$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1OkVQol6_7H24Hd6nuLfmEBBT30.roa File: 1OkVQol6_7H24Hd6nuLfmEBBT30.roa (raw, json) Hash identifier: +lLc9hDAuCEHSY0BH8QpTdl93WSssKAEaINidRQyzHg= Subject key identifier: D4:E9:15:42:89:7A:FF:B1:F6:E0:77:7A:9E:E2:DF:98:40:41:4F:7D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12E6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1OkVQol6_7H24Hd6nuLfmEBBT30.roa Signing time: Sun 01 Mar 2026 03:20:42 +0000 ROA not before: Sun 01 Mar 2026 03:20:42 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4838 (0x12e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:20:42 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=D4E91542897AFFB1F6E0777A9EE2DF9840414F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:21:8a:70:9d:ea:16:10:1a:62:f5:78:6a:2f: 26:ca:b0:27:18:92:47:db:6a:bf:4e:9f:a6:00:f7: 3b:14:5a:72:47:0f:92:a8:c9:88:94:ec:63:6f:28: 02:a8:f0:60:0e:76:85:c6:1d:49:54:98:d2:86:93: 78:ec:06:ff:8a:a4:56:17:0e:da:17:44:46:d5:d6: 9b:da:28:1d:e3:04:da:ed:05:2d:12:d6:48:21:bb: 60:cd:c0:c4:90:8f:58:98:3e:30:1d:d8:09:9f:63: 21:a7:6d:5f:88:1a:54:95:92:0d:44:b2:62:15:ef: b9:c2:66:bd:14:82:56:6b:17:66:b3:1c:10:a8:55: bb:09:69:57:5b:12:7f:ec:48:4b:cd:fc:17:56:5a: 44:77:2b:ce:ed:d2:40:e2:f9:48:f7:74:f7:92:78: 07:2a:a2:e8:ec:ad:fe:60:6c:e8:6f:d6:09:b7:59: a2:8b:fd:5e:c7:c4:b0:d0:5d:82:68:22:a1:bd:56: 63:c8:e1:8b:61:65:43:c1:0d:91:4c:89:b1:e8:4f: c6:16:0c:82:7f:73:26:ac:48:d2:84:52:51:e8:7d: 5a:9a:b5:43:eb:d0:7a:a3:0a:05:09:07:ee:38:cc: 7a:8e:fe:e0:68:1d:8b:a9:d2:a3:8a:0c:39:c2:72: b9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E9:15:42:89:7A:FF:B1:F6:E0:77:7A:9E:E2:DF:98:40:41:4F:7D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1OkVQol6_7H24Hd6nuLfmEBBT30.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.232.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:7a:03:45:57:36:95:6a:8a:2c:98:0c:41:d2:88:f3:62:b5: 10:64:5a:e5:19:50:46:65:a4:71:80:06:0f:dc:aa:d1:ac:93: a2:3b:b3:31:7e:d9:fd:67:40:ce:1e:16:1f:2d:e5:61:05:6a: f3:34:19:46:36:4a:f3:46:1e:ba:3b:df:7f:ec:e8:02:b8:48: 64:7e:de:13:c9:1a:e3:78:f6:e2:5f:65:4d:e2:42:46:1c:0f: 33:31:10:e6:f9:41:49:b1:f6:58:7a:e5:16:bd:7e:44:a2:21: ae:4f:a6:47:0b:64:5a:f3:c4:63:1f:36:9c:3a:79:e4:02:77: df:8e:6d:d7:71:1e:55:62:02:5e:b7:eb:2b:2b:0f:8e:d4:af: 45:f5:09:d6:7d:df:ef:d1:ed:01:69:66:e7:0d:f9:15:42:ab: cf:63:56:e2:93:92:69:23:a9:df:91:44:43:d6:fb:c7:7d:d2: 2a:db:40:95:96:73:b9:3b:56:ed:20:76:39:51:85:c5:ab:be: 34:0c:fe:8a:56:fa:e7:6f:0a:a1:8f:d2:f9:f4:0a:fc:d7:26: 85:80:7e:26:01:db:92:4a:d8:c5:c1:25:60:14:08:cd:08:50: d1:66:4b:d8:00:40:f6:f0:27:cb:79:be:a3:0d:59:1d:aa:9b: 05:0c:f5:15 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzIwNDJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ0RTkxNTQyODk3QUZG QjFGNkUwNzc3QTlFRTJERjk4NDA0MTRGN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbIYpwneoWEBpi9XhqLybKsCcYkkfbar9On6YA9zsUWnJHD5Ko yYiU7GNvKAKo8GAOdoXGHUlUmNKGk3jsBv+KpFYXDtoXREbV1pvaKB3jBNrtBS0S 1kghu2DNwMSQj1iYPjAd2AmfYyGnbV+IGlSVkg1EsmIV77nCZr0UglZrF2azHBCo VbsJaVdbEn/sSEvN/BdWWkR3K87t0kDi+Uj3dPeSeAcqoujsrf5gbOhv1gm3WaKL /V7HxLDQXYJoIqG9VmPI4YthZUPBDZFMibHoT8YWDIJ/cyasSNKEUlHofVqatUPr 0HqjCgUJB+44zHqO/uBoHYup0qOKDDnCcrkXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1OkVQol6/7H24Hd6nuLfmEBBT30wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzFPa1ZRb2w2XzdIMjRIZDZudUxmbUVCQlQzMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxYugwDQYJKoZIhvcNAQELBQADggEBAAt6A0VXNpVqiiyYDEHSiPNitRBk WuUZUEZlpHGABg/cqtGsk6I7szF+2f1nQM4eFh8t5WEFavM0GUY2SvNGHro733/s 6AK4SGR+3hPJGuN49uJfZU3iQkYcDzMxEOb5QUmx9lh65Ra9fkSiIa5PpkcLZFrz xGMfNpw6eeQCd9+ObddxHlViAl636ysrD47Ur0X1CdZ93+/R7QFpZucN+RVCq89j VuKTkmkjqd+RREPW+8d90irbQJWWc7k7Vu0gdjlRhcWrvjQM/opW+udvCqGP0vn0 CvzXJoWAfiYB25JK2MXBJWAUCM0IUNFmS9gAQPbwJ8t5vqMNWR2qmwUM9RU= -----END CERTIFICATE-----Generated at Mon Mar 2 14:50:16 2026 by rpki-client