:43:39:5B:91:D0:58:A9:BF:EF:4B:C8:33:2E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1208 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r_u1Q8SRLEM5W5HQWKm_70vIMy4.roa Signing time: Sun 01 Mar 2026 02:48:35 +0000 ROA not before: Sun 01 Mar 2026 02:48:35 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4616 (0x1208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:48:35 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=AFFBB543C4912C43395B91D058A9BFEF4BC8332E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9d:18:df:b9:0d:74:7e:1e:47:45:cd:85:ab: f3:72:de:0b:0e:a1:c1:57:0a:44:d0:96:f7:0b:cd: eb:19:c6:63:ca:51:91:85:29:2d:08:a6:17:8c:7e: 45:5b:46:d8:63:62:d4:0a:d2:31:09:ea:b2:c5:d8: cc:11:9b:f7:7b:6b:73:f0:e2:67:f5:2e:ba:11:dd: bc:e5:fe:32:66:00:fd:f4:c9:09:ad:c3:e9:fd:4b: 8f:5f:96:92:72:b3:22:6b:36:b5:f2:63:5c:d2:37: fb:f2:9c:e8:3c:70:90:56:40:ad:bd:22:5c:5f:85: b1:7b:21:84:37:45:16:87:90:97:7c:09:5a:33:fe: 2a:1a:cc:a1:67:3e:1c:4e:68:0b:af:b5:a7:f6:bc: d1:3a:5e:83:e8:cf:da:5f:a1:30:a5:02:75:ff:76: 91:80:97:e7:51:08:b0:43:ec:28:84:98:45:e3:fe: a4:ba:cd:91:43:93:6a:31:6a:d6:f6:dc:b8:b7:76: fc:4f:c6:a1:99:9d:04:0b:32:90:c6:02:0f:9f:07: b6:f6:85:f4:98:3f:76:ee:5e:df:ed:a1:1b:a9:47: 97:9f:83:60:09:4c:1f:42:89:d6:27:40:1f:ed:c7: ad:5a:cd:82:4c:90:d0:17:0a:fc:4f:25:89:a5:40: b4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FB:B5:43:C4:91:2C:43:39:5B:91:D0:58:A9:BF:EF:4B:C8:33:2E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r_u1Q8SRLEM5W5HQWKm_70vIMy4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.20.0/23 Signature Algorithm: sha256WithRSAEncryption cb:d2:38:b8:65:02:53:d9:68:44:6e:4b:e4:cd:56:ca:7c:8a: 5c:6a:2d:02:99:2b:6c:05:57:ad:a0:51:a1:14:1c:c2:80:84: ed:ea:2a:8c:1c:86:46:99:5c:0c:fc:7e:3b:df:1d:de:9e:38: 08:8d:a6:39:eb:7b:7c:df:e6:92:e8:1c:2a:b3:97:f7:08:bb: 09:09:48:ef:96:10:ae:c1:f5:1e:0c:11:b1:c2:8b:79:3b:f6: 86:f5:21:9e:27:f1:8b:ac:96:dc:e5:e7:aa:cb:3f:bc:c7:b8: 7e:6f:e8:71:a4:74:18:70:24:64:84:a0:ea:5c:4a:d7:59:68: cd:93:f6:a9:14:a4:10:58:35:b1:36:66:f0:05:63:4b:f3:9f: 7e:8d:06:45:d2:31:20:9d:46:42:3d:03:87:63:ed:a2:3e:1e: b9:bf:43:e4:b7:a2:a3:5f:7b:af:e9:df:90:87:17:60:10:fd: 7c:0d:f8:3f:34:e5:ab:2f:54:04:ad:2b:67:48:19:07:92:9a: 4b:52:d5:09:0e:27:91:f2:de:36:60:51:c7:c4:73:74:f5:cb: 4a:48:77:27:23:99:61:90:e5:a4:37:f8:f2:1f:44:1f:6d:ba: bc:f7:da:59:e1:99:a8:7f:d3:75:d7:46:8a:04:44:f9:31:86: f0:d2:43:d8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEggwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQ4MzVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFGRkJCNTQzQzQ5MTJD NDMzOTVCOTFEMDU4QTlCRkVGNEJDODMzMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBnRjfuQ10fh5HRc2Fq/Ny3gsOocFXCkTQlvcLzesZxmPKUZGF KS0IpheMfkVbRthjYtQK0jEJ6rLF2MwRm/d7a3Pw4mf1LroR3bzl/jJmAP30yQmt w+n9S49flpJysyJrNrXyY1zSN/vynOg8cJBWQK29IlxfhbF7IYQ3RRaHkJd8CVoz /ioazKFnPhxOaAuvtaf2vNE6XoPoz9pfoTClAnX/dpGAl+dRCLBD7CiEmEXj/qS6 zZFDk2oxatb23Li3dvxPxqGZnQQLMpDGAg+fB7b2hfSYP3buXt/toRupR5efg2AJ TB9CidYnQB/tx61azYJMkNAXCvxPJYmlQLQjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUr/u1Q8SRLEM5W5HQWKm/70vIMy4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3JfdTFROFNSTEVNNVc1SFFXS21fNzB2SU15NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0hQwDQYJKoZIhvcNAQELBQADggEBAMvSOLhlAlPZaERuS+TNVsp8ilxq LQKZK2wFV62gUaEUHMKAhO3qKowchkaZXAz8fjvfHd6eOAiNpjnre3zf5pLoHCqz l/cIuwkJSO+WEK7B9R4MEbHCi3k79ob1IZ4n8Yusltzl56rLP7zHuH5v6HGkdBhw JGSEoOpcStdZaM2T9qkUpBBYNbE2ZvAFY0vzn36NBkXSMSCdRkI9A4dj7aI+Hrm/ Q+S3oqNfe6/p35CHF2AQ/XwN+D805asvVAStK2dIGQeSmktS1QkOJ5Hy3jZgUcfE c3T1y0pIdycjmWGQ5aQ3+PIfRB9turz32lnhmah/03XXRooERPkxhvDSQ9g= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:27 2026 by rpki-client