$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/z8OVKKefyBkHVXQ7KWNmLiQq5AQ.roa File: z8OVKKefyBkHVXQ7KWNmLiQq5AQ.roa (raw, json) Hash identifier: SB7dp+UDt4j6SG6hA8nKtkYCAJIzHoeCgNJ5KcXXgIU= Subject key identifier: CF:C3:95:28:A7:9F:C8:19:07:55:74:3B:29:63:66:2E:24:2A:E4:04 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1288 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z8OVKKefyBkHVXQ7KWNmLiQq5AQ.roa Signing time: Sun 01 Mar 2026 03:04:46 +0000 ROA not before: Sun 01 Mar 2026 03:04:46 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4744 (0x1288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:04:46 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=CFC39528A79FC8190755743B2963662E242AE404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:26:f4:69:58:d0:67:3e:30:1d:bb:34:5f:b9: 9a:5f:5a:4d:a7:43:98:76:72:95:65:29:e8:a5:ab: aa:1b:ed:b7:17:50:1f:0a:91:36:7f:27:c9:5b:50: 71:d9:e3:e6:5d:d5:18:39:01:f2:5b:dd:5e:5e:dd: be:f6:6b:50:69:79:f0:0e:4e:7a:1f:15:65:ea:97: 6d:7d:20:85:ff:d3:30:b2:f2:21:15:37:42:43:59: 16:fc:9f:51:93:a4:cd:4b:81:91:47:14:46:e5:c5: fe:4d:2a:4c:cc:9e:61:02:e0:a5:48:59:fd:d8:2c: 9d:09:29:56:c4:a5:66:7b:45:e6:a9:88:59:4e:3a: 36:77:93:b5:47:d3:54:ba:10:6c:b4:0b:82:fc:d2: a3:f8:73:61:98:cc:f8:49:a6:14:a3:e2:eb:0e:d8: 52:77:27:42:1a:32:cd:e0:ed:b1:2b:9f:cc:cc:26: 43:ee:9e:60:25:1e:ea:e4:e2:e1:97:b4:90:5c:d5: 43:f0:b3:a3:9f:3f:e9:68:84:a0:26:6f:91:9b:4c: 49:cc:fb:ed:a2:f7:d6:c2:30:c0:5d:c4:f9:01:d4: e3:1e:7f:0c:4b:5f:1d:0d:fa:15:70:f9:da:67:15: 12:b9:b8:cb:18:da:66:a7:94:6d:61:1b:4f:73:ab: 7d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C3:95:28:A7:9F:C8:19:07:55:74:3B:29:63:66:2E:24:2A:E4:04 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z8OVKKefyBkHVXQ7KWNmLiQq5AQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.80.0/24 Signature Algorithm: sha256WithRSAEncryption 60:d0:04:b1:23:4e:b3:86:80:23:dd:51:91:16:aa:38:c2:f1: 11:4a:30:39:96:28:4f:bc:94:75:7a:e1:75:65:c0:4d:bf:8c: 41:30:81:57:8e:ad:11:71:be:d9:85:f1:55:f2:8a:a3:d3:ca: b7:d7:fa:c3:28:1a:ee:0a:ef:f5:c8:7c:26:de:8f:a3:1f:f7: a2:6d:a1:07:2b:e7:fb:af:16:4b:fc:cc:e8:31:55:e4:58:d5: 02:e4:29:18:c7:7b:47:7e:82:b1:71:2a:9a:64:d5:d1:13:02: ba:e1:4b:47:01:b8:13:2c:64:43:9c:2a:5e:16:34:84:d0:3c: 0d:49:37:b4:18:f0:13:80:23:90:19:0a:18:ab:fe:1e:73:57: 65:ca:df:85:a5:68:6c:08:3a:39:cc:f7:83:20:96:4d:dc:35: d3:33:97:f9:38:97:1b:50:0c:cf:78:bd:52:5b:2a:77:f1:95: 3e:0a:d6:70:11:d3:98:cc:f6:90:e5:15:03:99:96:45:9a:ca: d7:5d:64:03:94:9a:db:3f:c6:a2:4c:15:ab:c8:9b:83:b6:c8: e9:29:e1:e1:f8:6e:72:bf:22:21:0f:35:5d:4e:1b:ef:ce:9a: d5:fb:5e:47:c0:56:18:19:27:d8:ea:4d:44:51:f6:82:b0:2a: 42:10:f8:2f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzA0NDZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENGQzM5NTI4QTc5RkM4 MTkwNzU1NzQzQjI5NjM2NjJFMjQyQUU0MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcJvRpWNBnPjAduzRfuZpfWk2nQ5h2cpVlKeilq6ob7bcXUB8K kTZ/J8lbUHHZ4+Zd1Rg5AfJb3V5e3b72a1BpefAOTnofFWXql219IIX/0zCy8iEV N0JDWRb8n1GTpM1LgZFHFEblxf5NKkzMnmEC4KVIWf3YLJ0JKVbEpWZ7ReapiFlO OjZ3k7VH01S6EGy0C4L80qP4c2GYzPhJphSj4usO2FJ3J0IaMs3g7bErn8zMJkPu nmAlHurk4uGXtJBc1UPws6OfP+lohKAmb5GbTEnM++2i99bCMMBdxPkB1OMefwxL Xx0N+hVw+dpnFRK5uMsY2manlG1hG09zq32TAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUz8OVKKefyBkHVXQ7KWNmLiQq5AQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3o4T1ZLS2VmeUJrSFZYUTdLV05tTGlRcTVBUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABT1AwDQYJKoZIhvcNAQELBQADggEBAGDQBLEjTrOGgCPdUZEWqjjC8RFK MDmWKE+8lHV64XVlwE2/jEEwgVeOrRFxvtmF8VXyiqPTyrfX+sMoGu4K7/XIfCbe j6Mf96JtoQcr5/uvFkv8zOgxVeRY1QLkKRjHe0d+grFxKppk1dETArrhS0cBuBMs ZEOcKl4WNITQPA1JN7QY8BOAI5AZChir/h5zV2XK34WlaGwIOjnM94Mglk3cNdMz l/k4lxtQDM94vVJbKnfxlT4K1nAR05jM9pDlFQOZlkWaytddZAOUmts/xqJMFavI m4O2yOkp4eH4bnK/IiEPNV1OG+/OmtX7XkfAVhgZJ9jqTURR9oKwKkIQ+C8= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:38 2026 by rpki-client