$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/D9oO2bKizUdqwuXjIOHbKVKs3aw.roa File: D9oO2bKizUdqwuXjIOHbKVKs3aw.roa (raw, json) Hash identifier: 5Fv5VJpr6HxQl/v5fHRq59TYC3y8H5vNwlpob0RlgtM= Subject key identifier: 0F:DA:0E:D9:B2:A2:CD:47:6A:C2:E5:E3:20:E1:DB:29:52:AC:DD:AC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1310 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D9oO2bKizUdqwuXjIOHbKVKs3aw.roa Signing time: Sun 01 Mar 2026 03:32:29 +0000 ROA not before: Sun 01 Mar 2026 03:32:29 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 219.114.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4880 (0x1310) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:32:29 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=0FDA0ED9B2A2CD476AC2E5E320E1DB2952ACDDAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:be:25:98:a2:88:63:89:9d:ca:7d:c4:e0: a2:bb:4e:80:2d:5b:c1:d0:ef:f2:58:77:34:4a:7f: de:7e:75:1b:a4:bd:0c:99:d0:b3:b7:99:7f:c7:af: 73:a4:16:d7:7c:26:45:8c:e8:d1:e1:97:8b:99:61: f5:1d:0e:27:ad:3a:8f:ea:32:84:7d:1d:ef:da:ee: f3:41:62:08:31:0e:be:af:a0:0a:d2:ac:e7:a7:6f: 4e:33:8e:ea:bb:37:f3:5b:d5:5b:ea:ae:30:d1:32: e2:68:f3:d5:13:a4:ef:67:72:4b:c1:cd:ae:bd:68: fc:c5:c3:9f:4e:f4:2c:b5:61:00:ac:d9:f9:8f:19: 1b:0a:6c:56:09:67:2e:e2:9f:29:b3:04:7f:ca:ba: d5:57:e9:6d:f6:16:06:87:75:07:a8:c9:8b:bf:cf: 8d:91:55:28:d4:2b:a9:c2:9a:09:f9:cd:23:0e:9a: b5:9b:23:ec:99:31:b9:ef:5e:2e:e9:c8:c3:fb:56: c6:5b:51:c0:61:38:c5:f5:bf:6b:6d:fb:56:c6:77: 3f:94:bf:37:17:b4:26:92:f2:30:f9:ef:2f:52:ff: 98:39:5f:af:6a:5f:10:38:1b:b0:45:5e:78:15:7e: 0a:61:34:27:d8:4d:0f:f6:49:80:5d:3a:9d:1d:de: f7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DA:0E:D9:B2:A2:CD:47:6A:C2:E5:E3:20:E1:DB:29:52:AC:DD:AC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D9oO2bKizUdqwuXjIOHbKVKs3aw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.176.0/21 Signature Algorithm: sha256WithRSAEncryption 03:2e:a8:fe:7a:26:b1:11:63:ea:30:ba:bc:4f:10:41:06:57: bf:b1:8c:de:85:15:6d:d0:a5:ce:0d:69:89:8f:b9:a2:26:10: a5:ab:f4:09:1b:74:fa:72:a8:d0:b0:f0:42:47:6c:b5:e7:22: dd:d3:e1:93:02:89:c3:71:66:4d:4b:ab:bb:b5:cf:04:15:76: b1:50:38:fc:91:06:75:68:1d:94:1a:bd:5c:e6:c0:90:d0:fd: c0:f7:2a:7c:d5:c7:f8:3e:5b:9e:1f:61:66:47:65:a8:a7:05: 30:19:7a:97:ca:d9:97:cd:9c:b3:1d:94:5f:0d:c0:8c:81:54: 3b:19:f2:16:28:25:d4:4e:c0:40:52:fd:e8:cd:0c:d4:13:c6: 40:34:8a:37:80:df:13:42:84:d4:09:2c:5a:25:47:12:40:d1: 08:47:a5:9a:b1:86:70:33:6a:4d:05:a7:a3:5c:c5:56:80:bd: c2:00:4b:bc:40:ea:1d:41:0d:aa:93:94:8e:74:81:a3:90:52: c3:c9:c0:78:05:6c:75:51:42:dc:91:6b:ee:98:5b:94:50:b2: a1:a5:52:0d:cc:e3:f7:c8:63:e1:7a:f7:ec:d0:f9:dd:72:81: 04:12:74:ad:c3:14:03:40:4f:a3:e4:a1:39:38:c2:85:41:ed: e7:8c:be:03 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICExAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzMyMjlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBGREEwRUQ5QjJBMkNE NDc2QUMyRTVFMzIwRTFEQjI5NTJBQ0REQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1Cr4lmKKIY4mdyn3E4KK7ToAtW8HQ7/JYdzRKf95+dRukvQyZ 0LO3mX/Hr3OkFtd8JkWM6NHhl4uZYfUdDietOo/qMoR9He/a7vNBYggxDr6voArS rOenb04zjuq7N/Nb1VvqrjDRMuJo89UTpO9nckvBza69aPzFw59O9Cy1YQCs2fmP GRsKbFYJZy7inymzBH/KutVX6W32FgaHdQeoyYu/z42RVSjUK6nCmgn5zSMOmrWb I+yZMbnvXi7pyMP7VsZbUcBhOMX1v2tt+1bGdz+UvzcXtCaS8jD57y9S/5g5X69q XxA4G7BFXngVfgphNCfYTQ/2SYBdOp0d3vcTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUD9oO2bKizUdqwuXjIOHbKVKs3awwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0Q5b08yYktpelVkcXd1WGpJT0hiS1ZLczNhdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPbcrAwDQYJKoZIhvcNAQELBQADggEBAAMuqP56JrERY+owurxPEEEGV7+x jN6FFW3Qpc4NaYmPuaImEKWr9AkbdPpyqNCw8EJHbLXnIt3T4ZMCicNxZk1Lq7u1 zwQVdrFQOPyRBnVoHZQavVzmwJDQ/cD3KnzVx/g+W54fYWZHZainBTAZepfK2ZfN nLMdlF8NwIyBVDsZ8hYoJdROwEBS/ejNDNQTxkA0ijeA3xNChNQJLFolRxJA0QhH pZqxhnAzak0Fp6NcxVaAvcIAS7xA6h1BDaqTlI50gaOQUsPJwHgFbHVRQtyRa+6Y W5RQsqGlUg3M4/fIY+F69+zQ+d1ygQQSdK3DFANAT6PkoTk4woVB7eeMvgM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:57:58 2026 by rpki-client