$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GpywsVC7dwDsCO7l1j7e4EPRz6A.roa File: GpywsVC7dwDsCO7l1j7e4EPRz6A.roa (raw, json) Hash identifier: k6P5KlWd2GMeUHbBwJdD4kVoc8MxmDvZQuMPihoLfr0= Subject key identifier: 1A:9C:B0:B1:50:BB:77:00:EC:08:EE:E5:D6:3E:DE:E0:43:D1:CF:A0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1221 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GpywsVC7dwDsCO7l1j7e4EPRz6A.roa Signing time: Sun 01 Mar 2026 02:52:20 +0000 ROA not before: Sun 01 Mar 2026 02:52:20 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4641 (0x1221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:52:20 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=1A9CB0B150BB7700EC08EEE5D63EDEE043D1CFA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:c5:37:6f:1e:50:4d:03:37:b8:c3:ed:bf: f7:e2:b9:d5:d0:e0:4c:81:a8:0e:fd:9d:62:77:7f: 7d:1c:1c:ac:54:a2:7b:30:70:a3:04:3e:cb:4d:83: 69:4f:59:61:03:55:03:63:ad:76:78:65:d9:34:e0: f5:dd:68:3f:f8:bf:3a:d9:30:af:77:90:a9:ed:82: cf:08:fd:11:f5:9e:96:19:12:ed:4f:9c:48:64:c4: a5:ee:4f:ef:f5:85:dc:b9:02:20:d1:d1:2f:df:c8: c2:20:c0:78:13:d7:17:41:f4:4f:7e:19:77:c3:cf: e9:4c:56:55:ed:3d:c6:eb:eb:14:1a:a3:b3:c7:70: 1b:97:29:85:dc:75:58:ef:47:b1:66:6a:d6:94:95: de:30:64:8a:ab:ed:2d:cc:e2:2b:4d:cb:db:15:f9: 83:dc:f5:4a:c9:ec:9e:a8:54:22:70:46:3a:18:ac: 73:aa:90:e8:3b:2d:ce:fd:f2:72:75:32:d9:dd:dd: 2b:fa:b8:29:ce:6a:89:a3:2c:be:95:8e:9f:d5:af: 24:74:60:a1:83:97:c2:31:eb:ad:89:d6:21:a0:f7: 2a:48:54:6c:60:ea:89:20:69:c8:59:15:c1:0d:ec: a5:6e:cc:74:a0:6e:ca:7e:f7:fe:a1:26:35:7a:3e: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9C:B0:B1:50:BB:77:00:EC:08:EE:E5:D6:3E:DE:E0:43:D1:CF:A0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GpywsVC7dwDsCO7l1j7e4EPRz6A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.48.0/22 Signature Algorithm: sha256WithRSAEncryption 40:5e:1c:86:2b:a2:84:12:28:b4:6c:f8:8e:9f:74:2d:ee:86: ce:f8:b1:61:ed:45:03:55:a1:b2:55:61:80:57:74:58:75:66: 35:61:c4:6c:12:5a:0d:7f:39:6c:49:70:6d:e7:39:d6:dd:6c: a3:ad:5a:ca:fe:49:49:e2:54:2b:17:a9:d8:f9:64:27:7d:bd: 92:92:f9:01:a8:48:9d:f8:91:ab:7e:14:62:b7:a9:2e:cf:ea: 76:aa:13:58:65:5d:c3:2c:3c:45:6a:af:9f:d1:a4:2b:54:85: 2e:b6:2c:3a:07:e9:29:36:29:c8:fb:a0:80:1a:36:0b:5c:1c: 1c:92:d8:f0:c6:b2:49:94:11:47:03:5f:09:4a:a5:3c:a9:f8: 74:8d:2b:61:da:22:23:25:ed:64:71:66:23:73:1a:56:b3:60: ff:d2:02:ff:88:05:92:e4:23:72:31:bc:7b:41:3e:2f:bb:9b: f2:81:37:a6:2d:78:03:f8:0d:0e:98:50:b1:1b:1b:3a:07:e7: da:87:35:7e:92:46:ba:6d:d6:10:cb:9a:ae:8e:4d:05:2c:ae: 07:1c:31:85:4f:f8:18:cf:46:99:02:74:a4:30:f4:26:0a:3c: 72:8a:18:b2:19:23:c6:0b:23:d2:d0:9e:40:be:07:3c:c4:d8: 83:44:8e:24 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjUyMjBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFBOUNCMEIxNTBCQjc3 MDBFQzA4RUVFNUQ2M0VERUUwNDNEMUNGQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrv8U3bx5QTQM3uMPtv/fiudXQ4EyBqA79nWJ3f30cHKxUonsw cKMEPstNg2lPWWEDVQNjrXZ4Zdk04PXdaD/4vzrZMK93kKntgs8I/RH1npYZEu1P nEhkxKXuT+/1hdy5AiDR0S/fyMIgwHgT1xdB9E9+GXfDz+lMVlXtPcbr6xQao7PH cBuXKYXcdVjvR7FmataUld4wZIqr7S3M4itNy9sV+YPc9UrJ7J6oVCJwRjoYrHOq kOg7Lc798nJ1Mtnd3Sv6uCnOaomjLL6Vjp/VryR0YKGDl8Ix662J1iGg9ypIVGxg 6okgachZFcEN7KVuzHSgbsp+9/6hJjV6Pk83AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGpywsVC7dwDsCO7l1j7e4EPRz6AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0dweXdzVkM3ZHdEc0NPN2wxajdlNEVQUno2QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYjAwDQYJKoZIhvcNAQELBQADggEBAEBeHIYrooQSKLRs+I6fdC3uhs74 sWHtRQNVobJVYYBXdFh1ZjVhxGwSWg1/OWxJcG3nOdbdbKOtWsr+SUniVCsXqdj5 ZCd9vZKS+QGoSJ34kat+FGK3qS7P6naqE1hlXcMsPEVqr5/RpCtUhS62LDoH6Sk2 Kcj7oIAaNgtcHByS2PDGskmUEUcDXwlKpTyp+HSNK2HaIiMl7WRxZiNzGlazYP/S Av+IBZLkI3IxvHtBPi+7m/KBN6YteAP4DQ6YULEbGzoH59qHNX6SRrpt1hDLmq6O TQUsrgccMYVP+BjPRpkCdKQw9CYKPHKKGLIZI8YLI9LQnkC+BzzE2INEjiQ= -----END CERTIFICATE-----Generated at Mon Mar 2 19:56:33 2026 by rpki-client