$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/I3xyESgZwV1syEDZfALZ0zU1shg.roa File: I3xyESgZwV1syEDZfALZ0zU1shg.roa (raw, json) Hash identifier: hFf9HmBqfjfKmMELNWyqYIkQXne70aDzETbz8nI+wgU= Subject key identifier: 23:7C:72:11:28:19:C1:5D:6C:C8:40:D9:7C:02:D9:D3:35:35:B2:18 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 11E9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I3xyESgZwV1syEDZfALZ0zU1shg.roa Signing time: Sun 01 Mar 2026 02:44:28 +0000 ROA not before: Sun 01 Mar 2026 02:44:28 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4585 (0x11e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:44:28 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=237C72112819C15D6CC840D97C02D9D33535B218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:eb:73:87:19:0d:34:af:e5:34:63:ef:ac: 9f:34:fa:42:66:51:a6:cc:d5:77:24:cf:98:a3:98: 53:7f:51:d9:55:ec:b3:64:2f:ba:0a:83:67:46:11: 26:bf:62:1b:68:84:a3:c7:0a:4c:08:6a:b4:6b:a8: 14:f3:20:3b:c2:96:13:63:98:4f:3e:d6:59:12:27: 68:62:b6:48:9f:a7:63:8b:36:0b:84:84:61:39:c3: 95:cb:c3:29:ee:01:00:47:81:80:72:dc:4d:d7:50: 65:9e:af:03:08:4c:6e:5a:e2:09:86:86:10:5f:7b: 13:69:3d:7a:54:c5:02:e3:05:1a:9e:e8:70:c7:6c: fe:02:4e:63:5e:14:05:a8:68:66:a2:f7:51:e7:32: 14:e2:be:85:fb:0c:cf:e8:b6:19:84:7e:51:91:19: 54:48:14:66:80:57:46:e9:fb:65:41:e0:cd:d6:60: 97:6d:bb:1b:d8:c5:a8:76:3c:06:e2:41:1e:aa:79: d9:a1:c5:8a:e3:3f:e2:b6:43:2e:6a:e6:f8:48:dd: 65:ea:30:cf:9b:88:20:e7:e7:01:a4:8a:55:4c:4b: 73:66:1f:dd:04:52:5c:20:4d:20:45:d2:42:89:e7: 4e:b0:cb:fd:6b:31:70:8f:8c:22:1a:0a:84:d3:da: b9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7C:72:11:28:19:C1:5D:6C:C8:40:D9:7C:02:D9:D3:35:35:B2:18 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I3xyESgZwV1syEDZfALZ0zU1shg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.174.0/23 Signature Algorithm: sha256WithRSAEncryption 47:5c:c2:e0:fa:76:78:cb:d9:2e:62:f6:e1:11:f3:55:5a:62: ed:ae:61:09:ec:22:01:2b:47:07:03:42:31:d9:e3:88:2c:8e: 48:c0:2a:b3:df:6e:df:d2:bb:af:b2:31:75:af:92:74:8b:39: a4:ef:c6:c5:ec:e8:8d:07:a0:ee:c1:10:7f:0c:86:b8:2f:18: 79:79:fc:2a:d0:48:3d:3a:f8:dd:d6:17:03:b6:d3:77:b3:61: 72:45:17:d3:a5:67:9b:ea:23:88:b5:50:df:2c:13:f9:ab:dd: ff:a4:68:02:7c:65:61:63:14:f1:6b:77:72:73:dd:8e:0a:67: 76:26:0d:45:e4:39:19:71:d5:c9:c8:c9:ab:41:8d:11:08:61: 95:16:4f:d5:7b:89:2d:10:5a:d0:3e:d6:d2:4c:87:e9:7b:10: f6:47:80:f7:23:26:46:57:ae:94:cd:b5:89:17:7d:9f:78:a0: d4:4d:f2:0a:b4:25:dd:ca:44:bf:90:b8:f7:3e:af:bb:88:be: 27:c2:58:67:55:4c:bf:fd:22:47:56:93:87:8c:a1:7f:71:ce: ec:58:ee:e6:64:98:e1:35:bf:23:73:aa:ea:7a:96:d0:3d:6d: 4e:e8:eb:26:1d:33:9d:22:ed:86:21:bb:3c:99:4e:ce:ac:da: ff:5a:ec:37 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQ0MjhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIzN0M3MjExMjgxOUMx NUQ2Q0M4NDBEOTdDMDJEOUQzMzUzNUIyMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAcutzhxkNNK/lNGPvrJ80+kJmUabM1Xckz5ijmFN/UdlV7LNk L7oKg2dGESa/YhtohKPHCkwIarRrqBTzIDvClhNjmE8+1lkSJ2hitkifp2OLNguE hGE5w5XLwynuAQBHgYBy3E3XUGWerwMITG5a4gmGhhBfexNpPXpUxQLjBRqe6HDH bP4CTmNeFAWoaGai91HnMhTivoX7DM/othmEflGRGVRIFGaAV0bp+2VB4M3WYJdt uxvYxah2PAbiQR6qedmhxYrjP+K2Qy5q5vhI3WXqMM+biCDn5wGkilVMS3NmH90E UlwgTSBF0kKJ506wy/1rMXCPjCIaCoTT2rlbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUI3xyESgZwV1syEDZfALZ0zU1shgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0kzeHlFU2dad1Yxc3lFRFpmQUxaMHpVMXNoZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaq4wDQYJKoZIhvcNAQELBQADggEBAEdcwuD6dnjL2S5i9uER81VaYu2u YQnsIgErRwcDQjHZ44gsjkjAKrPfbt/Su6+yMXWvknSLOaTvxsXs6I0HoO7BEH8M hrgvGHl5/CrQSD06+N3WFwO203ezYXJFF9OlZ5vqI4i1UN8sE/mr3f+kaAJ8ZWFj FPFrd3Jz3Y4KZ3YmDUXkORlx1cnIyatBjREIYZUWT9V7iS0QWtA+1tJMh+l7EPZH gPcjJkZXrpTNtYkXfZ94oNRN8gq0Jd3KRL+QuPc+r7uIvifCWGdVTL/9IkdWk4eM oX9xzuxY7uZkmOE1vyNzqup6ltA9bU7o6yYdM50i7YYhuzyZTs6s2v9a7Dc= -----END CERTIFICATE-----Generated at Mon Mar 2 08:40:19 2026 by rpki-client