$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/G_XJLp3Kg5pzi0mM0AaoPVhk9Jg.roa File: G_XJLp3Kg5pzi0mM0AaoPVhk9Jg.roa (raw, json) Hash identifier: ZBP7/j+hLrrRaaDZap9gWaYnKXSWmWQ55bnC+s0cpD4= Subject key identifier: 1B:F5:C9:2E:9D:CA:83:9A:73:8B:49:8C:D0:06:A8:3D:58:64:F4:98 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 11E7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/G_XJLp3Kg5pzi0mM0AaoPVhk9Jg.roa Signing time: Sun 01 Mar 2026 02:44:27 +0000 ROA not before: Sun 01 Mar 2026 02:44:27 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4583 (0x11e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:44:27 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=1BF5C92E9DCA839A738B498CD006A83D5864F498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:f2:e9:d8:b1:3c:92:0c:13:fe:65:2a:d3: 9d:34:66:9d:f5:73:44:8b:1c:74:08:44:b4:cb:1a: 8b:26:05:09:68:b4:2f:94:6a:b0:0b:54:ee:e9:87: b8:38:a4:62:2d:29:d2:28:e0:b7:b6:d2:3e:64:ec: d5:9f:aa:99:58:82:f4:f4:5c:fd:c4:a0:44:e7:bc: 87:18:16:ba:b0:c7:b6:88:dd:3d:cb:10:b9:bf:88: 54:6c:e5:02:5a:2b:ba:02:ff:f4:a4:85:fe:8d:9f: 36:39:09:13:7f:b2:cf:33:f7:bf:9b:bd:b3:84:d0: a9:16:a7:1f:00:42:c8:d7:38:1b:c5:c9:5a:64:54: f7:31:f8:16:34:82:5c:96:15:fb:33:0c:76:81:02: 30:f7:06:de:07:e6:d0:c3:13:f5:ad:c9:e2:6b:50: 44:7f:eb:12:33:43:11:2d:c6:df:14:e4:ed:02:22: e7:66:36:b8:8a:1c:f9:0a:c0:19:26:fb:6d:fb:8e: cf:6c:57:5e:e2:b9:c6:28:44:53:3a:95:ab:b4:5d: 72:6f:c8:9b:fe:cf:51:62:93:d1:3d:f4:83:20:7c: fe:83:01:f1:a3:3e:e1:7f:04:a9:b6:8a:4a:3a:b8: 57:56:71:08:1e:ee:5e:1e:78:9d:36:f4:e3:b3:2b: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F5:C9:2E:9D:CA:83:9A:73:8B:49:8C:D0:06:A8:3D:58:64:F4:98 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/G_XJLp3Kg5pzi0mM0AaoPVhk9Jg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.20.0/23 Signature Algorithm: sha256WithRSAEncryption 23:32:c9:b2:91:7c:bb:d9:56:3c:69:3c:05:aa:0a:1c:fd:b3: 8b:bc:a3:4c:d5:fc:37:fa:6a:4c:8e:b1:5b:25:a5:c5:44:6e: 99:e7:e7:ea:3f:09:60:b6:cb:f7:0c:f5:6d:6c:df:23:15:93: 5a:27:4d:ca:d9:cb:5d:60:02:4f:e0:ca:b5:78:5c:50:b4:a6: 35:2d:7b:e8:4a:8a:fc:7d:15:a6:01:ce:43:1e:96:8b:ce:86: b4:b9:6e:95:e9:f1:89:f6:6c:03:72:4b:fd:1c:48:90:1a:83: df:bd:72:2c:a7:f0:d4:84:03:0a:15:f1:45:36:e2:3c:eb:92: 35:53:f9:37:9e:93:71:c4:d7:de:e7:2b:77:74:a4:10:94:a5: 74:09:45:60:2b:ec:6f:28:41:d6:43:ac:0d:20:4c:a2:dd:d9: 6d:f6:47:16:25:5e:ce:9f:4c:c7:5e:78:b3:32:9e:6f:9a:97: 68:e2:ab:7a:5c:31:d3:8c:d7:fa:a7:4b:80:ea:be:12:b7:d7: 01:2b:3a:16:cc:3c:63:25:9a:d1:f2:ff:42:93:15:51:85:05: 9a:14:b6:34:87:2d:77:17:cf:41:87:a2:78:5c:88:ad:b5:03: 68:38:dd:b6:10:bc:e9:a7:b7:c0:95:5d:b7:f7:f5:09:d3:7f: a7:81:60:80 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEecwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQ0MjdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFCRjVDOTJFOURDQTgz OUE3MzhCNDk4Q0QwMDZBODNENTg2NEY0OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+5fLp2LE8kgwT/mUq0500Zp31c0SLHHQIRLTLGosmBQlotC+U arALVO7ph7g4pGItKdIo4Le20j5k7NWfqplYgvT0XP3EoETnvIcYFrqwx7aI3T3L ELm/iFRs5QJaK7oC//Skhf6NnzY5CRN/ss8z97+bvbOE0KkWpx8AQsjXOBvFyVpk VPcx+BY0glyWFfszDHaBAjD3Bt4H5tDDE/WtyeJrUER/6xIzQxEtxt8U5O0CIudm NriKHPkKwBkm+237js9sV17iucYoRFM6lau0XXJvyJv+z1Fik9E99IMgfP6DAfGj PuF/BKm2iko6uFdWcQge7l4eeJ029OOzK/FJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUG/XJLp3Kg5pzi0mM0AaoPVhk9JgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0dfWEpMcDNLZzVwemkwbU0wQWFvUFZoazlKZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYBQwDQYJKoZIhvcNAQELBQADggEBACMyybKRfLvZVjxpPAWqChz9s4u8 o0zV/Df6akyOsVslpcVEbpnn5+o/CWC2y/cM9W1s3yMVk1onTcrZy11gAk/gyrV4 XFC0pjUte+hKivx9FaYBzkMelovOhrS5bpXp8Yn2bANyS/0cSJAag9+9ciyn8NSE AwoV8UU24jzrkjVT+Teek3HE197nK3d0pBCUpXQJRWAr7G8oQdZDrA0gTKLd2W32 RxYlXs6fTMdeeLMynm+al2jiq3pcMdOM1/qnS4DqvhK31wErOhbMPGMlmtHy/0KT FVGFBZoUtjSHLXcXz0GHonhciK21A2g43bYQvOmnt8CVXbf39QnTf6eBYIA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:01:45 2026 by rpki-client