$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/3PrIdmls8p6dXCXwpFsCua-zXxA.roa File: 3PrIdmls8p6dXCXwpFsCua-zXxA.roa (raw, json) Hash identifier: uGA6CijvUswSoJW+Cuufk4JNAmHOfas7mhWk3RM+N3s= Subject key identifier: DC:FA:C8:76:69:6C:F2:9E:9D:5C:25:F0:A4:5B:02:B9:AF:B3:5F:10 Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Certificate serial: A0 Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/3PrIdmls8p6dXCXwpFsCua-zXxA.roa Signing time: Sun 01 Mar 2026 01:29:14 +0000 ROA not before: Sun 01 Mar 2026 01:29:14 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 24289 IP address blocks: 126.251.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF Validity Not Before: Mar 1 01:29:14 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=DCFAC876696CF29E9D5C25F0A45B02B9AFB35F10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:16:01:d1:77:e7:2c:83:b9:2a:59:57:4c: 42:aa:0b:0b:e9:67:9b:44:23:bc:bf:e7:57:08:2f: d1:f2:53:a7:25:eb:70:d6:89:00:2d:55:ae:dd:fc: f2:1e:bd:f6:6b:8e:dc:a5:fa:88:46:c2:f7:25:c5: 0e:16:5e:88:77:6c:73:ba:93:26:c7:37:78:4e:da: 9b:eb:d0:0c:9e:3f:d1:cf:56:b6:4c:f0:1e:33:98: df:a0:34:29:c7:ca:7c:9f:ef:d8:41:42:14:44:a0: b9:b8:ca:e9:fe:4e:04:c8:e2:e0:6c:45:2b:09:2c: 6d:d6:5b:3b:ee:66:95:f8:01:d9:9f:90:0f:01:74: 37:0c:1c:6e:d6:b5:ba:b1:77:b8:e3:47:e6:23:a7: 06:b9:0d:3b:95:53:b2:7f:e2:47:47:8c:bd:c8:0d: 95:1d:48:0c:6e:78:0c:84:d5:5e:0c:47:7e:f2:f0: 9b:19:08:27:23:35:f0:83:aa:12:a4:73:bc:92:06: a8:8b:4f:eb:d9:56:f5:d6:71:f9:14:9f:f0:29:b0: 8d:a4:a9:4a:26:e3:aa:77:d2:a7:5f:33:78:0c:87: 7b:1d:b8:6b:ad:25:b0:ed:73:f6:6c:9a:fb:b7:a8: 85:6e:7e:28:25:51:b3:59:29:4b:c3:b4:93:9e:7c: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FA:C8:76:69:6C:F2:9E:9D:5C:25:F0:A4:5B:02:B9:AF:B3:5F:10 X509v3 Authority Key Identifier: keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/3PrIdmls8p6dXCXwpFsCua-zXxA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 126.251.64.0/20 Signature Algorithm: sha256WithRSAEncryption 62:4f:e5:f5:83:e3:ad:89:3d:64:20:b1:43:f5:58:16:79:d2: 03:86:23:7a:db:4a:21:15:b5:29:18:10:fe:f3:e8:b3:e0:cf: 80:50:b6:97:86:3d:83:92:d6:6c:56:11:68:55:30:f8:8f:34: e3:91:d5:ac:2d:83:8d:00:54:02:d4:3e:06:cb:a9:d6:4a:26: c5:e6:5c:20:19:6d:93:d7:92:77:2c:f6:fa:e9:d7:f5:a2:09: a1:ab:6d:31:60:20:cc:b2:75:ec:b1:d2:5f:c7:c3:5f:54:a9: c5:af:ba:84:4a:b4:86:99:9f:af:d6:91:27:b3:65:3c:32:96: f1:d5:cb:76:a2:15:88:bc:3c:1c:1b:1d:6d:59:19:6e:45:27: 63:57:ae:99:20:6f:a5:10:47:38:52:d7:f9:f6:2a:84:41:52: 8e:63:b2:a1:96:79:8c:b9:b9:0f:64:f5:8c:8a:de:69:f7:12: 25:f0:0f:8b:4d:8e:2d:2c:6b:e8:f6:df:c1:2f:7b:c6:66:91: a4:51:2b:cc:7e:e6:8b:5a:11:72:81:36:07:29:57:64:14:86: 35:ba:47:fe:85:9d:15:eb:8a:b1:68:bf:30:25:9b:0e:12:f7: fc:81:8f:94:1d:a4:11:38:2a:66:56:f5:10:e7:4f:71:be:bf: 74:a4:a3:d6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTYy MzM4REUzMzJDNkY0QjlFMjU5NkVFNURDMzc5QTI1RUZFNThDRjAeFw0yNjAzMDEw MTI5MTRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDRkFDODc2Njk2Q0Yy OUU5RDVDMjVGMEE0NUIwMkI5QUZCMzVGMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwQBYB0XfnLIO5KllXTEKqCwvpZ5tEI7y/51cIL9HyU6cl63DW iQAtVa7d/PIevfZrjtyl+ohGwvclxQ4WXoh3bHO6kybHN3hO2pvr0AyeP9HPVrZM 8B4zmN+gNCnHynyf79hBQhREoLm4yun+TgTI4uBsRSsJLG3WWzvuZpX4AdmfkA8B dDcMHG7Wtbqxd7jjR+Yjpwa5DTuVU7J/4kdHjL3IDZUdSAxueAyE1V4MR37y8JsZ CCcjNfCDqhKkc7ySBqiLT+vZVvXWcfkUn/ApsI2kqUom46p30qdfM3gMh3sduGut JbDtc/Zsmvu3qIVufiglUbNZKUvDtJOefPrTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3PrIdmls8p6dXCXwpFsCua+zXxAwHwYDVR0jBBgwFoAU5iM43jMsb0ueJZbu XcN5ol7+WM8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ0MC81aU00M2pNc2IwdWVKWmJ1WGNONW9sNy1XTTguY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC81aU00M2pNc2IwdWVKWmJ1WGNONW9s Ny1XTTguY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDQwLzNQcklkbWxzOHA2ZFhDWHdwRnNDdWEtelh4QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR++0AwDQYJKoZIhvcNAQELBQADggEBAGJP5fWD462JPWQgsUP1WBZ50gOG I3rbSiEVtSkYEP7z6LPgz4BQtpeGPYOS1mxWEWhVMPiPNOOR1awtg40AVALUPgbL qdZKJsXmXCAZbZPXkncs9vrp1/WiCaGrbTFgIMyydeyx0l/Hw19UqcWvuoRKtIaZ n6/WkSezZTwylvHVy3aiFYi8PBwbHW1ZGW5FJ2NXrpkgb6UQRzhS1/n2KoRBUo5j sqGWeYy5uQ9k9YyK3mn3EiXwD4tNji0sa+j238Eve8ZmkaRRK8x+5otaEXKBNgcp V2QUhjW6R/6FnRXrirFovzAlmw4S9/yBj5QdpBE4KmZW9RDnT3G+v3Sko9Y= -----END CERTIFICATE-----Generated at Mon Mar 2 21:04:39 2026 by rpki-client