$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xuyuc-YQNyjLLcDH47t3uErm9kQ.roa File: xuyuc-YQNyjLLcDH47t3uErm9kQ.roa (raw, json) Hash identifier: HGxbBS0dwH8mx61cllQpWXOpTgDra1Zk13hxNzoXdDE= Subject key identifier: C6:EC:AE:73:E6:10:37:28:CB:2D:C0:C7:E3:BB:77:B8:4A:E6:F6:44 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 128C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xuyuc-YQNyjLLcDH47t3uErm9kQ.roa Signing time: Sun 01 Mar 2026 03:08:38 +0000 ROA not before: Sun 01 Mar 2026 03:08:38 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4748 (0x128c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:08:38 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=C6ECAE73E6103728CB2DC0C7E3BB77B84AE6F644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:f3:da:dc:15:8a:7a:d8:c2:67:c5:1d:7c: db:09:bc:63:51:89:4b:ae:0c:32:f1:a9:c8:df:80: c9:9b:a3:c8:f6:17:e4:60:08:3c:d8:c5:69:08:bd: 73:05:f9:0c:ad:c7:00:1a:60:20:1a:83:5e:a4:77: 8b:0d:68:d5:e4:dc:22:be:44:17:18:e0:e3:70:83: b7:fe:99:50:93:ec:af:5a:cf:9f:37:48:27:34:84: ed:a5:06:a3:4c:a4:97:40:9c:ac:62:3a:d1:d6:08: 13:0a:c2:5e:80:d9:9c:1a:7d:49:40:f3:d7:82:5b: 98:f1:b4:83:1d:db:38:91:32:e8:18:04:93:05:00: 33:de:43:75:fd:21:d3:e6:c6:3f:8f:ed:2c:cf:ff: 6a:95:64:77:bf:7f:b5:e1:ac:9c:40:91:42:ea:41: 5f:a8:3b:27:04:e2:84:d1:80:f7:3a:e1:ea:43:bc: fe:17:3d:e3:01:0a:75:20:2e:95:7d:ed:61:17:cc: 2e:bf:ff:d2:13:c7:ca:19:f5:97:8f:ed:ce:f2:a7: df:98:21:6d:36:33:41:a8:42:5d:0f:5a:bb:33:0d: dc:02:fa:32:98:c1:cd:b6:7e:ec:e6:80:0c:42:6f: 11:db:4f:0b:34:9f:eb:fb:72:dc:37:61:5a:d4:44: 6e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EC:AE:73:E6:10:37:28:CB:2D:C0:C7:E3:BB:77:B8:4A:E6:F6:44 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xuyuc-YQNyjLLcDH47t3uErm9kQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.32.0/20 Signature Algorithm: sha256WithRSAEncryption 8f:ac:7b:87:44:91:21:f8:a1:e6:92:d4:2d:df:4b:9e:c8:c2: 77:6f:cf:1c:ad:41:c4:5d:45:58:b3:a6:17:cb:d8:1d:d1:ef: 72:47:86:35:9b:d2:da:33:f7:ce:6b:fe:ea:72:aa:7f:d8:bf: 6c:e5:ee:f7:67:23:6b:12:43:b2:72:60:32:b0:6d:cc:1c:70: 1b:50:6d:d8:1f:12:0c:ae:44:44:34:61:26:9d:b6:e8:f9:c3: 62:d0:65:63:74:4f:fe:4d:19:0f:09:94:0e:1a:84:8c:5a:66: fe:4e:54:49:06:94:c7:bc:97:9f:5f:8a:77:4f:ed:8d:b6:6e: d3:3e:78:49:26:48:d1:58:4a:7d:9f:7b:ab:ab:1f:56:71:81: b7:29:82:b4:ff:0a:25:fd:76:66:ca:4d:e6:3c:37:09:dd:a8: 53:40:04:74:4f:03:31:32:46:62:ec:9c:23:32:f9:5d:dc:51: 79:6a:12:e9:14:fb:41:49:5f:fd:63:66:df:39:65:6c:6c:76: d7:7b:54:b5:3f:40:02:3f:fc:9e:52:a7:4a:9c:88:03:f8:cd: f0:64:e4:79:74:b5:e0:bc:ab:21:a0:c6:0a:2e:69:cf:6d:10: c3:ba:8a:5c:86:c4:67:5b:51:d9:10:c6:f6:7f:f1:db:33:b5: d8:0e:0c:52 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzA4MzhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM2RUNBRTczRTYxMDM3 MjhDQjJEQzBDN0UzQkI3N0I4NEFFNkY2NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHZ/Pa3BWKetjCZ8UdfNsJvGNRiUuuDDLxqcjfgMmbo8j2F+Rg CDzYxWkIvXMF+QytxwAaYCAag16kd4sNaNXk3CK+RBcY4ONwg7f+mVCT7K9az583 SCc0hO2lBqNMpJdAnKxiOtHWCBMKwl6A2ZwafUlA89eCW5jxtIMd2ziRMugYBJMF ADPeQ3X9IdPmxj+P7SzP/2qVZHe/f7XhrJxAkULqQV+oOycE4oTRgPc64epDvP4X PeMBCnUgLpV97WEXzC6//9ITx8oZ9ZeP7c7yp9+YIW02M0GoQl0PWrszDdwC+jKY wc22fuzmgAxCbxHbTws0n+v7ctw3YVrURG6xAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxuyuc+YQNyjLLcDH47t3uErm9kQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3h1eXVjLVlRTnlqTExjREg0N3QzdUVybTlrUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATcnyAwDQYJKoZIhvcNAQELBQADggEBAI+se4dEkSH4oeaS1C3fS57Iwndv zxytQcRdRVizphfL2B3R73JHhjWb0toz985r/upyqn/Yv2zl7vdnI2sSQ7JyYDKw bcwccBtQbdgfEgyuREQ0YSadtuj5w2LQZWN0T/5NGQ8JlA4ahIxaZv5OVEkGlMe8 l59findP7Y22btM+eEkmSNFYSn2fe6urH1ZxgbcpgrT/CiX9dmbKTeY8NwndqFNA BHRPAzEyRmLsnCMy+V3cUXlqEukU+0FJX/1jZt85ZWxsdtd7VLU/QAI//J5Sp0qc iAP4zfBk5Hl0teC8qyGgxgouac9tEMO6ilyGxGdbUdkQxvZ/8dsztdgODFI= -----END CERTIFICATE-----Generated at Mon Mar 2 12:04:18 2026 by rpki-client