$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/By2qmrmxA7HMXiKTtSemmW5074k.roa File: By2qmrmxA7HMXiKTtSemmW5074k.roa (raw, json) Hash identifier: d1mFJ3uomjV/LUvu4pi/71Jxs2KE9vl4kkE7bjsY9po= Subject key identifier: 07:2D:AA:9A:B9:B1:03:B1:CC:5E:22:93:B5:27:A6:99:6E:74:EF:89 Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Certificate serial: 67 Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/By2qmrmxA7HMXiKTtSemmW5074k.roa Signing time: Sun 01 Feb 2026 01:35:50 +0000 ROA not before: Sun 01 Feb 2026 01:35:50 +0000 ROA not after: Fri 15 Jan 2027 01:30:02 +0000 asID: 17698 IP address blocks: 122.49.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 01:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26 Validity Not Before: Feb 1 01:35:50 2026 GMT Not After : Jan 15 01:30:02 2027 GMT Subject: CN=072DAA9AB9B103B1CC5E2293B527A6996E74EF89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0f:02:b5:42:00:94:40:7b:d4:92:63:87:f3: 7e:63:0d:0e:a5:07:7e:0a:2f:43:4b:b0:78:80:e0: 1c:37:db:8b:31:30:0e:c3:96:fb:c0:97:91:90:0c: 56:3b:23:59:23:62:bb:8d:6c:45:b9:3e:78:5e:d8: 73:a9:cb:b5:35:08:ca:09:98:bf:5e:fa:b5:c5:a0: 00:4c:b6:a9:25:30:50:83:65:89:66:e4:c4:5b:63: 87:e1:34:44:d8:6b:f1:e9:a1:3b:0d:71:9d:48:03: f0:15:45:dd:1e:33:1a:84:9b:9b:1e:52:b0:1f:28: f9:ac:eb:58:c4:82:33:22:15:93:c4:fe:07:70:e1: 90:9e:9a:76:98:a5:68:7d:26:22:3b:8d:80:b2:7d: f5:a0:9b:2d:8b:67:36:33:17:f3:fe:a1:82:08:2a: 75:f8:d7:50:89:e5:21:15:fa:dc:a9:e0:ef:ba:27: 95:92:c1:05:6d:cf:fa:cd:48:0f:36:c6:15:88:f7: e4:81:0c:63:38:c9:4a:45:96:48:ee:f6:d1:62:13: 07:f3:13:15:5c:dc:4f:ca:07:6b:36:c7:bd:c3:51: cc:66:e1:aa:4e:66:0b:e4:79:72:84:eb:28:96:4e: 61:fa:20:f1:e8:01:80:01:1d:4e:7e:ca:ea:77:e1: 96:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2D:AA:9A:B9:B1:03:B1:CC:5E:22:93:B5:27:A6:99:6E:74:EF:89 X509v3 Authority Key Identifier: keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/By2qmrmxA7HMXiKTtSemmW5074k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.49.232.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:f1:08:19:e9:c7:7e:37:9a:b6:ae:6d:a4:1a:67:be:b3:8d: 10:82:78:98:bc:02:4b:ef:99:d7:64:b0:90:97:d5:f9:4a:21: 52:d2:6c:dd:15:7f:af:78:d7:f6:f1:28:ce:ea:fa:e9:6f:d4: 1a:9c:1c:8d:1c:e9:9c:4c:96:04:14:ac:cd:f6:03:a8:42:2a: 61:ce:88:6c:45:d8:c9:24:60:e2:14:73:c9:51:af:65:04:48: 79:20:18:9d:a3:c9:ec:f4:30:06:1a:e5:5c:5a:95:23:2c:15: 90:a6:90:b2:81:c8:8c:71:ba:9e:f2:51:80:97:ea:8b:61:ec: 14:c3:46:83:ea:8c:70:3f:da:ec:f6:14:ba:da:a4:f3:0a:5b: c3:5d:ef:12:09:0d:0e:d1:f0:6a:bc:2b:1a:09:9b:b6:63:bd: a7:c0:56:60:06:7a:35:5b:74:2d:6f:ff:3e:e6:0d:19:ce:42: a8:54:4f:ca:45:f2:53:0e:a9:f7:38:3f:6e:9b:88:8f:d6:f5: 30:ad:e7:68:0a:4a:17:41:91:54:b8:a0:be:d6:af:9b:4f:69: a2:0f:a8:e0:1d:79:34:45:50:b0:40:21:45:01:aa:d7:2b:9d: 9c:e6:e5:3c:78:b1:64:50:44:8e:8e:ce:2a:35:32:a3:0e:9c: 0a:de:70:5e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI2MDIwMTAx MzU1MFoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoMDcyREFBOUFCOUIxMDNC MUNDNUUyMjkzQjUyN0E2OTk2RTc0RUY4OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOsPArVCAJRAe9SSY4fzfmMNDqUHfgovQ0uweIDgHDfbizEwDsOW +8CXkZAMVjsjWSNiu41sRbk+eF7Yc6nLtTUIygmYv176tcWgAEy2qSUwUINliWbk xFtjh+E0RNhr8emhOw1xnUgD8BVF3R4zGoSbmx5SsB8o+azrWMSCMyIVk8T+B3Dh kJ6adpilaH0mIjuNgLJ99aCbLYtnNjMX8/6hgggqdfjXUInlIRX63Kng77onlZLB BW3P+s1IDzbGFYj35IEMYzjJSkWWSO720WITB/MTFVzcT8oHazbHvcNRzGbhqk5m C+R5coTrKJZOYfog8egBgAEdTn7K6nfhllsCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQHLaqaubEDscxeIpO1J6aZbnTviTAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwODIyL0J5MnFtcm14QTdITVhpS1R0U2VtbVc1MDc0ay5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAN6MegwDQYJKoZIhvcNAQELBQADggEBAFzxCBnpx343mraubaQaZ76z jRCCeJi8AkvvmddksJCX1flKIVLSbN0Vf6941/bxKM7q+ulv1BqcHI0c6ZxMlgQU rM32A6hCKmHOiGxF2MkkYOIUc8lRr2UESHkgGJ2jyez0MAYa5VxalSMsFZCmkLKB yIxxup7yUYCX6oth7BTDRoPqjHA/2uz2FLrapPMKW8Nd7xIJDQ7R8Gq8KxoJm7Zj vafAVmAGejVbdC1v/z7mDRnOQqhUT8pF8lMOqfc4P26biI/W9TCt52gKShdBkVS4 oL7Wr5tPaaIPqOAdeTRFULBAIUUBqtcrnZzm5Tx4sWRQRI6Ozio1MqMOnArecF4= -----END CERTIFICATE-----Generated at Tue Mar 3 03:58:51 2026 by rpki-client