$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/HFLm_QzQ9iwguzXsH_vNIhrm5Pk.roa File: HFLm_QzQ9iwguzXsH_vNIhrm5Pk.roa (raw, json) Hash identifier: am9SMIpVS36cgdusz6DBU3D3jGOSXdyz9Yn+MwVlQ8M= Subject key identifier: 1C:52:E6:FD:0C:D0:F6:2C:20:BB:35:EC:1F:FB:CD:22:1A:E6:E4:F9 Certificate issuer: /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91 Certificate serial: 54 Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/HFLm_QzQ9iwguzXsH_vNIhrm5Pk.roa Signing time: Sun 01 Mar 2026 01:32:03 +0000 ROA not before: Sun 01 Mar 2026 01:32:03 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 17958 IP address blocks: 220.247.184.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91 Validity Not Before: Mar 1 01:32:03 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=1C52E6FD0CD0F62C20BB35EC1FFBCD221AE6E4F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:62:8f:8d:25:02:3b:3a:99:e3:c0:cf:00:d9: 77:b4:29:58:1a:b8:f6:b9:fd:f6:8a:cb:da:19:f1: f7:4d:c5:1d:a9:3a:2f:f6:3a:53:34:42:8e:e4:a2: 5d:29:6c:7e:fc:69:ac:c4:d9:a3:7e:a6:c4:09:2d: 61:d4:94:be:17:e9:6d:b2:d4:8c:80:f1:d0:df:37: 58:b3:8d:65:5e:1b:39:a9:8f:34:c5:3a:e6:42:f4: cb:8a:e0:6e:cd:9b:52:6d:fe:de:9e:d5:e4:48:61: fb:99:66:32:ea:a2:3d:83:2b:dc:c9:47:ef:f1:10: 73:26:b8:45:ac:40:a2:3d:27:51:52:b4:a6:9a:55: 8b:89:83:9d:0a:de:8d:fb:99:d5:66:d9:c0:66:d0: b2:30:29:d6:07:73:31:56:e5:50:1e:71:bc:cf:9c: bd:90:f4:fc:33:d8:7e:21:02:6c:1a:f4:8b:cc:e7: 63:05:fa:d3:a0:03:8a:24:29:71:fd:be:9e:48:3d: fa:9a:fa:60:1a:3e:e5:c0:76:52:72:6e:67:6f:a8: a1:bb:97:ea:0a:47:8d:16:39:f2:52:d5:de:02:66: d7:b2:e5:0e:4d:cc:99:43:e0:99:4b:6f:49:72:09: f5:05:ec:78:57:35:f6:1f:15:5f:3e:6f:10:f9:3c: 2a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:52:E6:FD:0C:D0:F6:2C:20:BB:35:EC:1F:FB:CD:22:1A:E6:E4:F9 X509v3 Authority Key Identifier: keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/HFLm_QzQ9iwguzXsH_vNIhrm5Pk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.247.184.0/21 Signature Algorithm: sha256WithRSAEncryption 63:94:d2:08:69:78:3c:0c:20:f1:f2:62:db:2a:9b:8a:74:f4: 87:48:65:ff:55:a2:98:56:f5:77:4e:54:33:82:68:37:03:4f: 48:67:8d:a3:3c:fd:99:2d:0e:ae:28:1f:df:03:6d:f6:05:0b: 73:fe:2b:85:2c:df:15:56:c0:55:d0:48:0d:86:1d:c3:6c:58: 40:71:31:be:82:c5:59:53:a4:29:8e:ad:b5:4c:d5:dc:49:02: 9c:c1:59:82:2c:d4:b6:ff:42:70:a9:3c:9d:9d:85:a6:5e:14: 12:69:c0:e0:8f:cc:f9:71:ce:df:f2:10:90:7c:af:9e:b8:87: 8c:5c:7f:be:31:6d:23:a9:98:11:e9:e1:10:04:c8:a4:2b:6c: d5:c0:bb:42:a0:b1:ae:3a:31:d7:56:60:d8:2c:6d:5c:69:f4: 02:a7:64:f5:f7:5c:be:3f:a3:36:3d:5b:5c:ab:7c:40:4e:03: 95:ab:ce:39:9c:f1:bb:6b:8b:9f:dc:ea:68:a3:2f:75:5c:5d: 24:84:a7:7b:4e:ac:3b:5b:1b:76:a1:d2:1a:e2:3e:7a:1e:b9: fb:5c:e7:85:d2:d1:78:3b:43:e7:f3:c9:2c:5c:36:38:ac:6b: bf:2a:a7:56:83:10:4f:39:a9:3c:93:bb:a1:52:1b:4d:4f:64: cd:ec:a7:e1 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRjdG MzMwOEZDOTUyMzI0NTk4MzZGREYxNTlBRjZCNEZBQUJBQzkxMB4XDTI2MDMwMTAx MzIwM1oXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoMUM1MkU2RkQwQ0QwRjYy QzIwQkIzNUVDMUZGQkNEMjIxQUU2RTRGOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM9ij40lAjs6mePAzwDZd7QpWBq49rn99orL2hnx903FHak6L/Y6 UzRCjuSiXSlsfvxprMTZo36mxAktYdSUvhfpbbLUjIDx0N83WLONZV4bOamPNMU6 5kL0y4rgbs2bUm3+3p7V5Ehh+5lmMuqiPYMr3MlH7/EQcya4RaxAoj0nUVK0pppV i4mDnQrejfuZ1WbZwGbQsjAp1gdzMVblUB5xvM+cvZD0/DPYfiECbBr0i8znYwX6 06ADiiQpcf2+nkg9+pr6YBo+5cB2UnJuZ2+oobuX6gpHjRY58lLV3gJm17LlDk3M mUPgmUtvSXIJ9QXseFc19h8VXz5vEPk8KtcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQcUub9DND2LCC7Newf+80iGubk+TAfBgNVHSMEGDAWgBQPfzMI/JUjJFmDb98V mva0+quskTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjc5L0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBxcnJKRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBx cnJKRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NzkvSEZMbV9RelE5aXdndXpYc0hfdk5JaHJtNVBrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9z3uDANBgkqhkiG9w0BAQsFAAOCAQEAY5TSCGl4PAwg8fJi2yqbinT0h0hl /1WimFb1d05UM4JoNwNPSGeNozz9mS0Origf3wNt9gULc/4rhSzfFVbAVdBIDYYd w2xYQHExvoLFWVOkKY6ttUzV3EkCnMFZgizUtv9CcKk8nZ2Fpl4UEmnA4I/M+XHO 3/IQkHyvnriHjFx/vjFtI6mYEenhEATIpCts1cC7QqCxrjox11Zg2CxtXGn0Aqdk 9fdcvj+jNj1bXKt8QE4DlavOOZzxu2uLn9zqaKMvdVxdJISne06sO1sbdqHSGuI+ eh65+1znhdLReDtD5/PJLFw2OKxrvyqnVoMQTzmpPJO7oVIbTU9kzeyn4Q== -----END CERTIFICATE-----Generated at Mon Mar 2 14:24:37 2026 by rpki-client