$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2bCDwUqvvSZ-3IG3gnylWnFXVWI.roa File: 2bCDwUqvvSZ-3IG3gnylWnFXVWI.roa (raw, json) Hash identifier: oClSdxK+eBmsHBJ6H2Jcj03d74ZRjMdVveZiWyOXOiA= Subject key identifier: D9:B0:83:C1:4A:AF:BD:26:7E:DC:81:B7:82:7C:A5:5A:71:57:55:62 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12C4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2bCDwUqvvSZ-3IG3gnylWnFXVWI.roa Signing time: Sun 01 Mar 2026 03:16:20 +0000 ROA not before: Sun 01 Mar 2026 03:16:20 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4804 (0x12c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:16:20 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=D9B083C14AAFBD267EDC81B7827CA55A71575562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:0c:18:46:b4:36:04:29:85:c4:83:e6:56: 58:42:75:08:f8:64:e0:20:a4:c0:01:04:72:87:c3: a8:e9:dd:da:1f:47:ba:e1:59:e9:51:d7:43:de:04: 1d:86:3f:05:ea:d9:41:8b:f0:4d:07:46:c3:5a:46: 0b:bc:48:2f:9a:41:4f:5f:dd:95:da:0c:d8:34:ff: 45:dd:fb:13:28:ac:15:31:d6:39:b8:4d:0f:c2:79: 20:3a:4b:d0:8b:22:53:95:13:b1:1c:a0:1a:32:67: b6:88:b7:6e:f5:00:72:bc:ca:65:15:b9:ca:11:5e: e1:9c:ce:64:01:33:3e:b3:00:34:d8:23:96:d8:84: e5:e4:e7:d4:4b:ee:fc:39:1d:e6:5a:95:cb:38:c9: cd:3f:f6:1a:96:19:2e:c6:4a:99:ab:4b:fe:cd:b6: 05:14:93:49:fb:92:0b:f5:35:69:d5:78:6f:78:4a: ef:4b:a7:01:4e:48:ee:f9:ff:8f:35:be:b0:00:15: d5:de:4e:6d:cc:15:25:53:03:34:1d:24:28:b8:9b: bb:9d:77:82:19:7b:81:ea:39:34:01:9f:cd:24:42: d5:68:1f:8e:34:e8:d1:b8:02:44:d5:49:f3:1a:14: 93:39:66:88:0a:7a:26:be:e5:b5:94:e3:16:68:2a: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B0:83:C1:4A:AF:BD:26:7E:DC:81:B7:82:7C:A5:5A:71:57:55:62 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2bCDwUqvvSZ-3IG3gnylWnFXVWI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.160.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:a3:1f:53:0e:e2:7d:46:40:a1:26:40:18:d7:23:61:25:c9: 02:d6:d6:b5:4e:b8:48:8b:fd:f5:a5:11:cf:f8:f3:53:8b:07: 6a:a6:99:4d:e9:5b:75:0a:ec:d3:39:83:e1:6b:33:01:38:3a: a5:b8:51:ca:63:f9:b2:b3:e9:d3:79:73:99:e4:b9:6a:b1:82: 18:af:b6:80:d0:b3:98:44:60:e9:2b:6d:d3:42:70:09:1a:0d: fd:a2:f7:f0:06:1e:c2:96:cb:da:e1:e6:4a:1a:40:68:be:a9: d1:13:1a:eb:e4:2d:88:00:99:4e:f1:d0:af:ab:d4:a8:6b:e3: ac:cb:26:ac:dd:aa:16:6f:88:b2:7f:a2:7a:5f:ff:66:07:81: 4a:b4:e2:26:30:d3:d4:60:29:61:bf:a5:15:30:97:79:df:76: 53:96:18:80:70:8d:79:9f:4e:75:de:9e:56:6c:4a:d3:96:3d: 77:e9:20:23:79:ac:9e:9b:ba:1d:e7:53:ae:f7:7a:ba:50:10: 2f:b7:1a:dd:29:fc:b7:f5:22:17:53:b8:15:7d:47:49:33:5d: 9a:25:ec:0d:90:3e:ed:f8:40:bd:cf:a7:48:b4:1b:65:9a:ac: 14:8e:d2:2d:95:c6:8a:2d:8a:12:e4:b7:c8:51:6d:62:dc:db: 76:dd:29:73 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEsQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzE2MjBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5QjA4M0MxNEFBRkJE MjY3RURDODFCNzgyN0NBNTVBNzE1NzU1NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuugwYRrQ2BCmFxIPmVlhCdQj4ZOAgpMABBHKHw6jp3dofR7rh WelR10PeBB2GPwXq2UGL8E0HRsNaRgu8SC+aQU9f3ZXaDNg0/0Xd+xMorBUx1jm4 TQ/CeSA6S9CLIlOVE7EcoBoyZ7aIt271AHK8ymUVucoRXuGczmQBMz6zADTYI5bY hOXk59RL7vw5HeZalcs4yc0/9hqWGS7GSpmrS/7NtgUUk0n7kgv1NWnVeG94Su9L pwFOSO75/481vrAAFdXeTm3MFSVTAzQdJCi4m7udd4IZe4HqOTQBn80kQtVoH440 6NG4AkTVSfMaFJM5ZogKeia+5bWU4xZoKjmJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2bCDwUqvvSZ+3IG3gnylWnFXVWIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJiQ0R3VXF2dlNaLTNJRzNnbnlsV25GWFZXSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYqAwDQYJKoZIhvcNAQELBQADggEBAI2jH1MO4n1GQKEmQBjXI2ElyQLW 1rVOuEiL/fWlEc/481OLB2qmmU3pW3UK7NM5g+FrMwE4OqW4Ucpj+bKz6dN5c5nk uWqxghivtoDQs5hEYOkrbdNCcAkaDf2i9/AGHsKWy9rh5koaQGi+qdETGuvkLYgA mU7x0K+r1Khr46zLJqzdqhZviLJ/onpf/2YHgUq04iYw09RgKWG/pRUwl3nfdlOW GIBwjXmfTnXenlZsStOWPXfpICN5rJ6buh3nU673erpQEC+3Gt0p/Lf1IhdTuBV9 R0kzXZol7A2QPu34QL3Pp0i0G2WarBSO0i2VxootihLkt8hRbWLc23bdKXM= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:15 2026 by rpki-client