$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AgEXBR61eb-2V9hcZR0S-XEYXoA.roa File: AgEXBR61eb-2V9hcZR0S-XEYXoA.roa (raw, json) Hash identifier: Q51rkweRkYGIH8JuThkZrk+G8aCK9ZkN60TlVSP8Azg= Subject key identifier: 02:01:17:05:1E:B5:79:BF:B6:57:D8:5C:65:1D:12:F9:71:18:5E:80 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1100 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AgEXBR61eb-2V9hcZR0S-XEYXoA.roa Signing time: Sun 01 Mar 2026 02:02:55 +0000 ROA not before: Sun 01 Mar 2026 02:02:55 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4352 (0x1100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:02:55 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=020117051EB579BFB657D85C651D12F971185E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:97:03:f1:7a:3c:b3:ba:23:7c:a4:78:fb: 07:4c:bf:e8:97:eb:10:81:bc:3f:f2:32:59:6a:09: e7:ae:84:a4:07:55:06:e0:9e:2b:48:91:3b:de:bb: 01:8f:e7:2b:b0:51:0d:98:6e:8e:9f:eb:0e:72:9b: db:3a:8b:04:6b:08:07:54:50:5e:b8:d5:25:c4:ca: 6c:4b:ba:94:da:03:11:b8:e5:31:1a:bd:fc:2b:71: 64:41:ef:b6:f0:da:4a:9c:99:2a:a5:f6:11:b2:ad: 23:7a:38:84:e0:8a:2f:5c:a3:55:bd:94:8e:e6:c8: 9e:d9:54:8e:fd:63:57:f1:b6:10:a1:e2:15:61:83: b2:54:d2:e5:72:20:47:9d:88:a2:8a:03:e2:32:02: 23:d5:6d:8b:7a:aa:08:be:fe:d1:63:c3:0c:03:a4: de:b2:91:66:13:7a:27:66:28:4e:18:b3:3a:ea:9e: 53:46:af:5c:85:10:65:11:9b:7a:e4:91:fb:79:f6: 2a:8e:b3:da:f8:c2:e5:7c:f8:de:05:ac:16:4f:85: 75:6e:85:2a:70:2a:36:c4:31:ba:f3:1a:42:bb:78: 7a:36:89:21:63:dd:b4:47:05:f7:fd:64:a9:54:72: 79:cb:e6:d5:0f:33:5f:04:e7:8f:8f:5a:bb:a0:85: 74:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:01:17:05:1E:B5:79:BF:B6:57:D8:5C:65:1D:12:F9:71:18:5E:80 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AgEXBR61eb-2V9hcZR0S-XEYXoA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.254.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:d2:6e:60:29:c5:a0:c3:f1:8f:4c:c8:52:6f:42:6a:a4:9f: 0b:93:91:bf:af:1d:bc:10:a7:e7:14:e4:7c:bb:c7:91:fd:39: 6c:9c:de:6f:17:e8:50:35:12:3e:5a:07:07:c6:60:54:fa:df: 87:56:3c:7e:e8:ff:24:b2:6e:71:a5:73:74:1f:69:1e:c7:f0: 76:b9:25:89:3b:0d:6f:19:2a:7d:7d:07:1a:09:e8:4a:a0:86: 5b:6b:39:cf:20:ff:e8:69:4c:92:fe:f3:c3:a3:d1:50:67:04: 21:7c:db:40:11:9a:3b:75:bd:65:12:cd:27:53:ae:d3:ac:2f: 0d:b2:82:e1:37:92:7f:28:c1:8d:e7:56:5f:82:8e:d4:bb:fd: 86:6b:c4:8b:c0:4c:5e:f3:a5:4d:a6:d1:98:2a:b1:10:95:87: 8e:4a:2b:4e:84:a6:5d:21:92:dc:dd:3b:2e:1d:28:79:d0:73: 74:3c:35:c4:14:3c:ab:9e:fd:42:e7:49:8b:6e:de:60:3f:33: 80:6b:b8:cb:60:21:03:a3:9b:56:57:ce:9a:2c:69:a8:32:26: b6:8c:45:e9:08:a1:fc:d8:28:aa:87:28:9f:8b:d3:fb:f4:49: 74:0d:0c:d9:2f:64:e7:50:ee:32:6d:28:00:ad:31:0a:1b:24: 6b:31:bc:f5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjAyNTVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAyMDExNzA1MUVCNTc5 QkZCNjU3RDg1QzY1MUQxMkY5NzExODVFODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3v5cD8Xo8s7ojfKR4+wdMv+iX6xCBvD/yMllqCeeuhKQHVQbg nitIkTveuwGP5yuwUQ2Ybo6f6w5ym9s6iwRrCAdUUF641SXEymxLupTaAxG45TEa vfwrcWRB77bw2kqcmSql9hGyrSN6OITgii9co1W9lI7myJ7ZVI79Y1fxthCh4hVh g7JU0uVyIEediKKKA+IyAiPVbYt6qgi+/tFjwwwDpN6ykWYTeidmKE4YszrqnlNG r1yFEGURm3rkkft59iqOs9r4wuV8+N4FrBZPhXVuhSpwKjbEMbrzGkK7eHo2iSFj 3bRHBff9ZKlUcnnL5tUPM18E54+PWrughXQ3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUAgEXBR61eb+2V9hcZR0S+XEYXoAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0FnRVhCUjYxZWItMlY5aGNaUjBTLVhFWVhvQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYP4wDQYJKoZIhvcNAQELBQADggEBAEzSbmApxaDD8Y9MyFJvQmqknwuT kb+vHbwQp+cU5Hy7x5H9OWyc3m8X6FA1Ej5aBwfGYFT634dWPH7o/ySybnGlc3Qf aR7H8Ha5JYk7DW8ZKn19BxoJ6EqghltrOc8g/+hpTJL+88Oj0VBnBCF820ARmjt1 vWUSzSdTrtOsLw2yguE3kn8owY3nVl+CjtS7/YZrxIvATF7zpU2m0ZgqsRCVh45K K06Epl0hktzdOy4dKHnQc3Q8NcQUPKue/ULnSYtu3mA/M4BruMtgIQOjm1ZXzpos aagyJraMRekIofzYKKqHKJ+L0/v0SXQNDNkvZOdQ7jJtKACtMQobJGsxvPU= -----END CERTIFICATE-----Generated at Mon Mar 2 10:04:32 2026 by rpki-client