$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/x-nY0YY-S3-zI2AYYM5Ky0ebvcs.roa File: x-nY0YY-S3-zI2AYYM5Ky0ebvcs.roa (raw, json) Hash identifier: RO2NYZF2I8bq1l+g89oVQJO2tWXf19PDbKlKRmxiuTo= Subject key identifier: C7:E9:D8:D1:86:3E:4B:7F:B3:23:60:18:60:CE:4A:CB:47:9B:BD:CB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12AD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/x-nY0YY-S3-zI2AYYM5Ky0ebvcs.roa Signing time: Sun 01 Mar 2026 03:12:32 +0000 ROA not before: Sun 01 Mar 2026 03:12:32 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.72.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4781 (0x12ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:12:32 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=C7E9D8D1863E4B7FB323601860CE4ACB479BBDCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:f2:49:27:85:1a:b4:86:b8:73:e2:1a:82: a7:ff:29:fa:e4:1d:ea:03:5e:96:f4:99:1e:ac:55: bd:9c:64:3b:d2:14:f8:53:2b:00:e0:1a:93:47:e1: 65:22:db:54:a6:ff:4e:07:ce:58:f5:4d:45:32:55: 9c:04:0d:a0:28:5e:83:eb:42:59:42:39:9b:14:97: 2a:70:a8:6a:72:d0:48:90:97:b8:e2:61:4b:a2:1d: 65:3a:c4:91:ec:f7:e0:52:c8:a5:9c:bd:e4:7f:dc: 40:2e:2b:df:49:e3:94:ba:3a:a4:eb:e2:a9:1f:c5: 17:ba:94:8a:48:76:73:d3:bd:ae:8c:51:1b:7a:f6: 67:5e:2c:1c:39:bb:55:73:f5:a1:24:e0:9f:fe:99: 28:50:c6:f3:77:b8:34:9b:47:04:41:ad:73:1c:ba: f0:f3:a9:53:27:3e:d2:84:26:29:d1:ad:8a:3b:14: f4:2f:e4:44:c0:82:de:fa:96:39:cd:ff:ba:f3:2f: 6a:b1:3a:16:fa:96:45:24:05:47:d1:3b:ae:c5:0f: fc:7a:86:25:f6:ff:d0:d1:ce:75:e2:91:96:8e:c9: 04:81:68:70:12:c1:53:4c:ae:0c:5d:05:44:a3:37: 34:18:e5:92:9a:68:00:42:fc:72:92:51:74:e5:06: e4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E9:D8:D1:86:3E:4B:7F:B3:23:60:18:60:CE:4A:CB:47:9B:BD:CB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/x-nY0YY-S3-zI2AYYM5Ky0ebvcs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.12.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:6c:c5:ad:02:1c:07:97:3c:5c:ae:bc:be:7b:f1:50:19:21: 0a:d3:18:ac:80:b6:2a:d6:28:f2:5a:e5:80:68:cd:b6:4d:8b: 38:31:ac:74:cc:b5:3b:d2:38:70:3b:60:47:eb:70:99:2a:bb: 0e:24:3b:91:7a:7c:26:10:8e:f4:41:39:87:c5:1b:1b:38:91: d2:36:ff:ed:1c:e8:76:5f:18:a4:dd:fb:96:4f:3c:09:6c:00: 65:c3:eb:51:ac:76:00:8b:84:0f:ef:5c:94:c7:f5:2a:7a:32: 06:e7:37:78:f8:4e:f0:2b:89:aa:e5:c7:ef:d2:b0:0e:63:33: 37:56:5f:b2:38:16:7b:8a:6a:ba:e5:3d:67:38:2c:c9:b2:13: 6f:be:dd:9c:43:96:f9:31:83:c7:de:8a:82:c9:c6:38:73:24: 52:1e:72:76:44:3e:ef:34:59:7b:2c:44:48:4f:10:8c:ae:92: e4:ca:6b:f9:7e:68:e9:63:45:1a:c1:c6:f6:17:06:46:59:7b: 7d:ca:85:8a:5a:bc:d9:01:40:27:c3:c6:14:f5:c3:bb:77:2e: 8f:21:36:cf:1d:d7:7a:78:5b:6b:d4:ee:1a:95:5f:b5:c5:4e: 7d:c2:a3:4e:70:11:80:c2:16:80:3f:dd:fe:1f:41:52:a0:87: 20:ae:8f:78 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEq0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzEyMzJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM3RTlEOEQxODYzRTRC N0ZCMzIzNjAxODYwQ0U0QUNCNDc5QkJEQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC8vJJJ4UatIa4c+Iagqf/KfrkHeoDXpb0mR6sVb2cZDvSFPhT KwDgGpNH4WUi21Sm/04Hzlj1TUUyVZwEDaAoXoPrQllCOZsUlypwqGpy0EiQl7ji YUuiHWU6xJHs9+BSyKWcveR/3EAuK99J45S6OqTr4qkfxRe6lIpIdnPTva6MURt6 9mdeLBw5u1Vz9aEk4J/+mShQxvN3uDSbRwRBrXMcuvDzqVMnPtKEJinRrYo7FPQv 5ETAgt76ljnN/7rzL2qxOhb6lkUkBUfRO67FD/x6hiX2/9DRznXikZaOyQSBaHAS wVNMrgxdBUSjNzQY5ZKaaABC/HKSUXTlBuTZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUx+nY0YY+S3+zI2AYYM5Ky0ebvcswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3gtblkwWVktUzMtekkyQVlZTTVLeTBlYnZjcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBSAwwDQYJKoZIhvcNAQELBQADggEBACtsxa0CHAeXPFyuvL578VAZIQrT GKyAtirWKPJa5YBozbZNizgxrHTMtTvSOHA7YEfrcJkquw4kO5F6fCYQjvRBOYfF Gxs4kdI2/+0c6HZfGKTd+5ZPPAlsAGXD61GsdgCLhA/vXJTH9Sp6MgbnN3j4TvAr iarlx+/SsA5jMzdWX7I4FnuKarrlPWc4LMmyE2++3ZxDlvkxg8feioLJxjhzJFIe cnZEPu80WXssREhPEIyukuTKa/l+aOljRRrBxvYXBkZZe33KhYpavNkBQCfDxhT1 w7t3Lo8hNs8d13p4W2vU7hqVX7XFTn3Co05wEYDCFoA/3f4fQVKghyCuj3g= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:47 2026 by rpki-client