$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/655/tY5ANT54ASfQc38aXV1iS4_-n64.roa File: tY5ANT54ASfQc38aXV1iS4_-n64.roa (raw, json) Hash identifier: 1l126nxatIgoAgLDsyIzDCVAzo14U1TMBlOkut1KZdw= Subject key identifier: B5:8E:40:35:3E:78:01:27:D0:73:7F:1A:5D:5D:62:4B:8F:FE:9F:AE Certificate issuer: /CN=67AE21A3C7D4782B45B6BDC14B8A120D0617AB42 Certificate serial: 23 Authority key identifier: 67:AE:21:A3:C7:D4:78:2B:45:B6:BD:C1:4B:8A:12:0D:06:17:AB:42 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z64ho8fUeCtFtr3BS4oSDQYXq0I.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/tY5ANT54ASfQc38aXV1iS4_-n64.roa Signing time: Sun 01 Mar 2026 01:35:36 +0000 ROA not before: Sun 01 Mar 2026 01:35:36 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 7690 IP address blocks: 158.199.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/Z64ho8fUeCtFtr3BS4oSDQYXq0I.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/Z64ho8fUeCtFtr3BS4oSDQYXq0I.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z64ho8fUeCtFtr3BS4oSDQYXq0I.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AE21A3C7D4782B45B6BDC14B8A120D0617AB42 Validity Not Before: Mar 1 01:35:36 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=B58E40353E780127D0737F1A5D5D624B8FFE9FAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:f8:f0:a6:66:66:01:1a:31:5e:c1:1f:0e: fa:14:48:f2:fb:a7:cc:58:1a:6f:00:ef:3e:a3:d3: fa:95:8c:bb:cc:30:65:a7:4f:4b:3a:08:e3:8d:79: 8e:8e:5c:f6:a7:0d:bb:2c:b8:52:f5:f0:e5:fb:2a: f7:1e:0f:54:fd:5d:a7:6f:ed:6a:90:ae:91:d3:d9: 65:7e:26:e7:07:6c:89:a3:3a:48:3a:1f:f0:80:26: bd:a0:cb:44:40:a5:93:20:14:92:d3:c4:f1:b1:b5: 69:64:e6:4c:bf:14:bd:1f:56:e6:50:6d:4d:2b:4d: 46:ec:bc:2f:d5:67:36:81:ce:dd:b3:7d:26:f6:00: 04:12:9c:ed:b2:b1:d6:50:9d:5d:e8:36:ca:96:11: 2e:bd:72:7b:b2:83:8c:5a:59:aa:ce:e3:1f:dc:b3: ee:da:a3:5a:4d:5f:b5:36:4d:91:9f:16:8b:81:85: c2:f4:16:04:bb:11:d0:47:5c:20:6a:57:3a:78:1c: 0b:35:e7:8e:6c:66:89:ab:36:3c:26:7c:61:d3:d6: e7:55:23:7f:b2:9f:b0:b5:26:c4:36:9a:d1:5c:99: a3:76:50:1a:51:9b:7c:9d:78:85:3e:0b:59:54:d0: f9:97:ba:55:fd:c8:5f:33:bb:35:e4:85:46:63:69: dc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8E:40:35:3E:78:01:27:D0:73:7F:1A:5D:5D:62:4B:8F:FE:9F:AE X509v3 Authority Key Identifier: keyid:67:AE:21:A3:C7:D4:78:2B:45:B6:BD:C1:4B:8A:12:0D:06:17:AB:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/Z64ho8fUeCtFtr3BS4oSDQYXq0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z64ho8fUeCtFtr3BS4oSDQYXq0I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/tY5ANT54ASfQc38aXV1iS4_-n64.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 158.199.112.0/20 Signature Algorithm: sha256WithRSAEncryption a0:7c:a5:16:62:a4:43:72:06:aa:e7:6a:a4:cf:8a:13:4f:16: 47:a0:7d:36:18:46:98:f4:65:a6:05:69:bf:54:e3:01:46:c6: b9:42:93:e4:44:44:61:8d:82:07:e8:b0:fe:be:8d:6d:23:1a: 72:0b:51:92:96:e5:9b:3b:cf:35:29:86:af:3e:e5:3a:a3:81: 8c:82:a7:f2:3d:b4:85:b9:d7:87:38:2f:06:d3:3a:3b:d2:ab: 47:23:f9:30:03:1a:e9:c3:6d:3e:09:fd:18:72:90:45:2a:38: 11:ba:b0:e1:a6:4d:6b:15:a1:e8:f7:40:07:5f:c6:68:6f:e3: 6f:60:91:a0:6e:bc:25:37:c3:80:da:58:cb:36:8b:0b:44:3d: b2:a9:91:c3:67:b0:91:6f:8c:fe:8e:7f:31:7b:8c:d3:52:e1: b2:ae:98:d5:bb:55:9a:d3:1b:1a:2d:1f:c4:15:c3:63:be:c6: f5:d6:13:2e:06:d1:c5:7f:c4:8a:8a:44:24:12:07:0b:86:19: ed:80:ff:60:8e:a0:41:71:c3:b4:bb:08:cd:14:ff:9e:f7:64: 63:d8:0e:18:87:3b:0a:00:b0:bf:51:76:2a:e9:8b:b2:26:fc: 54:08:a9:84:d6:36:63:44:a1:3c:ac:d6:7b:f2:45:6d:08:26: 20:bb:28:8e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2N0FF MjFBM0M3RDQ3ODJCNDVCNkJEQzE0QjhBMTIwRDA2MTdBQjQyMB4XDTI2MDMwMTAx MzUzNloXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoQjU4RTQwMzUzRTc4MDEy N0QwNzM3RjFBNUQ1RDYyNEI4RkZFOUZBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALuh+PCmZmYBGjFewR8O+hRI8vunzFgabwDvPqPT+pWMu8wwZadP SzoI4415jo5c9qcNuyy4UvXw5fsq9x4PVP1dp2/tapCukdPZZX4m5wdsiaM6SDof 8IAmvaDLREClkyAUktPE8bG1aWTmTL8UvR9W5lBtTStNRuy8L9VnNoHO3bN9JvYA BBKc7bKx1lCdXeg2ypYRLr1ye7KDjFpZqs7jH9yz7tqjWk1ftTZNkZ8Wi4GFwvQW BLsR0EdcIGpXOngcCzXnjmxmias2PCZ8YdPW51Ujf7KfsLUmxDaa0VyZo3ZQGlGb fJ14hT4LWVTQ+Ze6Vf3IXzO7NeSFRmNp3E0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS1jkA1PngBJ9BzfxpdXWJLj/6frjAfBgNVHSMEGDAWgBRnriGjx9R4K0W2vcFL ihINBherQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjU1L1o2NGhvOGZVZUN0RnRyM0JTNG9TRFFZWHEwSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1o2NGhvOGZVZUN0RnRyM0JTNG9TRFFZ WHEwSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NTUvdFk1QU5UNTRBU2ZRYzM4YVhWMWlTNF8tbjY0LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ7HcDANBgkqhkiG9w0BAQsFAAOCAQEAoHylFmKkQ3IGqudqpM+KE08WR6B9 NhhGmPRlpgVpv1TjAUbGuUKT5EREYY2CB+iw/r6NbSMacgtRkpblmzvPNSmGrz7l OqOBjIKn8j20hbnXhzgvBtM6O9KrRyP5MAMa6cNtPgn9GHKQRSo4Ebqw4aZNaxWh 6PdAB1/GaG/jb2CRoG68JTfDgNpYyzaLC0Q9sqmRw2ewkW+M/o5/MXuM01Lhsq6Y 1btVmtMbGi0fxBXDY77G9dYTLgbRxX/EiopEJBIHC4YZ7YD/YI6gQXHDtLsIzRT/ nvdkY9gOGIc7CgCwv1F2KumLsib8VAiphNY2Y0ShPKzWe/JFbQgmILsojg== -----END CERTIFICATE-----Generated at Mon Mar 2 10:45:23 2026 by rpki-client