$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-mvNmHcl-NAaJUCRJWCna-oHti0.roa File: -mvNmHcl-NAaJUCRJWCna-oHti0.roa (raw, json) Hash identifier: fok+31uUIHAoqz4Q1DFPw1RiVzhjjEjXMZTfvZq5oeY= Subject key identifier: FA:6B:CD:98:77:25:F8:D0:1A:25:40:91:25:60:A7:6B:EA:07:B6:2D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 125D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-mvNmHcl-NAaJUCRJWCna-oHti0.roa Signing time: Sun 01 Mar 2026 03:00:26 +0000 ROA not before: Sun 01 Mar 2026 03:00:26 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4701 (0x125d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:00:26 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=FA6BCD987725F8D01A2540912560A76BEA07B62D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:7d:52:b5:29:5a:9d:21:3e:d4:4c:e7:8d: fd:fa:19:c1:c1:ae:d1:20:82:83:18:93:44:22:fd: 0b:6f:76:d5:e7:4e:9c:23:43:17:38:cd:1f:64:20: 43:1d:37:6c:38:12:3c:a4:28:34:c9:13:8e:a6:44: db:fd:aa:32:07:72:b0:44:ad:bc:a0:75:68:26:c6: f2:27:02:59:42:78:86:ac:a9:7d:00:9e:66:74:75: 6e:2e:86:f9:e0:f4:4d:a5:d5:15:92:73:e2:3a:67: 69:71:8a:d7:ef:24:9f:ec:b2:83:d3:b3:50:ab:57: 01:b7:5a:12:36:c9:2c:2a:64:06:a3:12:99:1c:7c: 27:1f:50:f8:4e:b4:b2:41:8e:1f:18:ab:96:b8:5d: d6:c2:06:07:2f:4e:ba:00:63:d8:a6:73:03:27:46: 87:3d:cc:43:40:14:a3:c1:d0:85:3a:1b:a9:e6:60: e4:7d:40:a8:2e:4e:28:d9:56:d2:ec:bc:74:d6:7a: 99:02:bb:14:40:3a:98:f3:68:37:7f:64:1b:09:48: 20:7b:2c:72:8e:28:93:7b:8a:71:6f:be:a9:74:a5: 72:60:1e:96:3a:40:23:62:06:4c:d9:1f:65:c4:40: 5e:c7:95:92:a2:a2:32:4e:5d:02:79:c2:33:18:a9: a9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6B:CD:98:77:25:F8:D0:1A:25:40:91:25:60:A7:6B:EA:07:B6:2D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-mvNmHcl-NAaJUCRJWCna-oHti0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.100.0/24 Signature Algorithm: sha256WithRSAEncryption b4:65:33:5f:5f:89:b1:cf:d4:e3:8c:c6:ce:8c:5c:67:f0:c7: 12:27:64:25:d5:f0:9f:b3:e3:af:e7:fe:24:6b:df:7d:e3:7e: 78:fe:a2:57:76:11:fe:a7:79:4c:cc:e8:d2:96:f1:2a:22:62: d5:61:3d:16:35:5b:30:41:31:f1:6f:35:b5:46:9c:f5:e1:6f: 64:93:05:0f:de:51:f5:34:d7:6e:18:0f:f2:94:bf:f9:21:c6: 61:af:3d:23:58:0d:68:81:4f:25:0c:65:c2:d7:9e:a9:10:f9: c7:22:82:78:1d:ee:bc:0c:a1:a9:2d:46:9d:c5:b2:5a:5b:38: 1c:2f:fc:56:b6:33:fc:2b:bc:56:e9:ca:7c:77:be:f4:b7:4a: e9:f9:41:2a:c7:60:75:f0:11:d6:e2:42:3f:1c:0e:7f:3a:3c: 3a:d8:35:85:44:ab:ca:49:60:3f:9d:dd:1b:bb:e7:70:0c:85: 03:08:aa:1a:13:4f:ae:c9:86:b7:ce:3c:af:1c:23:14:49:fe: b9:da:86:e3:20:7e:2d:95:d5:c4:f7:f3:bc:15:8c:ab:cc:2d: 1d:8e:82:dd:db:a5:1b:3e:e8:14:e2:41:17:6a:46:5c:52:0a: ca:eb:c9:94:96:98:3c:9c:03:21:c7:fa:e4:62:cd:b4:f8:fe: aa:f6:83:5b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzAwMjZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZBNkJDRDk4NzcyNUY4 RDAxQTI1NDA5MTI1NjBBNzZCRUEwN0I2MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHiH1StSlanSE+1Eznjf36GcHBrtEggoMYk0Qi/QtvdtXnTpwj Qxc4zR9kIEMdN2w4EjykKDTJE46mRNv9qjIHcrBErbygdWgmxvInAllCeIasqX0A nmZ0dW4uhvng9E2l1RWSc+I6Z2lxitfvJJ/ssoPTs1CrVwG3WhI2ySwqZAajEpkc fCcfUPhOtLJBjh8Yq5a4XdbCBgcvTroAY9imcwMnRoc9zENAFKPB0IU6G6nmYOR9 QKguTijZVtLsvHTWepkCuxRAOpjzaDd/ZBsJSCB7LHKOKJN7inFvvql0pXJgHpY6 QCNiBkzZH2XEQF7HlZKiojJOXQJ5wjMYqamNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+mvNmHcl+NAaJUCRJWCna+oHti0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Ly1tdk5tSGNsLU5BYUpVQ1JKV0NuYS1vSHRpMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxamQwDQYJKoZIhvcNAQELBQADggEBALRlM19fibHP1OOMxs6MXGfwxxIn ZCXV8J+z46/n/iRr333jfnj+old2Ef6neUzM6NKW8SoiYtVhPRY1WzBBMfFvNbVG nPXhb2STBQ/eUfU0124YD/KUv/khxmGvPSNYDWiBTyUMZcLXnqkQ+ccigngd7rwM oaktRp3FslpbOBwv/Fa2M/wrvFbpynx3vvS3Sun5QSrHYHXwEdbiQj8cDn86PDrY NYVEq8pJYD+d3Ru753AMhQMIqhoTT67JhrfOPK8cIxRJ/rnahuMgfi2V1cT387wV jKvMLR2Ogt3bpRs+6BTiQRdqRlxSCsrryZSWmDycAyHH+uRizbT4/qr2g1s= -----END CERTIFICATE-----Generated at Mon Mar 2 11:29:17 2026 by rpki-client