$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6hyOh2wRRrJlgqSaHEzHr0ssM2U.roa File: 6hyOh2wRRrJlgqSaHEzHr0ssM2U.roa (raw, json) Hash identifier: /PgghtKCb035LVFHpvGPAtWanEPNc4uNOWvRKaT1NLY= Subject key identifier: EA:1C:8E:87:6C:11:46:B2:65:82:A4:9A:1C:4C:C7:AF:4B:2C:33:65 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 126B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6hyOh2wRRrJlgqSaHEzHr0ssM2U.roa Signing time: Sun 01 Mar 2026 03:00:34 +0000 ROA not before: Sun 01 Mar 2026 03:00:34 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4715 (0x126b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:00:34 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=EA1C8E876C1146B26582A49A1C4CC7AF4B2C3365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:35:99:ff:a6:2b:b6:4e:6f:8b:2d:da:a8:c9: 5e:0b:15:8d:f6:0f:8d:21:49:0e:f7:5b:82:69:7b: de:fa:fb:83:4c:4b:b7:6a:a3:da:88:44:23:b7:db: 5c:a8:11:1b:63:bd:5e:3a:e8:a2:c4:8a:46:2c:ba: 91:de:fc:2b:85:56:1b:5f:d4:99:69:6b:a3:30:bd: 69:df:28:2b:56:f2:b8:f5:b2:bb:28:a5:b1:04:06: 75:2f:10:68:69:2f:9d:af:ee:8e:23:70:89:60:71: 74:30:20:1f:bb:ee:0a:8f:68:db:26:e8:19:e6:27: ae:aa:a9:eb:a5:09:7b:6b:c1:31:98:2c:95:d2:2a: 25:db:11:20:ba:76:fa:67:79:f3:d3:df:c3:3e:19: d8:c0:9e:f8:bc:d0:aa:02:00:19:7a:48:96:d3:6e: 15:96:dd:ce:54:c6:91:b1:ff:85:7f:53:e5:21:1c: 91:2d:60:4a:ee:fa:10:44:20:cb:65:02:4d:e7:ed: b9:86:25:b5:bf:83:97:5b:b2:c9:5a:e8:83:85:90: 7e:3f:0b:7c:4a:e1:11:7b:4e:3b:82:4c:08:1f:cc: 3c:51:70:1b:8c:20:11:30:15:01:64:98:ae:5d:76: 88:db:f3:2a:e9:60:3e:36:c9:e7:f9:f2:69:14:bf: a8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1C:8E:87:6C:11:46:B2:65:82:A4:9A:1C:4C:C7:AF:4B:2C:33:65 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6hyOh2wRRrJlgqSaHEzHr0ssM2U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.170.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:5f:8d:ad:56:d0:0f:ab:c6:2a:2a:50:61:5e:ea:b2:e6:3d: 36:f9:84:e1:11:d8:ce:09:5f:0f:4f:37:00:60:5b:af:28:83: 0c:32:90:b3:a3:b8:db:77:bc:14:55:7a:9c:b2:f4:10:f3:1d: a7:a3:4f:9f:57:86:76:8d:5e:8b:c5:b5:a7:9f:6b:9b:bf:4c: 40:c2:66:a6:24:1f:b5:20:1b:05:c2:79:4f:30:1a:de:f4:d3: b0:03:98:2e:d9:59:1b:49:7a:ec:91:92:0a:7c:15:4e:bc:71: e8:be:2a:f3:37:c3:23:89:83:69:3d:f6:4d:29:14:05:ca:e4: 70:2e:4a:79:17:6c:52:5c:f3:43:57:2a:49:14:02:b2:ad:3f: 3f:2c:6c:49:a4:4d:c2:f8:7b:af:03:46:45:26:5c:82:de:32: 4f:a8:4e:76:44:02:0d:c3:c5:ca:43:d0:aa:ca:7b:4d:26:ed: 1d:5d:a9:c7:60:8f:26:5d:05:1d:fd:5f:95:7e:7a:b7:b7:8a: 25:13:88:89:a4:cd:5a:4c:79:4e:7d:f3:0c:3f:20:ee:06:9e: 7a:6f:d4:7e:29:5a:1d:96:c7:4b:44:81:55:e9:66:c0:ba:2d: 7b:a6:51:b2:cd:3c:40:39:f8:44:5b:f9:89:4d:18:d5:54:ee: da:af:08:e1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzAwMzRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVBMUM4RTg3NkMxMTQ2 QjI2NTgyQTQ5QTFDNENDN0FGNEIyQzMzNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpNZn/piu2Tm+LLdqoyV4LFY32D40hSQ73W4Jpe976+4NMS7dq o9qIRCO321yoERtjvV466KLEikYsupHe/CuFVhtf1Jlpa6MwvWnfKCtW8rj1srso pbEEBnUvEGhpL52v7o4jcIlgcXQwIB+77gqPaNsm6BnmJ66qqeulCXtrwTGYLJXS KiXbESC6dvpnefPT38M+GdjAnvi80KoCABl6SJbTbhWW3c5UxpGx/4V/U+UhHJEt YEru+hBEIMtlAk3n7bmGJbW/g5dbssla6IOFkH4/C3xK4RF7TjuCTAgfzDxRcBuM IBEwFQFkmK5ddojb8yrpYD42yef58mkUv6gFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU6hyOh2wRRrJlgqSaHEzHr0ssM2UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzZoeU9oMndSUnJKbGdxU2FIRXpIcjBzc00yVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYqowDQYJKoZIhvcNAQELBQADggEBAA1fja1W0A+rxioqUGFe6rLmPTb5 hOER2M4JXw9PNwBgW68ogwwykLOjuNt3vBRVepyy9BDzHaejT59XhnaNXovFtaef a5u/TEDCZqYkH7UgGwXCeU8wGt7007ADmC7ZWRtJeuyRkgp8FU68cei+KvM3wyOJ g2k99k0pFAXK5HAuSnkXbFJc80NXKkkUArKtPz8sbEmkTcL4e68DRkUmXILeMk+o TnZEAg3DxcpD0KrKe00m7R1dqcdgjyZdBR39X5V+ere3iiUTiImkzVpMeU598ww/ IO4Gnnpv1H4pWh2Wx0tEgVXpZsC6LXumUbLNPEA5+ERb+YlNGNVU7tqvCOE= -----END CERTIFICATE-----Generated at Mon Mar 2 04:01:41 2026 by rpki-client