$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sf1yJVjfsIfyyyMEiOEtBKpCDsA.roa File: sf1yJVjfsIfyyyMEiOEtBKpCDsA.roa (raw, json) Hash identifier: Fz/6ZivgRq+G2g+YW6QXkUC+dvLun5QhlPozIhb5XeA= Subject key identifier: B1:FD:72:25:58:DF:B0:87:F2:CB:23:04:88:E1:2D:04:AA:42:0E:C0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 129A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sf1yJVjfsIfyyyMEiOEtBKpCDsA.roa Signing time: Sun 01 Mar 2026 03:08:45 +0000 ROA not before: Sun 01 Mar 2026 03:08:45 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 211.14.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4762 (0x129a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:08:45 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=B1FD722558DFB087F2CB230488E12D04AA420EC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e7:63:1a:80:a3:2f:3b:e9:05:ba:6e:b5:57: 0b:a3:50:9a:37:f8:52:09:83:fc:85:81:db:28:c7: 3c:76:3f:0a:c9:8e:35:df:9f:5c:df:f8:c2:fe:70: 1d:00:5a:55:60:7f:ae:e7:7b:6f:31:80:85:be:25: 53:c8:51:67:53:2d:76:c8:4e:1c:cd:50:8b:a7:76: 6e:e1:0a:20:0c:b2:f3:f0:2b:b2:25:14:bd:b9:a0: 17:8e:63:77:eb:80:20:ec:cb:be:df:6a:b1:56:d6: bd:53:31:fb:c2:cd:e6:38:19:d8:b8:04:a9:19:9d: a5:4d:98:ae:6c:0b:9f:6d:e7:9a:ac:ac:bb:f7:6e: da:b4:eb:63:33:52:e9:f2:12:d3:2b:b9:e5:08:2f: 1e:df:20:f5:c1:fe:13:09:61:f8:21:29:11:8a:6d: 23:ab:c3:38:e9:24:95:7e:a5:7a:88:06:1f:4f:b2: 68:c7:83:d6:4a:b7:d7:93:aa:09:57:fa:fd:ce:39: 5a:ad:6a:3f:6e:27:86:9b:19:a8:d4:a7:0f:8a:2a: 35:23:0f:9f:06:a4:7d:f5:ed:e6:26:02:09:69:39: 33:8f:c8:de:71:50:87:20:3a:fd:29:53:0f:33:5f: 82:cd:e7:3e:f9:db:3e:f0:7e:31:3a:a9:e3:5a:31: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FD:72:25:58:DF:B0:87:F2:CB:23:04:88:E1:2D:04:AA:42:0E:C0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sf1yJVjfsIfyyyMEiOEtBKpCDsA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.64.0/21 Signature Algorithm: sha256WithRSAEncryption 17:a5:31:b0:f2:96:e0:47:27:2b:d9:3d:50:e7:ef:fe:85:b9: c1:bb:a8:c0:48:2f:98:b8:99:ef:6f:ba:de:c6:09:45:7d:fb: 77:48:4c:04:4a:0a:99:a0:91:13:d8:a1:61:36:99:5d:05:79: 34:27:51:ef:57:73:40:e8:b6:08:a5:60:57:75:6f:f0:8a:c3: ca:51:a6:2c:da:1f:ea:dc:9e:b0:d5:05:ec:1b:1b:4e:87:1b: 76:04:63:f0:1c:77:33:f6:73:f0:5c:65:af:e4:d4:f4:40:1b: 30:99:67:16:5b:97:12:a0:4b:21:ed:61:28:d5:2a:20:a8:24: 9b:e9:91:c4:c7:8c:8a:b0:6f:e3:05:74:81:42:bc:72:97:f8: 0e:9e:a4:22:0e:d8:c7:fb:12:83:5d:85:47:b5:86:08:46:22: ea:38:9c:ed:4e:61:47:03:f8:aa:7e:4e:8e:cc:b0:34:d0:de: c3:39:c3:86:50:80:66:83:09:34:e5:58:97:f9:ae:8f:1f:24: a0:de:3d:e0:08:19:8b:85:30:bb:37:81:db:e6:a4:a6:50:24: 67:a1:68:97:42:98:5b:36:f7:42:ed:a2:09:2a:8e:e6:3a:ea: 08:a7:d8:6c:05:cd:dc:78:70:da:e5:e3:78:d2:12:62:91:cc: 36:e8:11:0d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEpowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzA4NDVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxRkQ3MjI1NThERkIw ODdGMkNCMjMwNDg4RTEyRDA0QUE0MjBFQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDl52MagKMvO+kFum61VwujUJo3+FIJg/yFgdsoxzx2PwrJjjXf n1zf+ML+cB0AWlVgf67ne28xgIW+JVPIUWdTLXbIThzNUIundm7hCiAMsvPwK7Il FL25oBeOY3frgCDsy77farFW1r1TMfvCzeY4Gdi4BKkZnaVNmK5sC59t55qsrLv3 btq062MzUunyEtMrueUILx7fIPXB/hMJYfghKRGKbSOrwzjpJJV+pXqIBh9PsmjH g9ZKt9eTqglX+v3OOVqtaj9uJ4abGajUpw+KKjUjD58GpH317eYmAglpOTOPyN5x UIcgOv0pUw8zX4LN5z752z7wfjE6qeNaMR1RAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsf1yJVjfsIfyyyMEiOEtBKpCDsAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NmMXlKVmpmc0lmeXl5TUVpT0V0QktwQ0RzQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPTDkAwDQYJKoZIhvcNAQELBQADggEBABelMbDyluBHJyvZPVDn7/6FucG7 qMBIL5i4me9vut7GCUV9+3dITARKCpmgkRPYoWE2mV0FeTQnUe9Xc0DotgilYFd1 b/CKw8pRpizaH+rcnrDVBewbG06HG3YEY/AcdzP2c/BcZa/k1PRAGzCZZxZblxKg SyHtYSjVKiCoJJvpkcTHjIqwb+MFdIFCvHKX+A6epCIO2Mf7EoNdhUe1hghGIuo4 nO1OYUcD+Kp+To7MsDTQ3sM5w4ZQgGaDCTTlWJf5ro8fJKDePeAIGYuFMLs3gdvm pKZQJGehaJdCmFs290LtogkqjuY66gin2GwFzdx4cNrl43jSEmKRzDboEQ0= -----END CERTIFICATE-----Generated at Mon Mar 2 08:40:30 2026 by rpki-client