$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/433/aGrufVVkl6pQJzmIJlf08GDd5bQ.roa File: aGrufVVkl6pQJzmIJlf08GDd5bQ.roa (raw, json) Hash identifier: tKvbvukD0akb3iCV7QaeGz8yiFlXcPP22X5L8rIMack= Subject key identifier: 68:6A:EE:7D:55:64:97:AA:50:27:39:88:26:57:F4:F0:60:DD:E5:B4 Certificate issuer: /CN=56B24E383845AFE7DAA631C01D80FB516C348BB0 Certificate serial: 17 Authority key identifier: 56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/aGrufVVkl6pQJzmIJlf08GDd5bQ.roa Signing time: Sat 21 Mar 2026 07:46:57 +0000 ROA not before: Sat 21 Mar 2026 07:46:57 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 18077 IP address blocks: 218.223.192.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56B24E383845AFE7DAA631C01D80FB516C348BB0 Validity Not Before: Mar 21 07:46:57 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=686AEE7D556497AA502739882657F4F060DDE5B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:47:70:eb:10:57:44:9a:bd:21:5f:7c:19: 02:45:4a:30:8d:42:53:7b:92:cc:54:a1:51:ab:66: 9b:61:f6:5e:87:01:35:67:8c:23:4d:26:98:74:7a: 20:e6:9d:cc:d4:8e:04:f4:bb:bd:17:64:d5:10:c5: ec:bf:f0:fe:ca:20:ee:6f:07:a0:95:07:4e:33:e0: 97:fa:78:bf:d6:17:3d:a7:e3:3f:bc:88:32:42:5a: c7:d4:83:e5:67:9e:7f:46:b2:21:f8:cb:80:73:40: 10:0a:56:a7:84:64:eb:84:35:40:a4:4e:e6:4c:56: a5:bc:1e:f6:3e:82:97:52:c9:1a:82:b8:57:6f:f9: b6:1b:81:41:51:a2:27:7a:84:6e:32:03:74:be:fb: 27:79:11:c0:32:73:1e:8b:0f:ca:af:94:b8:9d:93: c3:34:74:5a:9b:a2:8c:6d:f2:c0:b1:77:7f:23:2f: 60:ab:d2:99:81:49:3d:c9:df:34:27:92:00:a7:8e: 97:75:01:70:97:69:41:9c:20:17:0f:95:4d:82:e9: 10:36:d8:f8:dd:3b:5d:79:60:09:4a:70:cb:aa:36: 92:67:fd:7b:17:1a:b9:55:e5:d6:d1:2c:01:e1:ec: 58:c1:c3:b3:75:fc:b1:4f:57:48:ca:87:d6:d3:c2: 13:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6A:EE:7D:55:64:97:AA:50:27:39:88:26:57:F4:F0:60:DD:E5:B4 X509v3 Authority Key Identifier: keyid:56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/aGrufVVkl6pQJzmIJlf08GDd5bQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.223.192.0/20 Signature Algorithm: sha256WithRSAEncryption 8d:b9:46:c2:4f:2a:24:88:9f:52:18:d8:10:90:3e:fa:95:09: a5:4d:68:69:4d:60:47:5c:6f:32:8d:7e:b7:84:85:88:14:ff: 85:11:19:ae:89:d6:8b:57:41:96:b9:46:a1:82:c8:74:9b:6c: 59:d0:7c:9c:c1:5f:c3:97:1f:f6:eb:7f:69:91:2d:f6:99:2b: 72:31:4d:97:40:fb:e6:86:2b:06:8f:3e:1a:d7:f7:60:4c:57: 95:ef:64:fd:38:57:14:c3:98:90:e7:43:6f:47:f1:ca:81:52: bb:fa:96:b0:8f:05:81:fc:8c:0d:ba:a0:fc:12:33:f9:06:d5: fb:61:04:2f:bd:b6:e2:b0:ba:3d:04:da:5b:81:0c:67:fc:15: de:1b:0b:01:5a:be:d9:e3:b1:48:8d:e7:5e:57:c6:c8:56:43: 47:58:e9:f6:89:29:f3:82:76:91:84:bd:6e:a5:b4:b1:c7:12: 26:98:ee:36:7f:e5:08:05:55:0f:47:bf:1a:99:84:18:b1:7c: 07:b7:15:fd:ba:75:66:8d:57:26:59:a8:ee:8b:19:54:bd:c6: ed:91:e1:5e:9e:34:44:8f:38:f5:8d:6f:6d:c8:7e:5a:56:ff: 50:44:c4:17:de:ff:e5:f6:70:fe:c9:00:74:07:0e:c3:b3:51: 0b:f5:8d:c0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NkIy NEUzODM4NDVBRkU3REFBNjMxQzAxRDgwRkI1MTZDMzQ4QkIwMB4XDTI2MDMyMTA3 NDY1N1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNjg2QUVFN0Q1NTY0OTdB QTUwMjczOTg4MjY1N0Y0RjA2MERERTVCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMBRR3DrEFdEmr0hX3wZAkVKMI1CU3uSzFShUatmm2H2XocBNWeM I00mmHR6IOadzNSOBPS7vRdk1RDF7L/w/sog7m8HoJUHTjPgl/p4v9YXPafjP7yI MkJax9SD5Weef0ayIfjLgHNAEApWp4Rk64Q1QKRO5kxWpbwe9j6Cl1LJGoK4V2/5 thuBQVGiJ3qEbjIDdL77J3kRwDJzHosPyq+UuJ2TwzR0WpuijG3ywLF3fyMvYKvS mYFJPcnfNCeSAKeOl3UBcJdpQZwgFw+VTYLpEDbY+N07XXlgCUpwy6o2kmf9exca uVXl1tEsAeHsWMHDs3X8sU9XSMqH1tPCE+8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRoau59VWSXqlAnOYgmV/TwYN3ltDAfBgNVHSMEGDAWgBRWsk44OEWv59qmMcAd gPtRbDSLsDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDMzL1ZySk9PRGhGci1mYXBqSEFIWUQ3VVd3MGk3QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ZySk9PRGhGci1mYXBqSEFIWUQ3VVd3 MGk3QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80MzMvYUdydWZWVmtsNnBRSnptSUpsZjA4R0RkNWJRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNrfwDANBgkqhkiG9w0BAQsFAAOCAQEAjblGwk8qJIifUhjYEJA++pUJpU1o aU1gR1xvMo1+t4SFiBT/hREZronWi1dBlrlGoYLIdJtsWdB8nMFfw5cf9ut/aZEt 9pkrcjFNl0D75oYrBo8+Gtf3YExXle9k/ThXFMOYkOdDb0fxyoFSu/qWsI8FgfyM Dbqg/BIz+QbV+2EEL7224rC6PQTaW4EMZ/wV3hsLAVq+2eOxSI3nXlfGyFZDR1jp 9okp84J2kYS9bqW0sccSJpjuNn/lCAVVD0e/GpmEGLF8B7cV/bp1Zo1XJlmo7osZ VL3G7ZHhXp40RI849Y1vbch+Wlb/UETEF97/5fZw/skAdAcOw7NRC/WNwA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:32:56 2026 by rpki-client