$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4djfnPo1A1V6xd60ZSi1bxq9YhA.roa File: 4djfnPo1A1V6xd60ZSi1bxq9YhA.roa (raw, json) Hash identifier: LtFa7o3KqwJlIrq+NcaLPsGhdjGtiFPbwTxbma4Xn4Q= Subject key identifier: E1:D8:DF:9C:FA:35:03:55:7A:C5:DE:B4:65:28:B5:6F:1A:BD:62:10 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1351 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4djfnPo1A1V6xd60ZSi1bxq9YhA.roa Signing time: Wed 25 Mar 2026 08:42:54 +0000 ROA not before: Wed 25 Mar 2026 08:42:54 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 27.230.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4945 (0x1351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 25 08:42:54 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=E1D8DF9CFA3503557AC5DEB46528B56F1ABD6210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ea:75:a0:6e:78:ff:93:bb:11:1d:98:d3:4b: 28:f4:42:66:df:ca:cc:21:b9:6c:32:16:e2:26:01: 7f:31:0d:3e:05:fe:04:42:a1:d3:21:9f:0d:55:26: a2:82:eb:59:19:0d:d7:02:89:f3:32:e4:0c:da:1a: 5a:3a:51:14:bc:98:38:f0:e7:d9:e3:10:18:5f:23: e4:c0:e4:fb:89:94:ae:aa:62:7f:0c:43:9a:b3:3d: c1:e4:e3:43:a7:82:8b:53:1c:15:6b:9c:d8:82:1a: ce:86:47:5d:22:22:2e:1d:ee:cd:44:82:38:11:a5: d7:04:5a:25:7d:fd:7f:2c:e8:a1:6a:2d:df:a3:19: 9d:09:bb:3c:fd:67:75:13:5b:38:f5:ab:91:f1:16: 90:a5:22:ec:a5:6d:98:9d:63:65:85:f7:fe:6c:7f: 2a:d1:f2:ce:d7:ef:7b:75:11:25:14:9b:cd:52:e4: 4c:82:72:8d:29:07:e6:4f:5b:da:2c:7e:56:8a:61: 5a:61:24:df:d2:d9:04:bc:bb:54:4b:d3:d9:cf:0b: eb:3c:9b:84:11:e2:dd:a2:1d:cf:ad:b8:11:92:60: c6:da:54:fe:85:11:e5:d1:6d:59:5c:d1:5d:64:84: df:4e:fb:9e:8f:bf:5a:d7:33:9a:f7:59:3e:20:2c: da:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D8:DF:9C:FA:35:03:55:7A:C5:DE:B4:65:28:B5:6F:1A:BD:62:10 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4djfnPo1A1V6xd60ZSi1bxq9YhA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.172.0/24 Signature Algorithm: sha256WithRSAEncryption c7:07:c3:38:b5:a9:fb:fa:55:53:e0:6c:2f:20:fd:1c:b9:3e: ba:f5:92:bf:db:9c:19:59:c8:1b:f8:ae:91:3e:be:b1:8d:ff: e7:c2:02:2f:e6:fd:72:5f:24:b7:4a:47:2a:f5:f0:d7:d8:d5: 8e:7f:0d:ab:91:e8:20:5a:15:15:5e:6d:32:06:d7:84:cf:00: 0c:08:e1:d5:7e:14:3d:f7:f2:35:6a:cf:b8:ce:11:1a:5b:2b: 65:09:69:5e:b0:67:cb:37:3d:6b:3d:66:66:ea:fd:ce:73:e4: 57:ec:4d:f6:a9:20:96:6e:53:57:61:a7:75:71:b2:b0:6c:23: d4:ca:95:e6:84:42:47:4a:23:51:c5:13:f9:10:5b:ee:2a:c9: 05:37:a9:78:03:8f:6b:10:1b:21:31:92:3e:ad:2f:1d:96:f0: e0:34:4c:45:8a:6c:22:b5:d6:45:b3:f8:b9:82:62:cf:55:e3: f5:d9:6d:bd:e7:27:b5:6d:16:ce:93:f0:3c:8c:b8:9c:b8:e1: 28:ee:5c:44:cb:df:0e:8d:8e:39:17:0c:89:24:2b:eb:1e:8e: 73:33:c6:55:3b:77:9d:0a:9c:be:f6:58:f3:0f:7d:b7:27:eb: dc:29:11:6c:05:95:be:b9:8e:82:40:fe:2f:4c:fe:e6:18:21: a6:78:5e:2e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICE1EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMjUw ODQyNTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUxRDhERjlDRkEzNTAz NTU3QUM1REVCNDY1MjhCNTZGMUFCRDYyMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI6nWgbnj/k7sRHZjTSyj0QmbfyswhuWwyFuImAX8xDT4F/gRC odMhnw1VJqKC61kZDdcCifMy5AzaGlo6URS8mDjw59njEBhfI+TA5PuJlK6qYn8M Q5qzPcHk40OngotTHBVrnNiCGs6GR10iIi4d7s1EgjgRpdcEWiV9/X8s6KFqLd+j GZ0Juzz9Z3UTWzj1q5HxFpClIuylbZidY2WF9/5sfyrR8s7X73t1ESUUm81S5EyC co0pB+ZPW9osflaKYVphJN/S2QS8u1RL09nPC+s8m4QR4t2iHc+tuBGSYMbaVP6F EeXRbVlc0V1khN9O+56Pv1rXM5r3WT4gLNpFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4djfnPo1A1V6xd60ZSi1bxq9YhAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzRkamZuUG8xQTFWNnhkNjBaU2kxYnhxOVloQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAb5qwwDQYJKoZIhvcNAQELBQADggEBAMcHwzi1qfv6VVPgbC8g/Ry5Prr1 kr/bnBlZyBv4rpE+vrGN/+fCAi/m/XJfJLdKRyr18NfY1Y5/DauR6CBaFRVebTIG 14TPAAwI4dV+FD338jVqz7jOERpbK2UJaV6wZ8s3PWs9Zmbq/c5z5FfsTfapIJZu U1dhp3VxsrBsI9TKleaEQkdKI1HFE/kQW+4qyQU3qXgDj2sQGyExkj6tLx2W8OA0 TEWKbCK11kWz+LmCYs9V4/XZbb3nJ7VtFs6T8DyMuJy44SjuXETL3w6NjjkXDIkk K+sejnMzxlU7d50KnL72WPMPfbcn69wpEWwFlb65joJA/i9M/uYYIaZ4Xi4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:00:07 2026 by rpki-client