$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/KF7KN8a-pG74Dmct-lsPYS2n5pw.roa File: KF7KN8a-pG74Dmct-lsPYS2n5pw.roa (raw, json) Hash identifier: sLFXz80Hg4z6JAS2rjsNfzY65c0THtf+8H9Er1+GV+E= Subject key identifier: 28:5E:CA:37:C6:BE:A4:6E:F8:0E:67:2D:FA:5B:0F:61:2D:A7:E6:9C Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 04CB Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/KF7KN8a-pG74Dmct-lsPYS2n5pw.roa Signing time: Sun 01 Mar 2026 01:29:26 +0000 ROA not before: Sun 01 Mar 2026 01:29:26 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 4686 IP address blocks: 219.112.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Mar 1 01:29:26 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=285ECA37C6BEA46EF80E672DFA5B0F612DA7E69C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:6d:31:a6:c7:aa:e2:fb:29:43:02:9c:36: 7e:ea:5d:af:eb:c6:7c:8b:af:f3:5b:1e:79:61:42: 2f:c2:86:c5:c8:f8:2b:97:42:51:bf:ca:2e:5f:31: 7b:10:ba:f1:a4:a2:8b:b7:69:77:50:38:ec:de:bf: 57:0b:9c:fa:de:41:c9:d7:4b:2f:e2:56:32:11:8d: 89:cd:3b:b0:c0:48:53:a9:8c:31:99:eb:ed:0b:00: fe:b0:08:41:83:34:2f:31:e4:3b:63:b4:fa:7b:c7: 7f:7a:31:a1:dd:7a:1b:d8:61:6c:d2:a6:db:01:78: 61:9e:2a:65:e9:3e:0a:80:8f:e3:7d:40:e0:31:7e: 32:d7:de:c4:06:f1:ed:6b:77:78:b3:14:56:3f:d1: 17:bd:b5:d4:12:22:f2:bd:c0:36:62:6b:23:a4:f3: cc:e7:34:c1:eb:bb:05:82:48:45:8c:19:fb:38:d0: 6d:f3:4b:c5:67:b5:5e:7d:83:c9:cd:3f:e2:ab:08: 64:ba:75:c6:00:58:53:ea:44:70:ed:54:80:00:23: cf:9a:23:ec:c1:38:a1:fe:bd:20:e0:22:22:3c:fb: 4a:99:98:52:84:8b:f7:cb:f2:9e:f5:74:e2:6f:50: 48:5c:a3:9b:f2:89:ef:97:c6:29:d4:e5:6f:be:e7: 48:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5E:CA:37:C6:BE:A4:6E:F8:0E:67:2D:FA:5B:0F:61:2D:A7:E6:9C X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/KF7KN8a-pG74Dmct-lsPYS2n5pw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.112.0.0/18 Signature Algorithm: sha256WithRSAEncryption 06:ed:69:0c:f1:6a:c0:90:c1:e8:52:76:5b:53:85:2f:3c:cb: 37:b5:4b:0c:c0:6b:96:15:e3:48:de:b9:81:65:a3:39:13:31: 4c:7d:e0:8c:cb:b9:78:ab:b6:02:de:96:2d:c0:83:c1:bd:0b: 73:bf:16:45:da:20:cd:aa:51:a8:39:ee:81:89:20:b7:7f:61: 25:f3:e7:13:30:7c:e9:fa:d7:b3:64:dd:de:ac:31:c5:a8:5e: ff:74:a6:99:a8:ce:60:c7:6f:02:03:15:08:4b:a8:93:57:98: b1:41:67:9d:77:3e:7f:51:a2:55:c0:1a:7a:b4:be:dd:ef:80: 13:66:0d:4e:93:6c:c7:b6:e7:80:ea:f9:a2:09:8e:6e:76:d7: 39:c1:de:c9:ff:4d:40:07:3b:c4:6d:5f:e8:63:39:1e:ea:8f: eb:5f:96:61:95:c1:c8:ef:85:36:2f:95:ec:48:3b:3a:9d:bd: 6b:56:12:5f:f0:db:95:8d:3f:b0:77:0f:17:7d:51:92:c8:8f: 20:9d:e3:57:72:c7:1f:24:e2:56:06:49:33:47:ba:82:e1:7a: 7c:9b:aa:e0:4a:72:8b:f3:b6:6d:a2:63:67:40:de:a0:eb:b4: 7c:81:61:6a:ed:27:28:df:03:9b:b0:51:28:15:d6:2d:6f:cd: ca:51:49:3d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMDEw MTI5MjZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4NUVDQTM3QzZCRUE0 NkVGODBFNjcyREZBNUIwRjYxMkRBN0U2OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFeW0xpseq4vspQwKcNn7qXa/rxnyLr/NbHnlhQi/ChsXI+CuX QlG/yi5fMXsQuvGkoou3aXdQOOzev1cLnPreQcnXSy/iVjIRjYnNO7DASFOpjDGZ 6+0LAP6wCEGDNC8x5DtjtPp7x396MaHdehvYYWzSptsBeGGeKmXpPgqAj+N9QOAx fjLX3sQG8e1rd3izFFY/0Re9tdQSIvK9wDZiayOk88znNMHruwWCSEWMGfs40G3z S8VntV59g8nNP+KrCGS6dcYAWFPqRHDtVIAAI8+aI+zBOKH+vSDgIiI8+0qZmFKE i/fL8p71dOJvUEhco5vyie+XxinU5W++50g1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKF7KN8a+pG74Dmct+lsPYS2n5pwwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0tGN0tOOGEtcEc3NERtY3QtbHNQWVMybjVwdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbbcAAwDQYJKoZIhvcNAQELBQADggEBAAbtaQzxasCQwehSdltThS88yze1 SwzAa5YV40jeuYFlozkTMUx94IzLuXirtgLeli3Ag8G9C3O/FkXaIM2qUag57oGJ ILd/YSXz5xMwfOn617Nk3d6sMcWoXv90ppmozmDHbwIDFQhLqJNXmLFBZ513Pn9R olXAGnq0vt3vgBNmDU6TbMe254Dq+aIJjm521znB3sn/TUAHO8RtX+hjOR7qj+tf lmGVwcjvhTYvlexIOzqdvWtWEl/w25WNP7B3Dxd9UZLIjyCd41dyxx8k4lYGSTNH uoLhenybquBKcovztm2iY2dA3qDrtHyBYWrtJyjfA5uwUSgV1i1vzcpRST0= -----END CERTIFICATE-----Generated at Mon Mar 2 06:06:52 2026 by rpki-client