$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HKqxTvsFjIrJtholeAcfle1N6lE.roa File: HKqxTvsFjIrJtholeAcfle1N6lE.roa (raw, json) Hash identifier: on7bZTSp0iX1Xyk59/5dN2TjSKRNqxtROjb47u5LUzQ= Subject key identifier: 1C:AA:B1:4E:FB:05:8C:8A:C9:B6:1A:25:78:07:1F:95:ED:4D:EA:51 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1064 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HKqxTvsFjIrJtholeAcfle1N6lE.roa Signing time: Sun 01 Mar 2026 01:34:14 +0000 ROA not before: Sun 01 Mar 2026 01:34:14 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 183.73.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4196 (0x1064) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:34:14 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=1CAAB14EFB058C8AC9B61A2578071F95ED4DEA51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:30:1b:c6:50:3a:a4:85:39:4a:a8:35:66:2d: 8b:fd:2d:f3:4f:cd:a4:f6:2a:4e:d2:d2:86:d3:3c: 94:16:cf:34:f5:3d:a5:23:e8:57:7e:1e:d3:8e:e7: 79:31:91:71:36:00:76:28:0e:f0:86:00:ab:9b:95: bb:ed:18:aa:17:8f:b0:b9:4b:1e:44:f5:3f:ed:ae: f4:5c:c0:82:55:e6:b0:f3:cf:72:9b:4d:93:f5:60: f4:5e:02:bb:c4:ab:c2:df:cb:ad:2b:b7:bc:11:23: b8:e3:5c:d3:40:7b:64:47:d6:e7:fe:60:bf:f2:fe: c0:53:a7:e6:35:bd:d8:0f:fb:f7:d6:dd:85:d3:90: c6:6b:ed:cb:f5:5f:f0:b0:c9:22:af:65:11:d7:22: 60:be:1c:03:58:4c:02:c6:c8:09:dc:ab:eb:08:a2: 84:31:18:2a:e0:24:58:91:96:de:67:0f:10:bf:a9: 78:09:4e:29:ff:66:9e:7f:17:f3:ca:43:99:33:ac: 34:40:50:f2:07:31:22:3e:d3:20:ed:a7:90:8b:0f: 0d:aa:11:4a:15:bb:ae:b2:81:03:22:78:c3:a7:43: 27:ee:0c:88:d5:80:3a:c6:af:c6:3f:62:c5:1f:91: 6c:06:ce:57:ae:30:a6:2b:bc:45:d7:4f:da:a6:94: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AA:B1:4E:FB:05:8C:8A:C9:B6:1A:25:78:07:1F:95:ED:4D:EA:51 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HKqxTvsFjIrJtholeAcfle1N6lE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.73.16.0/21 Signature Algorithm: sha256WithRSAEncryption a3:99:32:e8:7e:9f:ca:90:f0:31:41:5b:03:e2:6f:ec:43:ed: 87:49:37:66:a9:fd:32:51:ec:ad:c6:b5:6f:91:bf:8a:7d:cb: a5:4c:a6:01:05:fa:e3:28:cf:3f:bb:a6:c6:64:8a:e6:0a:2b: e4:6e:e7:a5:e2:bf:35:70:c8:23:76:3b:d0:f7:56:f6:de:cc: 53:af:97:fd:5e:df:1b:b8:c0:78:46:cc:a5:cf:1f:1c:22:a5: 58:6c:66:a9:14:bd:0b:ac:f3:05:87:7e:5a:7b:39:19:92:da: 06:0a:b8:68:19:56:41:3d:5f:78:a2:a1:b4:57:c5:d3:73:1a: ff:90:5d:5e:65:6c:10:de:32:2f:17:df:94:ea:71:53:05:0b: 14:80:b7:27:71:62:fa:18:a8:04:c8:6b:55:82:27:21:5e:84: a6:c5:1c:45:a1:70:75:b3:59:9d:77:83:f4:99:43:f0:93:2d: d6:5d:3f:44:f6:ce:3c:5a:ac:18:25:8f:7e:70:25:84:e8:a8: f9:e7:27:94:1f:a0:5b:12:87:90:66:f1:84:4f:b8:e1:07:13: 02:67:ab:9e:1d:56:0d:75:1c:55:4d:35:d1:a1:8d:2c:27:85: f7:3a:9b:ff:26:c1:a1:7d:3b:9b:59:b0:ad:d0:6d:87:1f:87: 19:8f:e1:25 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEGQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTM0MTRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFDQUFCMTRFRkIwNThD OEFDOUI2MUEyNTc4MDcxRjk1RUQ0REVBNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQMBvGUDqkhTlKqDVmLYv9LfNPzaT2Kk7S0obTPJQWzzT1PaUj 6Fd+HtOO53kxkXE2AHYoDvCGAKublbvtGKoXj7C5Sx5E9T/trvRcwIJV5rDzz3Kb TZP1YPReArvEq8Lfy60rt7wRI7jjXNNAe2RH1uf+YL/y/sBTp+Y1vdgP+/fW3YXT kMZr7cv1X/CwySKvZRHXImC+HANYTALGyAncq+sIooQxGCrgJFiRlt5nDxC/qXgJ Tin/Zp5/F/PKQ5kzrDRAUPIHMSI+0yDtp5CLDw2qEUoVu66ygQMieMOnQyfuDIjV gDrGr8Y/YsUfkWwGzleuMKYrvEXXT9qmlMdRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHKqxTvsFjIrJtholeAcfle1N6lEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hLcXhUdnNGaklySnRob2xlQWNmbGUxTjZsRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO3SRAwDQYJKoZIhvcNAQELBQADggEBAKOZMuh+n8qQ8DFBWwPib+xD7YdJ N2ap/TJR7K3GtW+Rv4p9y6VMpgEF+uMozz+7psZkiuYKK+Ru56XivzVwyCN2O9D3 VvbezFOvl/1e3xu4wHhGzKXPHxwipVhsZqkUvQus8wWHflp7ORmS2gYKuGgZVkE9 X3iiobRXxdNzGv+QXV5lbBDeMi8X35TqcVMFCxSAtydxYvoYqATIa1WCJyFehKbF HEWhcHWzWZ13g/SZQ/CTLdZdP0T2zjxarBglj35wJYToqPnnJ5QfoFsSh5Bm8YRP uOEHEwJnq54dVg11HFVNNdGhjSwnhfc6m/8mwaF9O5tZsK3QbYcfhxmP4SU= -----END CERTIFICATE-----Generated at Mon Mar 2 08:23:02 2026 by rpki-client