$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9pI-xmxZ9BVjwdByZgjwd_MLkfI.roa File: 9pI-xmxZ9BVjwdByZgjwd_MLkfI.roa (raw, json) Hash identifier: 7MxWg0nkE6wbt8fGuXqFne9va+8vrnSRb40iq+yDM20= Subject key identifier: F6:92:3E:C6:6C:59:F4:15:63:C1:D0:72:66:08:F0:77:F3:0B:91:F2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 10F7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9pI-xmxZ9BVjwdByZgjwd_MLkfI.roa Signing time: Sun 01 Mar 2026 01:58:48 +0000 ROA not before: Sun 01 Mar 2026 01:58:48 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4343 (0x10f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:58:48 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=F6923EC66C59F41563C1D0726608F077F30B91F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ec:09:a5:5a:a0:f0:75:34:3b:c5:70:d4:95: ef:d5:f5:42:ea:f3:55:d2:2e:ff:63:d9:1f:20:33: c1:73:dd:4f:20:35:5f:66:39:4a:35:47:c7:db:c7: f4:8a:c3:e1:ec:22:8c:dd:08:8d:fd:1e:3f:52:38: 62:a3:17:21:9e:9a:55:91:13:e9:5e:80:63:d0:89: 72:6f:20:db:7f:e1:28:dd:ec:a6:ad:05:91:8e:02: eb:9e:d2:89:c2:6d:d9:4d:6b:74:4b:3e:2b:a4:09: 6f:bd:a5:29:b4:3a:c4:9d:7f:0a:63:42:81:7f:18: f7:c2:12:7c:16:f8:58:89:38:f4:a5:58:8e:1b:b0: 13:60:25:5c:03:0f:e5:cb:6e:85:d5:36:28:e8:c2: c3:c1:52:20:1b:2f:0a:35:23:4f:d4:60:66:f2:8a: 1d:67:9f:cd:ec:7e:7c:0c:8e:85:db:de:4a:10:57: 9e:a3:ad:cf:07:6c:9c:f3:41:75:ba:f0:e6:4d:85: 22:d9:19:75:1e:d3:8f:f3:98:08:73:28:38:c5:5d: 45:0c:ec:95:91:2f:04:c3:2a:bb:89:0d:41:94:c8: 5f:f9:77:8f:8b:dd:b4:74:0a:4d:1c:c9:21:10:b7: 72:de:27:e2:6d:3c:84:f5:14:59:24:46:25:49:90: 26:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:92:3E:C6:6C:59:F4:15:63:C1:D0:72:66:08:F0:77:F3:0B:91:F2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9pI-xmxZ9BVjwdByZgjwd_MLkfI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.24.0/24 Signature Algorithm: sha256WithRSAEncryption 55:17:c4:c4:e8:99:43:3b:9c:85:d2:27:be:69:e5:95:34:34: db:47:d2:59:9b:2d:54:1d:8a:2d:2a:4a:14:61:e7:7e:ab:9c: 2e:d1:17:43:61:52:d4:b0:9b:b3:8b:55:74:f5:a4:49:95:86: 0c:5a:37:41:76:ce:70:86:35:cd:ee:ba:13:75:50:96:ba:c4: 6c:b9:d1:28:b1:ee:a2:35:ac:43:39:b4:49:a1:f4:8f:b9:57: db:1c:cc:e3:58:4c:88:22:19:e8:50:8e:2d:8d:3e:78:4c:5a: 94:63:b7:51:3e:e3:f7:57:1e:b4:12:d8:85:9c:c5:b3:cf:7f: 75:54:c1:60:a5:66:12:21:90:f4:2c:92:f7:b5:b0:94:d3:3b: 6d:cb:b5:7c:01:8c:63:1b:cc:b6:2a:4e:c3:95:eb:84:8d:c8: 9f:5d:04:ee:90:cc:82:9c:68:9b:6c:b6:0d:f5:dc:6a:8e:6f: 7c:59:98:a6:d8:14:26:63:f0:c4:59:47:7b:cb:3d:d1:60:19: 4e:ef:ca:a2:57:c5:2d:f0:61:53:cb:df:5a:8c:9b:5a:80:7e: a8:c4:ef:99:0e:3b:9c:1f:85:7c:b4:fc:9f:c1:37:cb:e7:4c: ea:1b:e1:37:e3:54:64:c2:4f:ea:df:09:99:89:2f:ad:a3:11: f6:83:b7:e0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEPcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTU4NDhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY2OTIzRUM2NkM1OUY0 MTU2M0MxRDA3MjY2MDhGMDc3RjMwQjkxRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa7AmlWqDwdTQ7xXDUle/V9ULq81XSLv9j2R8gM8Fz3U8gNV9m OUo1R8fbx/SKw+HsIozdCI39Hj9SOGKjFyGemlWRE+legGPQiXJvINt/4Sjd7Kat BZGOAuue0onCbdlNa3RLPiukCW+9pSm0OsSdfwpjQoF/GPfCEnwW+FiJOPSlWI4b sBNgJVwDD+XLboXVNijowsPBUiAbLwo1I0/UYGbyih1nn83sfnwMjoXb3koQV56j rc8HbJzzQXW68OZNhSLZGXUe04/zmAhzKDjFXUUM7JWRLwTDKruJDUGUyF/5d4+L 3bR0Ck0cySEQt3LeJ+JtPIT1FFkkRiVJkCbnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU9pI+xmxZ9BVjwdByZgjwd/MLkfIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzlwSS14bXhaOUJWandkQnlaZ2p3ZF9NTGtmSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYBgwDQYJKoZIhvcNAQELBQADggEBAFUXxMTomUM7nIXSJ75p5ZU0NNtH 0lmbLVQdii0qShRh536rnC7RF0NhUtSwm7OLVXT1pEmVhgxaN0F2znCGNc3uuhN1 UJa6xGy50Six7qI1rEM5tEmh9I+5V9sczONYTIgiGehQji2NPnhMWpRjt1E+4/dX HrQS2IWcxbPPf3VUwWClZhIhkPQskve1sJTTO23LtXwBjGMbzLYqTsOV64SNyJ9d BO6QzIKcaJtstg313GqOb3xZmKbYFCZj8MRZR3vLPdFgGU7vyqJXxS3wYVPL31qM m1qAfqjE75kOO5wfhXy0/J/BN8vnTOob4TfjVGTCT+rfCZmJL62jEfaDt+A= -----END CERTIFICATE-----Generated at Mon Mar 2 10:06:12 2026 by rpki-client