$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4RiDm8ULgdMNFUE5zaWHTXVYj74.roa File: 4RiDm8ULgdMNFUE5zaWHTXVYj74.roa (raw, json) Hash identifier: xmakrqvzXtMK3fevimgySGdthzPN7SXxAdbg6AgYODs= Subject key identifier: E1:18:83:9B:C5:0B:81:D3:0D:15:41:39:CD:A5:87:4D:75:58:8F:BE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1337 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4RiDm8ULgdMNFUE5zaWHTXVYj74.roa Signing time: Sun 01 Mar 2026 03:36:28 +0000 ROA not before: Sun 01 Mar 2026 03:36:28 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.108.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4919 (0x1337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:36:28 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=E118839BC50B81D30D154139CDA5874D75588FBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:86:14:f5:b7:91:70:ef:30:5f:ce:f1:d2:ab: f1:0e:a6:21:b9:85:08:c7:91:b3:a2:81:2c:28:f8: 26:d2:5a:4f:0f:2d:a4:68:26:16:e6:ec:a3:3c:f8: 41:47:23:bf:45:bf:09:c0:02:e6:aa:ae:3b:1b:f3: 0f:e7:78:e1:71:d7:82:06:41:21:e9:ff:c9:ca:9f: a0:5f:fe:b2:e3:24:89:5c:b7:3a:d6:fd:27:5a:e3: 63:61:f6:da:e5:b9:11:af:93:7c:0b:7d:44:81:f0: 57:74:0a:50:8e:d9:ba:3d:1d:8b:8d:f9:e8:e7:0e: 58:30:8e:b3:0c:8a:88:fa:ed:cd:69:39:2b:6f:92: 13:c6:7b:bb:f6:b9:aa:87:17:90:29:91:f1:fb:b0: 76:55:07:9f:77:b1:a1:3e:97:f0:98:77:04:0e:f4: 72:e2:a8:86:11:c9:b3:2e:12:62:aa:45:aa:f5:ef: 29:97:f8:75:3f:0b:61:d7:d1:c8:d3:73:ea:bb:31: 20:e1:85:1b:d7:fb:96:d1:54:2f:fc:37:21:7d:62: 0d:73:94:59:96:d3:b3:c1:17:f6:a0:6c:95:93:31: d8:dd:a6:79:ee:c0:55:df:86:7b:a9:66:df:dc:f5: 44:96:b1:1a:55:67:b9:6a:af:ad:eb:c4:f2:ea:bf: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:18:83:9B:C5:0B:81:D3:0D:15:41:39:CD:A5:87:4D:75:58:8F:BE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4RiDm8ULgdMNFUE5zaWHTXVYj74.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.108.0.0/17 Signature Algorithm: sha256WithRSAEncryption 73:c5:89:68:03:fb:5d:99:75:51:d8:f9:17:82:7f:83:73:63: 11:9d:97:42:a6:27:68:c9:71:15:71:de:2b:d3:37:ff:23:7f: b6:4e:98:68:90:6f:97:d7:fa:a4:e1:5c:9f:7b:53:95:00:e4: 4b:a3:76:9d:e9:f7:41:4a:c2:aa:6c:34:20:76:0e:fa:32:a2: 92:46:44:f7:e6:8e:d8:1b:ae:bd:6d:89:58:be:78:6c:7d:79: ae:15:2b:56:a3:f4:eb:03:21:92:fd:94:2d:03:81:da:9c:b6: a3:a9:50:7d:d5:f6:5d:8c:48:cc:9a:ec:8c:17:de:9e:e1:66: c7:38:5f:63:f7:8a:4c:10:a0:d3:0d:18:f8:e6:ea:46:02:5a: c3:58:49:0c:d7:7a:b2:19:14:c7:e0:ba:55:b3:f8:4f:05:14: 9d:7b:22:df:a7:0a:b9:07:83:30:d6:68:f4:ee:bb:27:b4:e1: c4:54:af:d0:b5:ca:a5:15:87:b9:69:20:d0:e2:ed:3d:b4:f1: 15:ba:25:4d:d2:a7:03:93:7c:19:17:93:6a:34:9e:a3:d0:bf: ff:3b:e3:43:31:90:85:8f:47:65:bf:9a:ca:78:d5:ae:9b:98: 6b:18:ed:db:f0:7f:e1:36:c3:ea:89:d1:74:48:95:ce:66:1a: e3:68:bd:d1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzM2MjhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUxMTg4MzlCQzUwQjgx RDMwRDE1NDEzOUNEQTU4NzRENzU1ODhGQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6hhT1t5Fw7zBfzvHSq/EOpiG5hQjHkbOigSwo+CbSWk8PLaRo Jhbm7KM8+EFHI79FvwnAAuaqrjsb8w/neOFx14IGQSHp/8nKn6Bf/rLjJIlctzrW /Sda42Nh9trluRGvk3wLfUSB8Fd0ClCO2bo9HYuN+ejnDlgwjrMMioj67c1pOStv khPGe7v2uaqHF5ApkfH7sHZVB593saE+l/CYdwQO9HLiqIYRybMuEmKqRar17ymX +HU/C2HX0cjTc+q7MSDhhRvX+5bRVC/8NyF9Yg1zlFmW07PBF/agbJWTMdjdpnnu wFXfhnupZt/c9USWsRpVZ7lqr63rxPLqv/lRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4RiDm8ULgdMNFUE5zaWHTXVYj74wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzRSaURtOFVMZ2RNTkZVRTV6YVdIVFhWWWo3NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcxbAAwDQYJKoZIhvcNAQELBQADggEBAHPFiWgD+12ZdVHY+ReCf4NzYxGd l0KmJ2jJcRVx3ivTN/8jf7ZOmGiQb5fX+qThXJ97U5UA5Eujdp3p90FKwqpsNCB2 DvoyopJGRPfmjtgbrr1tiVi+eGx9ea4VK1aj9OsDIZL9lC0DgdqctqOpUH3V9l2M SMya7IwX3p7hZsc4X2P3ikwQoNMNGPjm6kYCWsNYSQzXerIZFMfgulWz+E8FFJ17 It+nCrkHgzDWaPTuuye04cRUr9C1yqUVh7lpINDi7T208RW6JU3SpwOTfBkXk2o0 nqPQv/8740MxkIWPR2W/msp41a6bmGsY7dvwf+E2w+qJ0XRIlc5mGuNovdE= -----END CERTIFICATE-----Generated at Mon Mar 2 11:27:30 2026 by rpki-client