$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Czac9APh9Pu1gx0NsmfV-XsvHvU.roa File: Czac9APh9Pu1gx0NsmfV-XsvHvU.roa (raw, json) Hash identifier: k1bJGEb/RD1f8rFv/EBIKl4vc/L02msIXOJiLJNgfUA= Subject key identifier: 0B:36:9C:F4:03:E1:F4:FB:B5:83:1D:0D:B2:67:D5:F9:7B:2F:1E:F5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1126 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Czac9APh9Pu1gx0NsmfV-XsvHvU.roa Signing time: Sun 01 Mar 2026 02:07:36 +0000 ROA not before: Sun 01 Mar 2026 02:07:36 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4390 (0x1126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:07:36 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=0B369CF403E1F4FBB5831D0DB267D5F97B2F1EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6a:50:ce:96:f9:5f:72:f6:ce:2d:6d:e9:d8: ee:da:44:dc:60:3a:53:08:29:45:2b:3f:ed:9f:b8: 9b:2b:42:7c:b0:10:03:2e:35:e8:4a:46:e5:0f:9b: eb:84:15:c4:e4:66:52:ca:fc:6f:4a:e3:24:7a:93: 43:15:60:7f:da:36:ea:ed:94:2d:c7:73:ae:40:d7: c2:c6:a1:b2:da:ee:45:34:6b:29:8e:9a:b9:3a:87: b0:3a:f6:b6:a1:3d:b9:7d:d5:ae:28:e8:13:a4:eb: 48:d7:57:64:90:71:29:d2:ac:fb:02:59:5b:b5:d5: 84:9f:a0:fe:fc:6b:57:07:5e:a9:40:21:98:0d:94: 6b:b8:1c:50:cf:74:df:ed:f7:41:cd:ca:63:02:30: e9:9e:08:a7:92:51:fc:d9:ea:35:2e:6e:d2:2a:9d: b7:70:03:7c:22:22:b8:4c:43:1a:35:7f:b6:ca:04: 89:94:07:96:f0:2e:a3:0e:cf:b9:73:b8:9b:12:e7: c4:df:eb:59:0a:0d:54:82:2f:33:34:f0:f8:13:6a: 24:a1:55:24:b6:20:cc:83:f9:b3:60:fa:6e:4b:61: 10:b3:6d:83:98:cd:46:cc:5a:35:79:0c:7c:da:bd: b2:dc:0f:d1:09:f5:f4:e9:cd:09:10:a0:ed:fb:de: 66:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:36:9C:F4:03:E1:F4:FB:B5:83:1D:0D:B2:67:D5:F9:7B:2F:1E:F5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Czac9APh9Pu1gx0NsmfV-XsvHvU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.34.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:bb:bf:9d:31:d0:e5:1b:95:79:27:f4:4f:3d:0c:aa:f1:23: ff:4d:a3:e1:5e:b2:32:46:cd:37:fe:a6:c1:f4:87:84:2a:ce: 27:4f:f3:81:d4:19:0d:e5:c6:69:cc:c8:d8:b1:90:91:5c:f1: fe:b3:2e:04:df:55:bd:80:45:a8:ca:25:33:2d:85:b4:70:29: 94:e1:3c:cf:75:1e:9c:20:33:27:d5:e1:80:24:8d:c4:a4:58: 36:51:43:66:ad:9a:d2:39:c8:51:23:a4:7c:15:9c:d0:d0:b1: 84:e8:af:4c:8a:57:ff:18:ae:16:49:f1:2c:34:7b:d0:c4:6f: f1:05:51:b3:24:ea:61:e3:fa:c1:2b:86:5a:68:d3:91:64:e0: ba:4d:4e:b3:f1:d7:e5:a0:13:33:d0:b0:be:3c:0e:6e:8c:3b: e6:7e:83:99:de:a1:58:2e:49:1e:54:ee:b1:3c:ec:03:36:6d: 8f:75:da:5c:42:ba:49:c7:cb:0a:b6:85:ae:85:d8:a8:40:8a: f5:b6:2d:12:a1:2a:d0:36:40:97:71:5a:6e:a6:68:61:ea:10: aa:ca:0b:47:61:35:ec:43:69:28:a8:2f:a8:67:be:15:1a:cc: 66:eb:e4:db:ab:82:8b:65:24:1b:be:f8:c9:8d:fe:57:4c:e0: f3:95:7a:e9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICESYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjA3MzZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBCMzY5Q0Y0MDNFMUY0 RkJCNTgzMUQwREIyNjdENUY5N0IyRjFFRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+alDOlvlfcvbOLW3p2O7aRNxgOlMIKUUrP+2fuJsrQnywEAMu NehKRuUPm+uEFcTkZlLK/G9K4yR6k0MVYH/aNurtlC3Hc65A18LGobLa7kU0aymO mrk6h7A69rahPbl91a4o6BOk60jXV2SQcSnSrPsCWVu11YSfoP78a1cHXqlAIZgN lGu4HFDPdN/t90HNymMCMOmeCKeSUfzZ6jUubtIqnbdwA3wiIrhMQxo1f7bKBImU B5bwLqMOz7lzuJsS58Tf61kKDVSCLzM08PgTaiShVSS2IMyD+bNg+m5LYRCzbYOY zUbMWjV5DHzavbLcD9EJ9fTpzQkQoO373maNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCzac9APh9Pu1gx0NsmfV+XsvHvUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0N6YWM5QVBoOVB1MWd4ME5zbWZWLVhzdkh2VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYCIwDQYJKoZIhvcNAQELBQADggEBAJ67v50x0OUblXkn9E89DKrxI/9N o+FesjJGzTf+psH0h4QqzidP84HUGQ3lxmnMyNixkJFc8f6zLgTfVb2ARajKJTMt hbRwKZThPM91HpwgMyfV4YAkjcSkWDZRQ2atmtI5yFEjpHwVnNDQsYTor0yKV/8Y rhZJ8Sw0e9DEb/EFUbMk6mHj+sErhlpo05Fk4LpNTrPx1+WgEzPQsL48Dm6MO+Z+ g5neoVguSR5U7rE87AM2bY912lxCuknHywq2ha6F2KhAivW2LRKhKtA2QJdxWm6m aGHqEKrKC0dhNexDaSioL6hnvhUazGbr5NurgotlJBu++MmN/ldM4POVeuk= -----END CERTIFICATE-----Generated at Mon Mar 2 03:53:55 2026 by rpki-client