$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HU9SUtuR9j3FhBTJABX86lGa8D0.roa File: HU9SUtuR9j3FhBTJABX86lGa8D0.roa (raw, json) Hash identifier: reSSxVLLYDzuSFOui0RZve9pu7KI3jxOkTTqt2HpoPo= Subject key identifier: 1D:4F:52:52:DB:91:F6:3D:C5:84:14:C9:00:15:FC:EA:51:9A:F0:3D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1099 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HU9SUtuR9j3FhBTJABX86lGa8D0.roa Signing time: Sun 01 Mar 2026 01:44:45 +0000 ROA not before: Sun 01 Mar 2026 01:44:45 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4249 (0x1099) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:44:45 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=1D4F5252DB91F63DC58414C90015FCEA519AF03D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:17:8c:22:b9:0a:ba:be:83:82:1e:74:2b: 38:24:ee:75:f0:87:b2:68:f3:8f:7e:3a:c6:ff:1f: 12:75:42:d2:28:05:98:af:57:50:2f:b7:64:2f:ab: 83:27:0d:8a:30:cc:61:d6:a7:a7:0a:65:60:40:53: e7:b9:b8:6c:35:3b:66:20:81:45:f6:8e:b6:c6:cc: de:1a:47:66:99:cb:1d:9e:5f:54:14:8e:3a:eb:f5: 8a:c2:f1:af:e7:ad:33:61:e0:82:c8:34:61:40:f1: 07:15:ac:a7:3c:f1:16:ba:a6:5b:8b:d4:38:24:a0: 1e:fd:a3:c5:8e:0f:00:28:fc:fc:2b:44:a0:83:39: bc:e8:97:3f:08:df:aa:42:be:61:bb:47:6d:e7:97: cf:ee:23:26:b6:5c:98:7b:d1:e6:e9:35:29:50:88: dd:18:25:22:4e:e7:7c:b3:0b:c8:4e:a7:89:35:6a: 61:20:2f:f8:d2:35:9f:0b:6e:94:2b:b5:48:6f:1a: 40:a6:0c:6b:6d:ba:4b:fc:1f:91:16:78:bc:4e:39: 9d:91:6b:9b:08:64:27:13:84:c6:41:ad:68:f9:af: 9d:3e:8a:e2:0c:8d:1e:f2:a3:e6:aa:c1:2b:45:e9: cd:e0:d2:09:27:87:d9:1c:9c:a6:35:9b:4f:38:05: 7a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4F:52:52:DB:91:F6:3D:C5:84:14:C9:00:15:FC:EA:51:9A:F0:3D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HU9SUtuR9j3FhBTJABX86lGa8D0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.252.0/23 Signature Algorithm: sha256WithRSAEncryption 81:a3:59:d1:18:5d:8e:31:b3:82:32:e1:54:e3:42:a7:28:b9: c7:a6:42:25:b1:17:89:72:b4:46:76:cf:50:42:5c:72:e8:b9: 23:18:a4:91:0c:e5:e4:39:98:32:1f:b5:d9:f1:3d:5c:08:04: 53:57:90:c6:3f:82:ce:8d:5b:72:5b:4d:11:76:04:bb:85:e4: e5:d4:33:14:2b:ad:8c:85:18:5d:ad:b7:2a:56:67:4a:c4:91: 5e:63:bc:72:02:1b:d1:21:db:b6:e1:cb:7b:68:46:95:0f:4d: b2:62:2f:0a:21:68:62:04:08:d8:c9:89:a8:ad:9b:80:a2:63: d3:0d:2c:7f:54:9c:9e:01:0f:a9:5f:2d:24:9e:d0:0e:4e:62: 09:ee:6c:de:1e:85:72:b3:3d:09:dc:8d:cd:b3:50:82:07:ae: 13:21:ee:49:70:59:40:a1:08:62:77:09:3d:c2:be:aa:24:9a: 1e:a3:13:ce:03:8d:16:67:bb:f0:dd:52:39:71:0d:25:b6:bd: 75:4b:02:6d:5d:7e:1a:6c:77:3d:22:bc:13:45:c8:5a:03:c8: c8:6c:b9:36:23:9a:66:6e:4f:47:53:10:62:fb:12:a2:0a:6f: ab:e6:ed:76:9e:6f:d0:54:8d:4a:c1:1a:58:f1:d4:ba:5e:3a: 91:e0:f9:e6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTQ0NDVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFENEY1MjUyREI5MUY2 M0RDNTg0MTRDOTAwMTVGQ0VBNTE5QUYwM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxOheMIrkKur6Dgh50Kzgk7nXwh7Jo849+Osb/HxJ1QtIoBZiv V1Avt2Qvq4MnDYowzGHWp6cKZWBAU+e5uGw1O2YggUX2jrbGzN4aR2aZyx2eX1QU jjrr9YrC8a/nrTNh4ILINGFA8QcVrKc88Ra6pluL1DgkoB79o8WODwAo/PwrRKCD Obzolz8I36pCvmG7R23nl8/uIya2XJh70ebpNSlQiN0YJSJO53yzC8hOp4k1amEg L/jSNZ8LbpQrtUhvGkCmDGttukv8H5EWeLxOOZ2Ra5sIZCcThMZBrWj5r50+iuIM jR7yo+aqwStF6c3g0gknh9kcnKY1m084BXqNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHU9SUtuR9j3FhBTJABX86lGa8D0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hVOVNVdHVSOWozRmhCVEpBQlg4NmxHYThEMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYPwwDQYJKoZIhvcNAQELBQADggEBAIGjWdEYXY4xs4Iy4VTjQqcoucem QiWxF4lytEZ2z1BCXHLouSMYpJEM5eQ5mDIftdnxPVwIBFNXkMY/gs6NW3JbTRF2 BLuF5OXUMxQrrYyFGF2ttypWZ0rEkV5jvHICG9Eh27bhy3toRpUPTbJiLwohaGIE CNjJiaitm4CiY9MNLH9UnJ4BD6lfLSSe0A5OYgnubN4ehXKzPQncjc2zUIIHrhMh 7klwWUChCGJ3CT3Cvqokmh6jE84DjRZnu/DdUjlxDSW2vXVLAm1dfhpsdz0ivBNF yFoDyMhsuTYjmmZuT0dTEGL7EqIKb6vm7Xaeb9BUjUrBGljx1LpeOpHg+eY= -----END CERTIFICATE-----Generated at Mon Mar 2 05:17:24 2026 by rpki-client