$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sshzooylzaAU5LvnmeYV6cz1Beg.roa File: sshzooylzaAU5LvnmeYV6cz1Beg.roa (raw, json) Hash identifier: mbKdWKiNWvo4cNHTZIDtOS71vmzwlPU50rMvXzFiu/M= Subject key identifier: B2:C8:73:A2:8C:A5:CD:A0:14:E4:BB:E7:99:E6:15:E9:CC:F5:05:E8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1111 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sshzooylzaAU5LvnmeYV6cz1Beg.roa Signing time: Sun 01 Mar 2026 02:07:25 +0000 ROA not before: Sun 01 Mar 2026 02:07:25 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4369 (0x1111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:07:25 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=B2C873A28CA5CDA014E4BBE799E615E9CCF505E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:95:d1:2f:7e:47:8d:4c:3e:4a:70:1a:1a:8a: 44:b6:c3:dd:f7:1c:11:6f:b8:80:d5:98:ef:a5:18: f3:26:70:45:b0:a9:61:59:4e:29:e1:1a:51:69:5e: d5:58:f4:74:c5:f6:8a:bd:d0:74:2b:ff:70:36:d5: bc:b8:77:72:18:1a:d3:0d:af:7e:6b:92:d4:99:16: af:e1:d2:ec:86:16:f9:a0:2a:4e:8e:b1:68:f1:55: b7:d2:79:a6:2f:70:d1:30:ce:07:a3:07:4e:0e:3a: 9e:03:dc:b7:10:ff:b6:31:83:3f:e3:41:dd:7f:43: 14:7e:23:44:e6:a4:41:b3:3d:f8:ca:8d:50:8a:33: fe:69:7e:55:7b:72:1b:f5:79:fb:d7:03:f7:55:ee: b0:62:76:98:a7:a8:82:86:a5:ea:5c:75:3e:bf:18: cf:76:c4:1b:a6:8a:ca:d1:6d:df:1a:a3:87:71:23: c9:76:89:91:5f:ea:3f:8f:93:46:ca:f2:1b:0c:1a: d9:4a:92:53:9b:c9:fa:cd:13:d7:ec:2b:c7:fb:4a: c0:71:00:be:43:b5:41:75:3c:48:cc:ac:35:50:fb: c6:03:13:87:01:d8:da:65:ee:60:2d:7f:01:78:c1: f7:64:70:40:fc:65:da:08:c8:d3:e1:b5:21:40:d3: 56:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C8:73:A2:8C:A5:CD:A0:14:E4:BB:E7:99:E6:15:E9:CC:F5:05:E8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sshzooylzaAU5LvnmeYV6cz1Beg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.182.0/23 Signature Algorithm: sha256WithRSAEncryption cb:de:8f:1c:31:47:84:03:df:f6:b3:86:ac:8b:08:e4:09:db: 25:e0:90:d3:f4:30:cb:70:74:a0:cf:9c:91:74:77:96:00:05: f8:b3:88:2a:d1:87:4c:6c:9b:18:0f:f3:4c:38:1d:33:18:62: 32:f7:ce:88:b7:ce:be:89:b3:9c:ff:cf:6d:79:1b:c5:ef:66: 6e:93:ef:31:9e:65:05:d5:5a:0a:5d:2f:ee:96:cc:ac:94:bd: bb:ff:6a:88:72:38:24:a2:5c:42:d5:a0:95:8a:51:32:60:10: f1:1b:13:ff:ad:e7:db:7f:31:78:25:4d:a9:6c:5f:ad:37:4f: af:4f:88:23:57:18:01:a3:94:06:17:58:68:e5:fa:13:e6:13: d0:f5:45:87:80:42:7c:ba:a9:1e:8c:79:eb:e7:50:aa:1c:63: 91:a1:f6:94:56:8a:f6:e9:8d:69:06:d4:2d:e9:69:5a:d3:bb: df:14:3c:46:ee:37:48:d3:47:13:43:1e:35:c2:31:d1:bc:7b: cb:ec:cf:35:05:03:3a:f9:04:69:ad:db:f7:db:82:e7:06:6c: fa:e6:6c:9d:63:15:4a:5d:26:43:3a:fa:1b:5a:a9:18:eb:33: ae:e0:3f:0e:81:5e:eb:ca:25:99:9e:9d:b8:7f:db:23:b0:d8: 5a:69:81:cb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjA3MjVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIyQzg3M0EyOENBNUNE QTAxNEU0QkJFNzk5RTYxNUU5Q0NGNTA1RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/ldEvfkeNTD5KcBoaikS2w933HBFvuIDVmO+lGPMmcEWwqWFZ TinhGlFpXtVY9HTF9oq90HQr/3A21by4d3IYGtMNr35rktSZFq/h0uyGFvmgKk6O sWjxVbfSeaYvcNEwzgejB04OOp4D3LcQ/7Yxgz/jQd1/QxR+I0TmpEGzPfjKjVCK M/5pflV7chv1efvXA/dV7rBidpinqIKGpepcdT6/GM92xBumisrRbd8ao4dxI8l2 iZFf6j+Pk0bK8hsMGtlKklObyfrNE9fsK8f7SsBxAL5DtUF1PEjMrDVQ+8YDE4cB 2Npl7mAtfwF4wfdkcED8ZdoIyNPhtSFA01YrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsshzooylzaAU5LvnmeYV6cz1BegwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NzaHpvb3lsemFBVTVMdm5tZVlWNmN6MUJlZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBT7YwDQYJKoZIhvcNAQELBQADggEBAMvejxwxR4QD3/azhqyLCOQJ2yXg kNP0MMtwdKDPnJF0d5YABfiziCrRh0xsmxgP80w4HTMYYjL3zoi3zr6Js5z/z215 G8XvZm6T7zGeZQXVWgpdL+6WzKyUvbv/aohyOCSiXELVoJWKUTJgEPEbE/+t59t/ MXglTalsX603T69PiCNXGAGjlAYXWGjl+hPmE9D1RYeAQny6qR6MeevnUKocY5Gh 9pRWivbpjWkG1C3paVrTu98UPEbuN0jTRxNDHjXCMdG8e8vszzUFAzr5BGmt2/fb gucGbPrmbJ1jFUpdJkM6+htaqRjrM67gPw6BXuvKJZmenbh/2yOw2Fppgcs= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:46 2026 by rpki-client