$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PHLUd5BIiPUObHZ5-p_Y0p_aj98.roa File: PHLUd5BIiPUObHZ5-p_Y0p_aj98.roa (raw, json) Hash identifier: Z+KbQliImbPjYA0QBHYqKePdpTKbYKbTw09qAHRsvyE= Subject key identifier: 3C:72:D4:77:90:48:88:F5:0E:6C:76:79:FA:9F:D8:D2:9F:DA:8F:DF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1356 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PHLUd5BIiPUObHZ5-p_Y0p_aj98.roa Signing time: Wed 25 Mar 2026 08:58:51 +0000 ROA not before: Wed 25 Mar 2026 08:58:51 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4950 (0x1356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 25 08:58:51 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3C72D477904888F50E6C7679FA9FD8D29FDA8FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:61:92:5f:c8:23:35:19:59:6a:2c:1a:9a: de:30:51:c3:10:00:ed:93:12:3d:74:7a:49:47:f2: 17:d8:3d:6b:4e:33:c8:87:78:f2:c1:39:19:67:b9: 58:44:49:7d:64:e1:d9:96:6f:d3:6b:65:2d:a7:a7: dd:ce:51:a1:ca:b1:05:55:e7:a4:19:83:a1:0c:36: 47:39:6b:f3:8c:ab:58:65:76:29:1a:45:1f:61:cd: 86:88:db:95:2b:ee:3a:6f:00:16:a1:1e:da:bc:87: eb:be:ed:d2:19:80:f5:15:26:82:39:2b:96:ba:e6: 76:76:e2:69:83:ce:ce:49:cb:ae:5b:65:9d:8c:1e: 76:dc:fe:ca:7f:80:0d:d9:24:39:01:3e:ff:76:6f: 08:c6:a5:8f:4c:39:fc:b0:0d:7b:42:37:96:8c:c2: 78:59:4a:85:80:dd:86:68:5a:cd:d9:eb:60:bb:ed: 29:e5:7e:02:8c:9d:c7:8b:e5:6c:00:ee:59:d9:ae: 61:49:bf:65:7b:1b:bf:12:f0:58:37:34:73:82:6e: c3:68:79:b8:e1:0b:10:48:e8:40:aa:a9:87:ee:51: 5f:43:3b:d9:30:7a:d1:8b:81:ca:2c:05:40:f4:cc: 24:06:dd:ad:f0:3e:7f:4f:7f:2b:2b:14:db:d6:c9: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:72:D4:77:90:48:88:F5:0E:6C:76:79:FA:9F:D8:D2:9F:DA:8F:DF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PHLUd5BIiPUObHZ5-p_Y0p_aj98.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.35.0/24 Signature Algorithm: sha256WithRSAEncryption c1:04:cb:bf:17:07:0a:13:ed:c4:81:0e:03:75:ad:e6:07:f5: 0b:0e:ea:27:0d:c5:8d:d9:a3:c0:c0:2f:f6:08:54:40:20:01: 0b:bd:5c:a0:ff:d8:dd:27:b1:df:40:2b:b2:81:e1:e8:11:13: d4:43:e6:80:d1:a8:49:31:65:0d:16:cc:11:7f:d9:7b:5e:5d: 26:d6:36:f8:a7:46:ae:33:ea:97:0d:6d:f6:a4:23:cc:69:54: d0:d2:d1:12:79:6c:39:8c:15:23:f5:63:e2:6a:43:9d:fc:07: 7a:f4:04:a2:e2:86:45:33:5b:84:f8:5e:d0:75:75:9a:c8:bf: 4a:f9:5d:d1:ce:a9:c1:5d:5a:82:97:04:08:63:e1:12:59:bf: 9f:f5:f5:4f:c9:3b:57:9e:34:00:9c:b2:dc:36:3f:63:fe:72: 4a:b0:3f:08:ef:48:c4:10:3e:1c:35:08:a2:a5:39:10:96:bf: 36:11:87:8c:97:2f:ec:18:82:92:1c:9d:29:d5:e8:70:13:13: ab:a1:c3:83:ae:4c:81:c8:c9:6f:ee:a4:cd:cb:a7:e8:e4:f7: 25:83:ba:5a:82:16:42:e0:1d:7b:81:15:d0:be:05:11:39:fc: e0:78:17:64:2e:3d:f6:ee:47:d3:4c:8f:6c:60:d3:b9:cb:15: 6c:fd:82:4e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICE1YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMjUw ODU4NTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNDNzJENDc3OTA0ODg4 RjUwRTZDNzY3OUZBOUZEOEQyOUZEQThGREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR9WGSX8gjNRlZaiwamt4wUcMQAO2TEj10eklH8hfYPWtOM8iH ePLBORlnuVhESX1k4dmWb9NrZS2np93OUaHKsQVV56QZg6EMNkc5a/OMq1hldika RR9hzYaI25Ur7jpvABahHtq8h+u+7dIZgPUVJoI5K5a65nZ24mmDzs5Jy65bZZ2M Hnbc/sp/gA3ZJDkBPv92bwjGpY9MOfywDXtCN5aMwnhZSoWA3YZoWs3Z62C77Snl fgKMnceL5WwA7lnZrmFJv2V7G78S8Fg3NHOCbsNoebjhCxBI6ECqqYfuUV9DO9kw etGLgcosBUD0zCQG3a3wPn9PfysrFNvWyVhfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPHLUd5BIiPUObHZ5+p/Y0p/aj98wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BITFVkNUJJaVBVT2JIWjUtcF9ZMHBfYWo5OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABQiMwDQYJKoZIhvcNAQELBQADggEBAMEEy78XBwoT7cSBDgN1reYH9QsO 6icNxY3Zo8DAL/YIVEAgAQu9XKD/2N0nsd9AK7KB4egRE9RD5oDRqEkxZQ0WzBF/ 2XteXSbWNvinRq4z6pcNbfakI8xpVNDS0RJ5bDmMFSP1Y+JqQ538B3r0BKLihkUz W4T4XtB1dZrIv0r5XdHOqcFdWoKXBAhj4RJZv5/19U/JO1eeNACcstw2P2P+ckqw PwjvSMQQPhw1CKKlORCWvzYRh4yXL+wYgpIcnSnV6HATE6uhw4OuTIHIyW/upM3L p+jk9yWDulqCFkLgHXuBFdC+BRE5/OB4F2QuPfbuR9NMj2xg07nLFWz9gk4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:13:31 2026 by rpki-client