$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2L4KHojq58D4HC0Z9SRsed-NMlg.roa File: 2L4KHojq58D4HC0Z9SRsed-NMlg.roa (raw, json) Hash identifier: guCVjdc4HgH6gaMZmPiUvJTHNJkDuIxqj5kxdRGc65U= Subject key identifier: D8:BE:0A:1E:88:EA:E7:C0:F8:1C:2D:19:F5:24:6C:79:DF:8D:32:58 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12AA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2L4KHojq58D4HC0Z9SRsed-NMlg.roa Signing time: Sun 01 Mar 2026 03:12:30 +0000 ROA not before: Sun 01 Mar 2026 03:12:30 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4778 (0x12aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:12:30 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=D8BE0A1E88EAE7C0F81C2D19F5246C79DF8D3258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:cb:8e:84:c3:0f:e2:c9:e5:8c:e3:ba:61: 0a:df:f4:eb:c5:1c:d3:93:d1:20:0e:33:4d:56:4b: 58:d3:3a:44:45:c2:a4:30:44:59:d9:12:18:91:91: c2:d8:4b:60:21:de:ea:79:71:d5:05:5f:25:a5:8e: 0b:53:52:b7:a0:d5:69:94:a9:24:4d:cd:df:1b:a3: 30:09:09:c5:49:0c:dd:e0:28:2b:5a:b3:e7:3d:a3: f5:1b:f1:be:d4:2d:30:7d:64:d9:bd:d5:2f:ac:89: 3c:43:f4:22:d3:78:82:4e:83:d5:0b:20:13:d6:72: 53:ec:2e:bf:87:13:73:8d:1f:bc:26:2e:8b:dd:d5: 5c:61:d7:49:08:ed:b4:d9:fd:4a:85:12:4b:c1:ba: 1a:3d:87:79:39:01:d3:bf:5a:ca:d9:ed:6b:08:a7: 84:d0:27:e5:a1:df:33:58:4f:53:fa:45:ac:5e:1c: 43:7c:3b:58:dc:73:e2:22:71:0d:61:8c:98:08:87: d0:3f:71:61:32:d5:2b:05:ef:b7:95:75:0c:a8:5f: 69:8d:2f:ea:31:e0:05:c5:62:ee:8c:2a:65:2d:d6: b5:e0:30:39:c3:bd:c4:1a:83:88:2b:ee:31:32:c3: 76:a5:1e:d9:90:9a:3e:6b:5a:ef:34:63:ec:25:4c: 66:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BE:0A:1E:88:EA:E7:C0:F8:1C:2D:19:F5:24:6C:79:DF:8D:32:58 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2L4KHojq58D4HC0Z9SRsed-NMlg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.203.0/24 Signature Algorithm: sha256WithRSAEncryption ab:be:f7:d0:0e:d4:1a:fc:39:75:42:25:a8:d6:2e:21:64:68: 3b:10:4b:a4:72:ab:7c:2d:3e:67:64:e4:26:9f:08:6e:18:77: 53:35:db:01:f9:34:50:94:c9:a1:db:a5:15:9b:b2:e4:1a:c7: bd:ca:d0:ba:27:0c:4d:16:c1:5f:1d:7c:fa:7a:17:d6:84:e0: 14:94:63:ee:1c:87:9f:91:d8:d5:03:e9:0c:e6:66:7c:b3:1c: 84:87:77:67:79:04:53:82:5a:14:2d:5e:ac:4a:b9:d8:b9:6f: 42:29:4b:46:5f:31:85:15:91:f5:ac:ca:0d:1d:9f:61:c7:27: 38:11:cf:c5:d7:55:48:7e:89:3e:9e:34:91:46:eb:e2:a5:f1: 87:5a:94:d1:58:69:5a:06:b2:90:26:9f:2d:18:e9:a8:aa:ad: 40:b4:08:45:6e:86:37:33:c0:ab:d8:17:fd:2d:e5:06:f9:4a: 65:fc:eb:70:18:5a:8a:d1:6d:a7:39:d5:82:a5:8e:2b:ac:72: f7:77:f8:66:69:2f:8e:95:f8:bb:a2:50:77:52:00:a2:b4:c6: c4:cd:0c:d8:64:04:d9:c9:e3:39:0d:04:55:11:bf:f6:3d:4b: d5:9a:52:2b:1c:79:99:1c:c4:79:a7:77:73:bf:95:33:fe:4d: 89:c8:fb:67 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzEyMzBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4QkUwQTFFODhFQUU3 QzBGODFDMkQxOUY1MjQ2Qzc5REY4RDMyNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZbMuOhMMP4snljOO6YQrf9OvFHNOT0SAOM01WS1jTOkRFwqQw RFnZEhiRkcLYS2Ah3up5cdUFXyWljgtTUreg1WmUqSRNzd8bozAJCcVJDN3gKCta s+c9o/Ub8b7ULTB9ZNm91S+siTxD9CLTeIJOg9ULIBPWclPsLr+HE3ONH7wmLovd 1Vxh10kI7bTZ/UqFEkvBuho9h3k5AdO/WsrZ7WsIp4TQJ+Wh3zNYT1P6RaxeHEN8 O1jcc+IicQ1hjJgIh9A/cWEy1SsF77eVdQyoX2mNL+ox4AXFYu6MKmUt1rXgMDnD vcQag4gr7jEyw3alHtmQmj5rWu80Y+wlTGavAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2L4KHojq58D4HC0Z9SRsed+NMlgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJMNEtIb2pxNThENEhDMFo5U1JzZWQtTk1sZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxasswDQYJKoZIhvcNAQELBQADggEBAKu+99AO1Br8OXVCJajWLiFkaDsQ S6Ryq3wtPmdk5CafCG4Yd1M12wH5NFCUyaHbpRWbsuQax73K0LonDE0WwV8dfPp6 F9aE4BSUY+4ch5+R2NUD6QzmZnyzHISHd2d5BFOCWhQtXqxKudi5b0IpS0ZfMYUV kfWsyg0dn2HHJzgRz8XXVUh+iT6eNJFG6+Kl8YdalNFYaVoGspAmny0Y6aiqrUC0 CEVuhjczwKvYF/0t5Qb5SmX863AYWorRbac51YKljiuscvd3+GZpL46V+LuiUHdS AKK0xsTNDNhkBNnJ4zkNBFURv/Y9S9WaUisceZkcxHmnd3O/lTP+TYnI+2c= -----END CERTIFICATE-----Generated at Mon Mar 2 14:50:22 2026 by rpki-client