$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uK_-1GUHxQotIktbf-gc4uDJoXE.roa File: uK_-1GUHxQotIktbf-gc4uDJoXE.roa (raw, json) Hash identifier: CiQXVgRmMMVeJk7Qa7jrNZTXvh4jL6vNyQvft66ZC6c= Subject key identifier: B8:AF:FE:D4:65:07:C5:0A:2D:22:4B:5B:7F:E8:1C:E2:E0:C9:A1:71 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12C5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uK_-1GUHxQotIktbf-gc4uDJoXE.roa Signing time: Sun 01 Mar 2026 03:16:21 +0000 ROA not before: Sun 01 Mar 2026 03:16:21 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 110.158.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4805 (0x12c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:16:21 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=B8AFFED46507C50A2D224B5B7FE81CE2E0C9A171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:93:a6:59:47:9d:5f:dd:1b:53:e7:38:7d: 15:3a:0d:d3:3d:df:43:24:b3:ff:d6:8f:c7:6c:5e: ab:96:5d:64:f1:31:8b:d1:bf:72:a2:f8:51:d2:5e: 17:22:99:99:c8:00:3e:3f:72:a3:a3:28:2b:b0:43: 50:23:ed:82:6b:59:c1:8e:b7:39:d1:62:54:e8:47: 45:fc:8f:94:65:72:45:4a:20:fd:ca:c8:1b:9c:fb: 8b:6f:4a:fe:80:29:5c:85:c9:4f:6c:ee:11:69:f7: ed:4a:b3:75:ca:45:c7:70:cd:9a:c3:e7:4e:c8:84: 78:be:08:ec:45:1c:3e:6b:93:0d:b4:62:ca:94:4e: 39:8e:73:ed:d2:aa:21:f8:19:4e:26:b9:00:57:fd: cf:12:55:e5:c0:79:92:a4:de:33:c3:48:0b:cd:b6: 78:13:90:ae:62:c7:a7:05:5a:0f:4a:61:d4:fe:ec: b9:97:50:bc:c8:35:89:7a:b8:56:8b:b4:4a:2a:58: 2e:e9:c2:a6:1c:47:4d:e6:4a:48:cc:ce:66:31:9d: c8:ab:0c:50:d4:dd:e5:78:72:92:e1:f2:72:44:d8: 06:ac:a3:06:00:9d:98:d0:42:5d:b3:f9:00:3f:85: 99:c8:b8:7d:70:8d:80:fc:a3:da:ab:91:1c:2d:2f: ab:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AF:FE:D4:65:07:C5:0A:2D:22:4B:5B:7F:E8:1C:E2:E0:C9:A1:71 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uK_-1GUHxQotIktbf-gc4uDJoXE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.132.0/22 Signature Algorithm: sha256WithRSAEncryption 79:dd:9f:a5:2c:88:b9:c0:d1:a0:28:a0:0d:45:cd:4b:a4:71: b3:59:79:1d:c8:4d:56:96:a6:4c:a5:dc:17:80:e3:b1:cc:26: 80:7e:a7:83:f8:ce:ec:71:15:e2:e2:43:b8:73:60:00:46:f2: 0d:98:c4:53:e3:9e:0a:a6:af:e4:2c:f0:68:3d:1b:33:e9:5a: 5b:93:7b:5b:c2:9b:06:61:7f:15:bf:72:20:f7:94:ba:1a:0f: 94:79:21:08:17:82:de:a0:e9:05:e0:03:f7:69:4b:5e:77:2c: 20:07:49:98:a5:6a:09:73:1e:60:d3:d0:7f:bb:13:4e:48:80: 00:fa:b5:73:23:8e:02:35:e8:b9:02:fa:be:7c:d3:f9:9a:3c: 5e:76:cf:cb:e2:63:8c:01:e9:b2:ce:d4:1e:ce:40:fa:5b:d7: 2d:66:27:28:6d:c1:ff:da:dd:ba:98:42:43:8d:d3:69:98:d1: 67:eb:1a:f9:43:63:a5:53:4e:1c:1c:0b:69:0e:c1:a4:c7:84: 52:bf:46:10:3a:20:99:65:fa:5b:56:44:4d:cf:8a:77:1f:f0: 35:a5:8b:f4:a9:7d:fa:45:27:b8:b5:9a:9a:ab:07:83:e2:67: f2:0f:8c:5b:09:d6:66:c6:02:8f:07:f2:fc:81:4b:b4:d9:63: 4f:e5:ef:96 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEsUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzE2MjFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI4QUZGRUQ0NjUwN0M1 MEEyRDIyNEI1QjdGRTgxQ0UyRTBDOUExNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEdZOmWUedX90bU+c4fRU6DdM930Mks//Wj8dsXquWXWTxMYvR v3Ki+FHSXhcimZnIAD4/cqOjKCuwQ1Aj7YJrWcGOtznRYlToR0X8j5RlckVKIP3K yBuc+4tvSv6AKVyFyU9s7hFp9+1Ks3XKRcdwzZrD507IhHi+COxFHD5rkw20YsqU TjmOc+3SqiH4GU4muQBX/c8SVeXAeZKk3jPDSAvNtngTkK5ix6cFWg9KYdT+7LmX ULzINYl6uFaLtEoqWC7pwqYcR03mSkjMzmYxncirDFDU3eV4cpLh8nJE2AasowYA nZjQQl2z+QA/hZnIuH1wjYD8o9qrkRwtL6sNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUuK/+1GUHxQotIktbf+gc4uDJoXEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3VLXy0xR1VIeFFvdElrdGJmLWdjNHVESm9YRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJunoQwDQYJKoZIhvcNAQELBQADggEBAHndn6UsiLnA0aAooA1FzUukcbNZ eR3ITVaWpkyl3BeA47HMJoB+p4P4zuxxFeLiQ7hzYABG8g2YxFPjngqmr+Qs8Gg9 GzPpWluTe1vCmwZhfxW/ciD3lLoaD5R5IQgXgt6g6QXgA/dpS153LCAHSZilaglz HmDT0H+7E05IgAD6tXMjjgI16LkC+r580/maPF52z8viY4wB6bLO1B7OQPpb1y1m Jyhtwf/a3bqYQkON02mY0WfrGvlDY6VTThwcC2kOwaTHhFK/RhA6IJll+ltWRE3P incf8DWli/SpffpFJ7i1mpqrB4PiZ/IPjFsJ1mbGAo8H8vyBS7TZY0/l75Y= -----END CERTIFICATE-----Generated at Mon Mar 2 04:01:05 2026 by rpki-client