$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IOLRRkGgfzMGcPD4QHptGyN11kQ.roa File: IOLRRkGgfzMGcPD4QHptGyN11kQ.roa (raw, json) Hash identifier: cYy3CoCcMu6nFLljAcSkKYZnkZhsG+dyOyXnjzHnSlE= Subject key identifier: 20:E2:D1:46:41:A0:7F:33:06:70:F0:F8:40:7A:6D:1B:23:75:D6:44 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1247 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IOLRRkGgfzMGcPD4QHptGyN11kQ.roa Signing time: Sun 01 Mar 2026 02:56:36 +0000 ROA not before: Sun 01 Mar 2026 02:56:36 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4679 (0x1247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:56:36 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=20E2D14641A07F330670F0F8407A6D1B2375D644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:83:25:42:ad:ee:a4:d5:06:c3:ae:9c:b0:26: a6:63:5a:f4:3c:f7:50:fc:52:a9:c8:6b:3c:d7:4f: 62:bd:19:6b:0a:d5:b5:1a:7b:2d:32:ec:d4:92:d2: 1f:e1:b4:8c:a9:f1:b5:5c:7b:b0:cf:48:96:ed:31: b4:a0:62:89:6f:9c:bc:26:b0:40:c7:69:ce:08:e1: 98:01:33:0a:64:06:f1:ae:04:d7:2a:f6:89:4e:99: c3:3f:ae:39:47:57:5b:2a:3e:68:e3:2b:38:39:c7: dc:86:b2:aa:a9:0e:42:cd:66:25:e6:c2:c5:7c:a8: 58:64:85:3d:4b:09:68:57:46:8d:81:37:21:82:95: 09:42:b9:12:83:08:62:b2:9d:5c:66:b0:86:29:76: 2a:ac:44:bb:89:8b:29:3a:a6:ca:07:c0:0d:2d:91: c4:69:92:1a:28:3a:f0:c2:7c:15:16:f2:e7:ad:b6: a7:5e:66:10:f2:7b:0d:9f:22:e9:cc:7b:6a:3f:aa: c2:19:10:ba:85:06:5d:56:b5:14:64:5f:9e:c6:71: d3:14:df:f5:75:16:5d:63:8d:2a:a9:fc:25:1f:bb: d9:27:bf:98:73:d6:5b:26:d3:17:0b:a9:6e:d3:a6: 1d:ba:e6:f5:1a:60:d7:01:f3:52:34:7a:09:01:27: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E2:D1:46:41:A0:7F:33:06:70:F0:F8:40:7A:6D:1B:23:75:D6:44 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IOLRRkGgfzMGcPD4QHptGyN11kQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.60.0/22 Signature Algorithm: sha256WithRSAEncryption 64:d4:25:77:45:eb:7f:4a:4d:b2:d6:cc:6c:ec:94:6a:0c:2e: 7a:e1:12:c8:28:6c:60:e4:9b:90:13:e6:12:53:71:bd:a7:a5: 43:cd:b0:86:1c:fd:ba:6a:9a:0f:f3:ce:67:27:1d:e5:d4:54: f0:c8:ad:2d:92:76:1c:39:7d:fb:a7:7e:b2:ae:2e:6c:81:2c: fa:0a:49:a8:a0:88:7a:1e:bf:69:e2:75:d4:c5:67:8e:3f:d7: aa:8f:22:32:ca:de:fe:98:e6:de:26:3a:18:89:23:a1:d7:a7: ab:4a:f3:9f:17:47:c6:db:d9:6b:5f:84:7e:2a:a6:b3:b8:66: b0:6d:a5:e5:e9:2e:46:6b:7c:d9:27:20:72:34:11:4d:23:e2: f2:ce:f4:6f:0f:f1:84:8e:8e:b3:b8:71:fa:8d:c4:e3:26:24: 3d:c5:ab:55:6c:65:30:a0:73:b6:3b:07:48:45:1f:d2:cf:cb: 09:29:5c:7a:42:b2:85:35:36:45:b9:3c:63:7e:69:5c:7c:e4: 12:f3:03:b8:7b:9d:f7:1b:48:03:80:c9:0c:56:81:2a:34:4d: 73:e6:b2:eb:c0:e3:47:fb:f8:5c:29:e6:da:81:20:74:de:c0: cd:f4:df:ca:17:6c:ae:5b:15:00:1f:68:cb:2d:3b:a3:d1:70: 4c:ab:20:34 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjU2MzZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwRTJEMTQ2NDFBMDdG MzMwNjcwRjBGODQwN0E2RDFCMjM3NUQ2NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPgyVCre6k1QbDrpywJqZjWvQ891D8UqnIazzXT2K9GWsK1bUa ey0y7NSS0h/htIyp8bVce7DPSJbtMbSgYolvnLwmsEDHac4I4ZgBMwpkBvGuBNcq 9olOmcM/rjlHV1sqPmjjKzg5x9yGsqqpDkLNZiXmwsV8qFhkhT1LCWhXRo2BNyGC lQlCuRKDCGKynVxmsIYpdiqsRLuJiyk6psoHwA0tkcRpkhooOvDCfBUW8uettqde ZhDyew2fIunMe2o/qsIZELqFBl1WtRRkX57GcdMU3/V1Fl1jjSqp/CUfu9knv5hz 1lsm0xcLqW7Tph265vUaYNcB81I0egkBJzI7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIOLRRkGgfzMGcPD4QHptGyN11kQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lPTFJSa0dnZnpNR2NQRDRRSHB0R3lOMTFrUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYDwwDQYJKoZIhvcNAQELBQADggEBAGTUJXdF639KTbLWzGzslGoMLnrh EsgobGDkm5AT5hJTcb2npUPNsIYc/bpqmg/zzmcnHeXUVPDIrS2Sdhw5ffunfrKu LmyBLPoKSaigiHoev2niddTFZ44/16qPIjLK3v6Y5t4mOhiJI6HXp6tK858XR8bb 2WtfhH4qprO4ZrBtpeXpLkZrfNknIHI0EU0j4vLO9G8P8YSOjrO4cfqNxOMmJD3F q1VsZTCgc7Y7B0hFH9LPywkpXHpCsoU1NkW5PGN+aVx85BLzA7h7nfcbSAOAyQxW gSo0TXPmsuvA40f7+Fwp5tqBIHTewM3038oXbK5bFQAfaMstO6PRcEyrIDQ= -----END CERTIFICATE-----Generated at Mon Mar 2 08:21:50 2026 by rpki-client