$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/E2by9hEyONSH6Nn68FMK856s1ok.roa File: E2by9hEyONSH6Nn68FMK856s1ok.roa (raw, json) Hash identifier: hS+2pNXefnFaiFEyn2aVziF4YO6rsH/RIpippAO33QE= Subject key identifier: 13:66:F2:F6:11:32:38:D4:87:E8:D9:FA:F0:53:0A:F3:9E:AC:D6:89 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1266 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E2by9hEyONSH6Nn68FMK856s1ok.roa Signing time: Sun 01 Mar 2026 03:00:31 +0000 ROA not before: Sun 01 Mar 2026 03:00:31 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4710 (0x1266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:00:31 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=1366F2F6113238D487E8D9FAF0530AF39EACD689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:d4:29:d9:e1:68:5e:a0:72:3b:5b:1a:20: 76:2c:22:7d:ae:46:0c:a1:f5:07:ae:28:26:b1:db: c2:a9:98:57:b3:36:d5:0f:c2:33:2e:84:90:cd:20: 89:b7:3e:d0:be:3d:82:1f:ba:55:0b:f4:fe:86:90: f3:29:db:7b:0d:f3:cd:6e:5c:d8:83:15:96:09:3e: 74:36:fb:ef:82:8e:68:34:5b:8d:d1:4c:af:0b:9e: f7:fb:30:4e:2e:d1:9d:9e:38:35:56:d1:dc:77:e9: 06:cb:e7:c3:00:6b:20:d1:e0:12:43:64:e8:9b:97: 98:4c:02:99:48:71:f9:99:35:5c:1b:2f:3c:e6:ca: 69:a2:ea:36:1e:7c:ed:63:f0:00:69:a1:e3:29:78: 12:bd:36:46:6d:de:98:89:70:3a:59:00:47:71:83: 9b:3b:ce:df:82:df:38:a1:b2:13:ba:aa:b4:22:54: a1:c8:f4:25:58:62:f6:f5:20:41:f6:3b:94:f0:88: eb:2d:bc:88:b8:f7:ae:e8:bf:69:16:5d:62:cb:64: cc:2f:d5:6e:76:a6:30:91:ff:a1:50:3b:67:f7:cf: 43:0a:9f:7b:a9:c6:13:1f:cf:c5:68:78:7b:67:72: f1:4e:94:3f:df:45:2a:c6:08:62:a6:31:be:ae:6e: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:66:F2:F6:11:32:38:D4:87:E8:D9:FA:F0:53:0A:F3:9E:AC:D6:89 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E2by9hEyONSH6Nn68FMK856s1ok.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.30.0/23 Signature Algorithm: sha256WithRSAEncryption b7:10:f3:2a:63:c8:b8:a1:d1:b7:61:2d:3d:40:e0:b4:70:05: e4:4f:3d:1e:b4:bc:d0:80:25:fe:08:d1:15:3d:aa:db:d2:9b: 81:d9:0e:34:a8:d2:e5:f5:6a:a1:e6:2b:1e:64:b3:7d:21:29: ee:c4:b0:d1:8d:ec:34:5c:7e:51:b8:7f:11:cb:53:ff:81:f7: a9:bb:fa:a5:c5:0c:a4:fb:1d:d3:27:e4:ad:a2:33:6a:c0:db: 6a:6f:18:fd:1a:0c:c2:93:2c:27:cb:73:54:37:cb:99:79:29: 67:eb:a6:ab:6a:94:47:55:46:f6:44:68:e2:16:eb:4a:b4:44: f9:5d:13:30:0f:cd:af:cd:2b:31:09:ff:4e:99:a7:43:27:ed: 18:44:89:07:b6:1d:0c:fc:f7:cd:7f:08:7b:2d:11:d1:22:bc: d9:1c:f1:e5:43:27:96:35:55:6e:53:7b:32:51:52:8e:f7:c9: 4b:14:6b:2e:e0:6d:59:57:2d:0a:59:05:9d:8a:d6:ef:c3:0f: 84:d2:09:fb:a3:7e:4d:fb:b8:9a:da:d6:f0:fe:e5:63:10:35: e1:8a:0b:3d:a9:aa:1a:9b:77:7f:c5:ab:15:bf:ce:c4:59:56: d8:d6:f1:4f:1a:29:b6:5f:6d:46:bf:65:cb:63:73:30:1d:d8: 9b:6a:98:b4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEmYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzAwMzFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEzNjZGMkY2MTEzMjM4 RDQ4N0U4RDlGQUYwNTMwQUYzOUVBQ0Q2ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC609Qp2eFoXqByO1saIHYsIn2uRgyh9QeuKCax28KpmFezNtUP wjMuhJDNIIm3PtC+PYIfulUL9P6GkPMp23sN881uXNiDFZYJPnQ2+++Cjmg0W43R TK8Lnvf7ME4u0Z2eODVW0dx36QbL58MAayDR4BJDZOibl5hMAplIcfmZNVwbLzzm ymmi6jYefO1j8ABpoeMpeBK9NkZt3piJcDpZAEdxg5s7zt+C3zihshO6qrQiVKHI 9CVYYvb1IEH2O5TwiOstvIi4967ov2kWXWLLZMwv1W52pjCR/6FQO2f3z0MKn3up xhMfz8VoeHtncvFOlD/fRSrGCGKmMb6ubvmnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUE2by9hEyONSH6Nn68FMK856s1okwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0UyYnk5aEV5T05TSDZObjY4Rk1LODU2czFvay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYh4wDQYJKoZIhvcNAQELBQADggEBALcQ8ypjyLih0bdhLT1A4LRwBeRP PR60vNCAJf4I0RU9qtvSm4HZDjSo0uX1aqHmKx5ks30hKe7EsNGN7DRcflG4fxHL U/+B96m7+qXFDKT7HdMn5K2iM2rA22pvGP0aDMKTLCfLc1Q3y5l5KWfrpqtqlEdV RvZEaOIW60q0RPldEzAPza/NKzEJ/06Zp0Mn7RhEiQe2HQz8981/CHstEdEivNkc 8eVDJ5Y1VW5TezJRUo73yUsUay7gbVlXLQpZBZ2K1u/DD4TSCfujfk37uJra1vD+ 5WMQNeGKCz2pqhqbd3/FqxW/zsRZVtjW8U8aKbZfbUa/ZctjczAd2JtqmLQ= -----END CERTIFICATE-----Generated at Mon Mar 2 06:54:25 2026 by rpki-client