$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CIXGMqWQ1wqwSUimbAEujXHlyLQ.roa File: CIXGMqWQ1wqwSUimbAEujXHlyLQ.roa (raw, json) Hash identifier: wRr/vnmVmUkWRz/z3WSC/gBcLPOXtzruOr9gDeWMAv8= Subject key identifier: 08:85:C6:32:A5:90:D7:0A:B0:49:48:A6:6C:01:2E:8D:71:E5:C8:B4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1170 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CIXGMqWQ1wqwSUimbAEujXHlyLQ.roa Signing time: Sun 01 Mar 2026 02:22:00 +0000 ROA not before: Sun 01 Mar 2026 02:22:00 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4464 (0x1170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:22:00 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=0885C632A590D70AB04948A66C012E8D71E5C8B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:70:42:88:33:ff:cf:53:e2:dc:a7:86:d7:20: a6:23:10:8a:20:0e:d3:27:a7:a9:0d:b1:47:9d:52: 77:47:8d:fc:49:19:75:36:14:2f:0d:b5:e6:3f:c4: 00:06:f1:c1:b6:d8:bb:cf:2b:2f:1e:c6:cd:b4:71: d6:f7:17:0d:b0:65:26:3d:e0:65:63:6a:49:05:63: d2:0e:66:dc:0f:e3:f6:02:eb:c4:ee:1b:60:bb:b1: da:78:5b:eb:0c:95:0d:4f:1c:34:ae:f5:3f:82:ba: b3:49:67:92:5c:26:07:cc:28:d1:f7:b3:1e:15:d6: 21:59:14:cf:c8:d0:48:f4:0c:35:04:1b:ca:5c:fb: d3:c9:ce:77:ba:35:bc:c6:fd:97:48:b1:c0:53:1e: 05:4f:f3:d7:18:47:c0:2b:4b:39:26:fc:52:f1:e4: 24:37:d2:5f:06:dd:cc:eb:ec:6c:28:99:85:51:5b: 0d:6a:4d:32:21:23:af:ad:41:bb:87:4f:b5:55:27: f2:cb:b4:ce:f6:bf:e4:b3:ef:fc:fc:61:81:9e:ee: 9e:2b:d4:78:07:fa:cc:fb:70:7e:ca:8f:7c:c4:8f: 0b:03:a5:fd:ff:2f:fc:15:94:96:e5:59:e4:6d:9d: 8f:d8:d5:5a:8b:0a:f9:cf:66:9b:68:b0:36:b4:bb: 8d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:85:C6:32:A5:90:D7:0A:B0:49:48:A6:6C:01:2E:8D:71:E5:C8:B4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CIXGMqWQ1wqwSUimbAEujXHlyLQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.30.0/23 Signature Algorithm: sha256WithRSAEncryption 37:e8:04:06:5d:62:81:bf:b4:f1:56:f6:50:58:3c:0e:b7:51: 7c:d6:10:eb:b9:41:b6:49:24:eb:a8:78:46:a1:95:b3:f4:25: 60:15:38:d8:43:f4:00:d6:e8:d1:9e:66:75:34:7c:5d:72:c2: 74:69:25:70:39:b6:05:0b:90:80:28:63:9d:30:2e:96:51:b2: de:8a:58:13:d1:db:d1:4c:5e:b6:9c:2c:3d:a6:e3:cd:14:a4: ac:d7:cd:e6:b3:7a:78:cf:4d:1e:ab:61:b2:9a:a6:6a:e3:f8: 49:e4:3f:60:af:72:32:bb:45:25:61:c0:cc:9d:f4:a6:8e:3f: e9:94:92:a0:65:d7:71:8e:82:d0:a5:5b:b6:dc:61:e0:60:2e: 9b:ab:c1:17:82:7b:03:55:c3:c2:90:fc:cd:0b:68:53:ef:b1: 8d:d2:36:1f:a8:c6:94:8b:3b:fb:8b:ba:c7:92:37:3f:8b:8e: c1:97:a1:63:98:e0:44:a8:4a:db:b3:79:6a:d5:2b:36:2b:b5: e6:f7:cc:44:9b:f8:c0:88:34:a3:ca:e8:39:ac:ce:c4:4e:54: f8:e5:9a:ae:6b:32:74:21:29:10:92:f9:ce:da:d6:30:e6:ad: cb:6c:47:64:e0:de:aa:50:ea:e1:6d:b5:0e:41:bf:ca:bd:0d: 65:2c:28:61 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjIyMDBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA4ODVDNjMyQTU5MEQ3 MEFCMDQ5NDhBNjZDMDEyRThENzFFNUM4QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkcEKIM//PU+Lcp4bXIKYjEIogDtMnp6kNsUedUndHjfxJGXU2 FC8NteY/xAAG8cG22LvPKy8exs20cdb3Fw2wZSY94GVjakkFY9IOZtwP4/YC68Tu G2C7sdp4W+sMlQ1PHDSu9T+CurNJZ5JcJgfMKNH3sx4V1iFZFM/I0Ej0DDUEG8pc +9PJzne6NbzG/ZdIscBTHgVP89cYR8ArSzkm/FLx5CQ30l8G3czr7GwomYVRWw1q TTIhI6+tQbuHT7VVJ/LLtM72v+Sz7/z8YYGe7p4r1HgH+sz7cH7Kj3zEjwsDpf3/ L/wVlJblWeRtnY/Y1VqLCvnPZptosDa0u42LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCIXGMqWQ1wqwSUimbAEujXHlyLQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0NJWEdNcVdRMXdxd1NVaW1iQUV1alhIbHlMUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaB4wDQYJKoZIhvcNAQELBQADggEBADfoBAZdYoG/tPFW9lBYPA63UXzW EOu5QbZJJOuoeEahlbP0JWAVONhD9ADW6NGeZnU0fF1ywnRpJXA5tgULkIAoY50w LpZRst6KWBPR29FMXracLD2m480UpKzXzeazenjPTR6rYbKapmrj+EnkP2CvcjK7 RSVhwMyd9KaOP+mUkqBl13GOgtClW7bcYeBgLpurwReCewNVw8KQ/M0LaFPvsY3S Nh+oxpSLO/uLuseSNz+LjsGXoWOY4ESoStuzeWrVKzYrteb3zESb+MCINKPK6Dms zsROVPjlmq5rMnQhKRCS+c7a1jDmrctsR2Tg3qpQ6uFttQ5Bv8q9DWUsKGE= -----END CERTIFICATE-----Generated at Mon Mar 2 06:55:41 2026 by rpki-client