$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-y3YNhBNDWn8XjSsumIaDNkbzoc.roa File: -y3YNhBNDWn8XjSsumIaDNkbzoc.roa (raw, json) Hash identifier: SC4paXcCWuygntDAv6XX6/hueAQ6iQHEhTaPaf+LPIs= Subject key identifier: FB:2D:D8:36:10:4D:0D:69:FC:5E:34:AC:BA:62:1A:0C:D9:1B:CE:87 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 120B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-y3YNhBNDWn8XjSsumIaDNkbzoc.roa Signing time: Sun 01 Mar 2026 02:48:36 +0000 ROA not before: Sun 01 Mar 2026 02:48:36 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4619 (0x120b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:48:36 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=FB2DD836104D0D69FC5E34ACBA621A0CD91BCE87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a5:f8:a3:42:31:73:5b:73:8a:c9:3e:48:e7: a7:ef:93:1b:99:14:07:e0:30:a9:45:a3:5c:90:ef: 93:55:d9:06:b4:1d:4c:65:d2:33:c4:14:e3:43:b8: 9d:3e:94:90:3a:78:3c:81:9a:a3:aa:be:df:67:30: 93:7c:3e:6d:a0:74:d0:3c:d6:b8:0e:c1:22:2a:4d: 1c:73:08:ff:d3:b7:a7:53:43:8e:67:9a:53:be:7b: 57:06:50:21:94:5a:d5:43:56:4e:18:0e:c2:1b:53: 88:fd:46:61:32:2b:5d:29:2b:3f:65:e9:a2:bb:1f: 43:28:4e:0e:91:90:a7:1d:f1:c1:ff:dc:5d:e7:76: 5c:d1:77:bd:d7:3d:9c:8e:fa:08:fc:4c:c9:b2:4e: 0f:48:1f:bf:05:13:41:b8:ee:88:eb:89:84:3a:ff: fd:f9:f1:70:be:4b:3c:c2:3b:93:ae:b9:02:20:56: 47:b8:19:6a:2b:07:1b:27:c5:c4:df:ad:4d:41:e2: cd:cc:1f:67:6b:d6:9c:77:1e:a9:ff:2a:25:46:c7: 91:a5:af:62:84:14:c0:91:53:5d:a3:cd:f9:96:75: 6c:eb:5d:6f:75:3c:a7:a1:2b:32:e1:de:2a:38:ec: cd:69:96:9a:35:cf:5a:98:a0:56:87:66:06:f3:b2: eb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2D:D8:36:10:4D:0D:69:FC:5E:34:AC:BA:62:1A:0C:D9:1B:CE:87 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-y3YNhBNDWn8XjSsumIaDNkbzoc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.160.0/23 Signature Algorithm: sha256WithRSAEncryption b7:1f:a8:73:4c:1e:a4:ff:85:99:06:b8:30:96:e8:01:b2:f4: 8d:f7:88:b4:8f:67:51:6c:81:33:72:31:82:45:83:d3:1c:80: 9f:67:33:c8:c7:bc:5b:0b:f2:d8:27:f2:51:55:15:98:ba:48: dc:d0:aa:7c:46:73:ab:b2:6b:71:ce:a7:6d:5a:d1:81:d9:4c: 0d:71:7f:10:c4:1a:00:d6:33:1a:98:cf:74:78:5c:15:b1:91: cb:91:12:47:41:47:4e:f3:0c:73:0f:66:41:6c:18:a5:80:0f: b6:f8:03:7a:17:c9:02:bb:c3:55:04:9b:b5:1c:ce:13:fb:99: 59:51:8a:33:63:08:1e:7f:38:e5:c2:14:23:02:84:27:64:81: 91:c3:b4:60:05:b7:84:5a:24:c0:84:d1:3f:41:5c:1d:91:c8: 91:e2:8f:f7:80:12:48:70:20:03:7c:65:a1:85:e3:9f:ad:5f: 96:97:28:50:f2:bd:55:65:9a:66:69:b8:73:72:20:f7:0e:e0: 6f:77:c8:fd:2c:51:72:fa:7f:72:1e:6c:0e:d8:40:cb:54:ec: 46:9f:78:79:aa:c0:58:33:0a:60:b9:00:11:40:ae:58:8e:55: 13:c7:4b:50:65:11:c1:4a:64:9d:e6:b7:a7:52:a4:6e:99:e4: 72:7a:e2:ff -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEgswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQ4MzZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZCMkREODM2MTA0RDBE NjlGQzVFMzRBQ0JBNjIxQTBDRDkxQkNFODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzpfijQjFzW3OKyT5I56fvkxuZFAfgMKlFo1yQ75NV2Qa0HUxl 0jPEFONDuJ0+lJA6eDyBmqOqvt9nMJN8Pm2gdNA81rgOwSIqTRxzCP/Tt6dTQ45n mlO+e1cGUCGUWtVDVk4YDsIbU4j9RmEyK10pKz9l6aK7H0MoTg6RkKcd8cH/3F3n dlzRd73XPZyO+gj8TMmyTg9IH78FE0G47ojriYQ6//358XC+SzzCO5OuuQIgVke4 GWorBxsnxcTfrU1B4s3MH2dr1px3Hqn/KiVGx5Glr2KEFMCRU12jzfmWdWzrXW91 PKehKzLh3io47M1plpo1z1qYoFaHZgbzsuufAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+y3YNhBNDWn8XjSsumIaDNkbzocwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Ly15M1lOaEJORFduOFhqU3N1bUlhRE5rYnpvYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYqAwDQYJKoZIhvcNAQELBQADggEBALcfqHNMHqT/hZkGuDCW6AGy9I33 iLSPZ1FsgTNyMYJFg9McgJ9nM8jHvFsL8tgn8lFVFZi6SNzQqnxGc6uya3HOp21a 0YHZTA1xfxDEGgDWMxqYz3R4XBWxkcuREkdBR07zDHMPZkFsGKWAD7b4A3oXyQK7 w1UEm7UczhP7mVlRijNjCB5/OOXCFCMChCdkgZHDtGAFt4RaJMCE0T9BXB2RyJHi j/eAEkhwIAN8ZaGF45+tX5aXKFDyvVVlmmZpuHNyIPcO4G93yP0sUXL6f3IebA7Y QMtU7EafeHmqwFgzCmC5ABFArliOVRPHS1BlEcFKZJ3mt6dSpG6Z5HJ64v8= -----END CERTIFICATE-----Generated at Mon Mar 2 11:27:46 2026 by rpki-client