$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1aBWU1-BRx0YdiLI2HZaiX44iEQ.roa File: 1aBWU1-BRx0YdiLI2HZaiX44iEQ.roa (raw, json) Hash identifier: YSWYQXfc5UxDJDPfU76cCC83J6TiGBpJbsCJfuSZH80= Subject key identifier: D5:A0:56:53:5F:81:47:1D:18:76:22:C8:D8:76:5A:89:7E:38:88:44 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1234 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1aBWU1-BRx0YdiLI2HZaiX44iEQ.roa Signing time: Sun 01 Mar 2026 02:52:30 +0000 ROA not before: Sun 01 Mar 2026 02:52:30 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 110.158.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4660 (0x1234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:52:30 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=D5A056535F81471D187622C8D8765A897E388844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:2f:c3:1c:04:77:4b:71:33:07:de:fc:94: f8:56:a8:26:a2:8b:c7:b0:5f:b3:08:55:d3:67:97: f3:f2:97:c0:79:b7:04:46:ae:a6:62:63:a6:fb:8b: 24:d1:27:b1:1d:65:1b:18:01:f2:02:6d:16:a5:55: 30:e0:d5:6b:56:98:98:fa:10:61:64:fa:54:0c:2d: 28:68:fc:8b:36:87:ac:46:0c:b8:db:1a:a1:65:96: 06:06:30:14:37:c3:2d:d4:62:64:8d:2d:06:a9:29: c7:5c:c3:88:10:1c:c8:7d:93:0d:35:f0:c1:77:16: 95:df:5c:7f:48:15:08:6e:ef:06:98:05:13:84:d0: 4a:e8:26:33:16:34:9a:cf:fd:4e:8b:a1:e8:77:cb: 46:be:82:6a:da:98:4e:2e:e3:85:ea:8c:87:ca:77: c0:e6:d5:17:79:af:de:9c:55:f6:38:24:03:56:28: ae:51:86:24:ef:d0:7a:30:68:cc:18:28:05:47:9f: 0f:3e:71:bf:44:7e:90:33:93:90:a7:b4:ba:c2:fb: 4e:18:95:e8:9d:c0:66:2c:10:53:5e:b8:cf:a4:27: 1f:fb:24:e5:10:19:97:62:58:bb:3b:a4:ca:7c:d0: 01:c8:a7:be:0e:83:45:e4:64:8b:e1:f5:b1:92:b3: 95:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A0:56:53:5F:81:47:1D:18:76:22:C8:D8:76:5A:89:7E:38:88:44 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1aBWU1-BRx0YdiLI2HZaiX44iEQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.192.0/18 Signature Algorithm: sha256WithRSAEncryption 9b:d5:e8:90:0e:34:6f:35:f5:74:9a:a3:86:3d:8b:9c:16:2d: 71:17:f9:99:3f:9b:9c:4b:83:5b:6c:3d:02:91:f4:c6:fa:9f: f9:f6:0d:a5:ba:4a:2e:9f:6f:11:5d:16:67:bf:35:bc:97:04: 5e:c5:d1:56:e5:77:9d:f5:03:a1:de:bb:18:1f:56:c8:d5:36: e9:0b:a6:41:86:12:f5:b3:37:ff:ce:d0:11:67:a9:bd:58:a3: 3d:c2:a4:a8:94:df:76:14:a7:77:98:03:67:68:a1:3f:a8:2a: e6:18:ac:02:d8:d9:eb:42:00:1f:96:6a:1b:1f:f4:ad:74:96: 07:5b:92:25:39:24:72:e1:fc:a9:0c:ac:6c:ca:d5:de:a5:3b: 58:e0:da:c9:c2:10:d5:0e:b5:03:53:62:85:ea:85:2f:80:e5: e1:be:18:b5:28:58:6c:46:02:f0:c1:4a:a5:64:a9:47:20:f6: 61:14:d6:dd:3a:dd:09:c9:ed:a7:0c:bf:6d:53:bc:22:b2:74: 0e:c7:12:fe:1c:e0:b5:45:43:52:30:bf:00:2e:77:03:be:cf: 12:b6:56:d7:17:2d:14:65:94:4a:87:61:c4:79:de:a2:7b:0c: 4c:4f:e2:fc:da:3d:28:4f:d5:0e:a3:2a:8d:34:05:cd:51:bd: 50:28:61:39 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjUyMzBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ1QTA1NjUzNUY4MTQ3 MUQxODc2MjJDOEQ4NzY1QTg5N0UzODg4NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4Qi/DHAR3S3EzB978lPhWqCaii8ewX7MIVdNnl/Pyl8B5twRG rqZiY6b7iyTRJ7EdZRsYAfICbRalVTDg1WtWmJj6EGFk+lQMLSho/Is2h6xGDLjb GqFllgYGMBQ3wy3UYmSNLQapKcdcw4gQHMh9kw018MF3FpXfXH9IFQhu7waYBROE 0EroJjMWNJrP/U6Loeh3y0a+gmramE4u44XqjIfKd8Dm1Rd5r96cVfY4JANWKK5R hiTv0HowaMwYKAVHnw8+cb9EfpAzk5CntLrC+04YleidwGYsEFNeuM+kJx/7JOUQ GZdiWLs7pMp80AHIp74Og0XkZIvh9bGSs5WtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1aBWU1+BRx0YdiLI2HZaiX44iEQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzFhQldVMS1CUngwWWRpTEkySFphaVg0NGlFUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZunsAwDQYJKoZIhvcNAQELBQADggEBAJvV6JAONG819XSao4Y9i5wWLXEX +Zk/m5xLg1tsPQKR9Mb6n/n2DaW6Si6fbxFdFme/NbyXBF7F0Vbld531A6Heuxgf VsjVNukLpkGGEvWzN//O0BFnqb1Yoz3CpKiU33YUp3eYA2dooT+oKuYYrALY2etC AB+Wahsf9K10lgdbkiU5JHLh/KkMrGzK1d6lO1jg2snCENUOtQNTYoXqhS+A5eG+ GLUoWGxGAvDBSqVkqUcg9mEU1t063QnJ7acMv21TvCKydA7HEv4c4LVFQ1IwvwAu dwO+zxK2VtcXLRRllEqHYcR53qJ7DExP4vzaPShP1Q6jKo00Bc1RvVAoYTk= -----END CERTIFICATE-----Generated at Mon Mar 2 03:53:40 2026 by rpki-client