$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2RFGLq8dX64e4NJmS2J-HBPaQ3g.roa File: 2RFGLq8dX64e4NJmS2J-HBPaQ3g.roa (raw, json) Hash identifier: pPxvMp8gZ3whRTTnNvnxF6u2ymfs6qviMd0CWuxcdHk= Subject key identifier: D9:11:46:2E:AF:1D:5F:AE:1E:E0:D2:66:4B:62:7E:1C:13:DA:43:78 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1321 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2RFGLq8dX64e4NJmS2J-HBPaQ3g.roa Signing time: Sun 01 Mar 2026 03:32:41 +0000 ROA not before: Sun 01 Mar 2026 03:32:41 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4897 (0x1321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:32:41 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=D911462EAF1D5FAE1EE0D2664B627E1C13DA4378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:78:8d:60:6f:bf:48:78:0b:1d:36:73:1d:d6: e6:35:7f:90:29:8c:e2:f6:35:80:73:f9:f2:d9:e6: c9:b5:41:9d:2f:1f:3b:34:83:94:9f:36:c6:37:d2: 8a:6a:38:d5:4b:b6:54:52:21:6b:cf:a6:ae:99:aa: 35:c2:c8:b5:9c:95:16:1e:e8:93:52:df:09:41:10: 1c:53:92:4e:7a:01:cd:76:c7:09:5b:f1:d3:e4:c0: c3:93:b4:8d:61:19:3b:2f:8d:53:dd:89:18:f2:6d: 06:50:cf:83:92:db:55:34:13:74:54:bd:1a:27:d1: 24:eb:c0:58:23:32:0d:0e:39:52:ed:cf:dd:f9:ca: 0e:36:f7:2f:28:0c:54:8b:1b:d1:30:53:4e:0a:6c: 63:7f:30:5e:68:a9:1e:cd:b4:91:3d:40:c9:15:a3: 68:28:82:1d:f8:9f:f2:58:cc:d5:96:04:24:53:aa: 90:a8:5e:6a:cf:86:79:2f:13:85:b0:ac:a1:88:3c: 25:ea:01:dd:ed:2b:c8:f6:ee:ff:94:fe:87:5e:ba: 60:75:44:6f:cf:60:d1:31:c4:86:5e:f7:79:71:b6: f6:8b:c9:d1:dc:3e:1e:bd:fd:e9:de:2b:e7:e4:20: 8f:8a:3f:45:30:23:d7:e9:33:54:50:5b:47:1b:14: 3d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:11:46:2E:AF:1D:5F:AE:1E:E0:D2:66:4B:62:7E:1C:13:DA:43:78 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2RFGLq8dX64e4NJmS2J-HBPaQ3g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.66.0/23 Signature Algorithm: sha256WithRSAEncryption a0:e9:32:c7:36:ac:31:74:66:42:ae:d3:ec:cb:78:fa:c3:9e: 7b:1e:3d:36:47:03:75:6a:0e:34:60:2e:a7:f0:e1:d4:00:56: d8:23:c8:1a:a0:ab:4c:5d:9b:f0:d0:c4:7e:97:72:f1:95:62: f2:ea:a3:9a:f7:48:81:7b:bc:b6:51:b7:2e:75:8e:47:6e:38: 7a:e5:7a:c3:94:6a:86:f4:71:cd:3e:18:22:38:e8:f1:f9:87: 0e:12:dd:8e:86:6c:10:67:c5:74:f9:30:0f:32:0d:9a:82:3e: cc:0f:04:06:72:1e:71:08:4b:df:6a:f1:0d:12:c6:cc:9d:66: 84:ea:98:25:8c:68:8e:fa:50:2a:65:43:ad:bd:2f:1f:92:f4: 3e:5c:34:24:32:ae:13:6b:1f:7e:4d:05:54:b3:b2:2b:84:df: a3:6c:89:1d:52:04:c6:0b:86:12:20:1f:32:6f:d8:48:f1:82: 2d:42:f1:1a:dc:68:06:cd:aa:32:aa:db:e7:5e:f2:a6:da:5b: 96:65:ca:32:87:d7:cc:3f:fc:e8:db:12:05:36:61:83:c5:c6: bb:29:ee:1a:1c:d3:ae:c6:5b:e4:3d:e8:30:2d:e7:71:6a:3a: 10:de:a3:2a:8f:c8:35:05:dd:8a:20:22:eb:56:1d:34:e0:9e: d6:59:8a:93 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEyEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzMyNDFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5MTE0NjJFQUYxRDVG QUUxRUUwRDI2NjRCNjI3RTFDMTNEQTQzNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDseI1gb79IeAsdNnMd1uY1f5ApjOL2NYBz+fLZ5sm1QZ0vHzs0 g5SfNsY30opqONVLtlRSIWvPpq6ZqjXCyLWclRYe6JNS3wlBEBxTkk56Ac12xwlb 8dPkwMOTtI1hGTsvjVPdiRjybQZQz4OS21U0E3RUvRon0STrwFgjMg0OOVLtz935 yg429y8oDFSLG9EwU04KbGN/MF5oqR7NtJE9QMkVo2gogh34n/JYzNWWBCRTqpCo XmrPhnkvE4WwrKGIPCXqAd3tK8j27v+U/odeumB1RG/PYNExxIZe93lxtvaLydHc Ph69/eneK+fkII+KP0UwI9fpM1RQW0cbFD23AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2RFGLq8dX64e4NJmS2J+HBPaQ3gwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJSRkdMcThkWDY0ZTROSm1TMkotSEJQYVEzZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYkIwDQYJKoZIhvcNAQELBQADggEBAKDpMsc2rDF0ZkKu0+zLePrDnnse PTZHA3VqDjRgLqfw4dQAVtgjyBqgq0xdm/DQxH6XcvGVYvLqo5r3SIF7vLZRty51 jkduOHrlesOUaob0cc0+GCI46PH5hw4S3Y6GbBBnxXT5MA8yDZqCPswPBAZyHnEI S99q8Q0SxsydZoTqmCWMaI76UCplQ629Lx+S9D5cNCQyrhNrH35NBVSzsiuE36Ns iR1SBMYLhhIgHzJv2Ejxgi1C8RrcaAbNqjKq2+de8qbaW5ZlyjKH18w//OjbEgU2 YYPFxrsp7hoc067GW+Q96DAt53FqOhDeoyqPyDUF3YogIutWHTTgntZZipM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:57:41 2026 by rpki-client