$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CsDbjZrHDm3bBUipRBV4hWChDAg.roa File: CsDbjZrHDm3bBUipRBV4hWChDAg.roa (raw, json) Hash identifier: IMQlplPEe7Gw8bxGEstbU1rmVShN1i+ZisnMbZsFmMI= Subject key identifier: 0A:C0:DB:8D:9A:C7:0E:6D:DB:05:48:A9:44:15:78:85:60:A1:0C:08 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1339 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CsDbjZrHDm3bBUipRBV4hWChDAg.roa Signing time: Sun 01 Mar 2026 03:36:29 +0000 ROA not before: Sun 01 Mar 2026 03:36:29 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4921 (0x1339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:36:29 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=0AC0DB8D9AC70E6DDB0548A94415788560A10C08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:58:45:8f:22:c8:69:0e:8f:b8:a8:b7:5b: 26:57:d1:64:0d:d0:e6:a9:56:75:47:1c:e9:0f:fd: 83:47:ac:20:f6:fc:e5:11:1b:41:a3:b6:44:76:92: a7:e7:f0:81:0d:f6:51:8b:53:41:4d:ed:f7:1f:06: b9:7c:b9:3c:e7:a3:de:9e:d3:3e:ff:dc:1f:c2:13: eb:ea:8f:20:38:a6:7d:f1:33:84:72:52:c8:c9:3b: eb:38:2c:46:43:8c:f0:6c:7e:03:d2:d6:35:a7:c9: 65:b8:9a:44:f3:32:43:87:a6:c0:23:5f:b6:19:5b: 1b:cd:94:f7:2c:ec:b3:45:42:50:d5:63:95:53:b9: 4a:a5:d6:67:8b:bd:08:13:c7:04:c0:df:b6:65:4c: 7e:eb:69:fb:2e:b6:91:29:4b:d0:28:a3:1f:06:44: 96:ca:52:0e:e4:4b:2a:3e:03:eb:a8:4b:e4:5e:cf: ef:15:e1:81:c1:9a:84:47:79:98:2b:aa:90:d7:81: a4:a3:af:74:c5:bd:e4:cd:4e:47:d5:c0:a7:01:69: b1:87:af:e5:b4:56:03:25:20:d8:e1:09:9c:30:4a: 2f:a6:09:6e:b2:50:52:2c:aa:60:6e:21:d5:8e:64: 7b:4d:7c:6c:84:b1:96:f2:a6:2b:36:bf:9f:c5:25: 19:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C0:DB:8D:9A:C7:0E:6D:DB:05:48:A9:44:15:78:85:60:A1:0C:08 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CsDbjZrHDm3bBUipRBV4hWChDAg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.152.0/22 Signature Algorithm: sha256WithRSAEncryption 02:80:71:2b:8e:a9:27:fc:f6:46:fd:56:e6:4e:10:71:72:50: 7a:f5:c1:ff:d4:66:73:18:bb:15:fd:af:63:0f:12:17:ab:a0: 1a:d7:bf:af:47:bd:67:cb:4a:43:ab:2e:23:a5:be:20:7c:20: da:50:2f:1d:b1:3a:57:e2:a7:e6:fa:66:8d:14:68:e1:0b:99: ab:90:fb:56:07:5e:4f:05:23:50:90:8c:d6:17:db:ed:c5:30: e8:7c:50:cd:e2:00:77:46:c4:4b:c6:54:09:b1:dc:d1:d3:0e: 0a:f3:20:e8:89:fc:57:52:d4:46:81:e0:10:78:e7:c2:00:13: 2e:f8:ac:4d:5c:22:62:e2:24:23:23:e2:7c:4f:74:21:35:a1: 0a:e3:88:13:7c:aa:e7:f2:de:7d:79:9a:14:fc:71:00:43:60: 18:0e:cc:29:82:27:69:78:7f:bd:d7:cf:e3:f9:83:ec:63:77: 3f:68:b4:10:a8:d3:24:9c:00:de:05:d3:b7:db:95:4c:95:d2: 27:97:20:25:c8:8b:7f:8e:59:04:2a:45:1a:48:fd:c4:91:48: f4:e6:06:f4:20:12:69:cf:8f:0f:72:33:58:64:ec:29:cb:06: cb:61:4c:9e:3b:23:05:f9:90:0f:8f:45:1c:dc:7d:c1:d4:40: 28:39:df:f5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEzkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzM2MjlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBBQzBEQjhEOUFDNzBF NkREQjA1NDhBOTQ0MTU3ODg1NjBBMTBDMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBiFhFjyLIaQ6PuKi3WyZX0WQN0OapVnVHHOkP/YNHrCD2/OUR G0GjtkR2kqfn8IEN9lGLU0FN7fcfBrl8uTzno96e0z7/3B/CE+vqjyA4pn3xM4Ry UsjJO+s4LEZDjPBsfgPS1jWnyWW4mkTzMkOHpsAjX7YZWxvNlPcs7LNFQlDVY5VT uUql1meLvQgTxwTA37ZlTH7rafsutpEpS9Aoox8GRJbKUg7kSyo+A+uoS+Rez+8V 4YHBmoRHeZgrqpDXgaSjr3TFveTNTkfVwKcBabGHr+W0VgMlINjhCZwwSi+mCW6y UFIsqmBuIdWOZHtNfGyEsZbypis2v5/FJRkvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCsDbjZrHDm3bBUipRBV4hWChDAgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0NzRGJqWnJIRG0zYkJVaXBSQlY0aFdDaERBZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYpgwDQYJKoZIhvcNAQELBQADggEBAAKAcSuOqSf89kb9VuZOEHFyUHr1 wf/UZnMYuxX9r2MPEheroBrXv69HvWfLSkOrLiOlviB8INpQLx2xOlfip+b6Zo0U aOELmauQ+1YHXk8FI1CQjNYX2+3FMOh8UM3iAHdGxEvGVAmx3NHTDgrzIOiJ/FdS 1EaB4BB458IAEy74rE1cImLiJCMj4nxPdCE1oQrjiBN8qufy3n15mhT8cQBDYBgO zCmCJ2l4f73Xz+P5g+xjdz9otBCo0yScAN4F07fblUyV0ieXICXIi3+OWQQqRRpI /cSRSPTmBvQgEmnPjw9yM1hk7CnLBsthTJ47IwX5kA+PRRzcfcHUQCg53/U= -----END CERTIFICATE-----Generated at Mon Mar 2 13:07:54 2026 by rpki-client