$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2nUOtUsoSYdI_7OqnlGZMbo0utU.roa File: 2nUOtUsoSYdI_7OqnlGZMbo0utU.roa (raw, json) Hash identifier: ZOqgJyWUPhqZnPv/O69/orsLqaLqfO3PpHInd86b50M= Subject key identifier: DA:75:0E:B5:4B:28:49:87:48:FF:B3:AA:9E:51:99:31:BA:34:BA:D5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1107 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2nUOtUsoSYdI_7OqnlGZMbo0utU.roa Signing time: Sun 01 Mar 2026 02:02:58 +0000 ROA not before: Sun 01 Mar 2026 02:02:58 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4359 (0x1107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:02:58 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=DA750EB54B28498748FFB3AA9E519931BA34BAD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:f7:fa:f4:d7:c5:77:20:e5:63:0d:e9:b1: fa:6b:fb:4b:49:18:dc:0a:2a:21:25:57:8a:d0:da: 89:18:5a:ed:1e:fb:a0:9b:4d:12:27:9d:4b:2d:9d: 53:22:b0:e3:22:1b:6c:8b:a9:50:68:34:dc:54:e7: 59:67:8d:51:3b:fb:0e:19:8d:3d:88:dd:aa:76:e4: 89:3b:ac:5b:84:7e:77:b4:00:5e:a8:5f:a9:98:83: f2:64:03:98:58:30:79:e9:aa:e6:c5:db:f8:f9:be: f5:ab:a9:4d:81:77:39:3c:44:64:73:0a:47:02:32: 01:02:19:8b:a6:0d:9a:3a:55:30:da:35:89:74:5e: 18:86:66:b5:ac:f4:47:c7:d7:fc:da:81:e2:60:d8: d2:4b:aa:a3:04:32:47:4b:73:56:b6:b4:fb:b1:48: 1c:8c:b4:87:00:36:cf:73:22:56:11:b3:80:ca:e8: 7a:23:2c:c4:17:97:ad:9c:ea:a2:e7:16:46:80:b7: e3:f0:d6:0b:3d:dc:fb:1d:ac:16:ad:05:ce:87:5b: 54:23:ae:3e:f3:8f:57:73:c7:19:7f:27:0f:21:66: 6e:fa:81:d6:80:0a:f2:5d:50:93:79:34:7f:4e:cb: dd:a1:2e:cb:8e:e5:52:c1:91:9c:34:51:98:c0:51: 85:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:75:0E:B5:4B:28:49:87:48:FF:B3:AA:9E:51:99:31:BA:34:BA:D5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2nUOtUsoSYdI_7OqnlGZMbo0utU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.19.0/24 Signature Algorithm: sha256WithRSAEncryption ca:41:7e:56:de:71:b0:06:34:0b:27:da:8c:cc:c0:09:da:bc: cc:e0:79:33:1e:c6:47:56:c6:fb:2e:e7:ea:a7:0e:25:2e:ad: fa:ad:f5:63:da:5c:51:2d:5c:fe:99:bd:01:2b:04:4d:66:12: a1:b2:98:6d:dd:8e:1e:c9:c8:b0:a7:3d:b5:0e:27:2c:8b:20: 45:73:f6:61:3c:93:19:25:73:4d:46:fa:d3:fc:30:7e:3d:b5: 65:22:5b:60:8f:11:4f:98:8a:04:ec:eb:f3:0e:82:60:ae:e1: ae:37:99:fb:1c:f5:da:ed:52:8c:ef:5c:9b:19:b9:4e:d3:91: a3:ac:e2:cb:33:78:3e:c1:26:0b:d4:d8:c7:32:89:4c:ad:1d: fd:1d:1e:4c:c6:06:15:38:de:d9:14:eb:6c:9b:90:8f:91:0c: 98:01:6b:fc:f0:a6:44:92:0d:06:a4:90:52:24:f7:11:a9:a1: 05:5b:22:40:b9:52:be:17:f1:fa:7e:25:a4:ad:5a:7f:29:bd: dc:6e:8c:bc:bd:5c:51:0d:0e:91:a0:7d:a9:c6:35:cf:96:08: 86:5f:ec:98:5e:b6:3c:d6:e0:0b:73:0d:5e:a3:5d:cc:93:74: f1:10:cc:7d:d9:56:40:18:1c:bf:94:42:ac:1c:a9:f7:38:6e: 59:76:1e:6f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjAyNThaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERBNzUwRUI1NEIyODQ5 ODc0OEZGQjNBQTlFNTE5OTMxQkEzNEJBRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo8/f69NfFdyDlYw3psfpr+0tJGNwKKiElV4rQ2okYWu0e+6Cb TRInnUstnVMisOMiG2yLqVBoNNxU51lnjVE7+w4ZjT2I3ap25Ik7rFuEfne0AF6o X6mYg/JkA5hYMHnpqubF2/j5vvWrqU2Bdzk8RGRzCkcCMgECGYumDZo6VTDaNYl0 XhiGZrWs9EfH1/zageJg2NJLqqMEMkdLc1a2tPuxSByMtIcANs9zIlYRs4DK6Hoj LMQXl62c6qLnFkaAt+Pw1gs93PsdrBatBc6HW1Qjrj7zj1dzxxl/Jw8hZm76gdaA CvJdUJN5NH9Oy92hLsuO5VLBkZw0UZjAUYWPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2nUOtUsoSYdI/7OqnlGZMbo0utUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJuVU90VXNvU1lkSV83T3FubEdaTWJvMHV0VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYhMwDQYJKoZIhvcNAQELBQADggEBAMpBflbecbAGNAsn2ozMwAnavMzg eTMexkdWxvsu5+qnDiUurfqt9WPaXFEtXP6ZvQErBE1mEqGymG3djh7JyLCnPbUO JyyLIEVz9mE8kxklc01G+tP8MH49tWUiW2CPEU+YigTs6/MOgmCu4a43mfsc9drt UozvXJsZuU7TkaOs4sszeD7BJgvU2McyiUytHf0dHkzGBhU43tkU62ybkI+RDJgB a/zwpkSSDQakkFIk9xGpoQVbIkC5Ur4X8fp+JaStWn8pvdxujLy9XFENDpGgfanG Nc+WCIZf7JhetjzW4AtzDV6jXcyTdPEQzH3ZVkAYHL+UQqwcqfc4bll2Hm8= -----END CERTIFICATE-----Generated at Mon Mar 2 06:54:50 2026 by rpki-client