$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IRlYsgj0eTbQCdhOUxqJ_RsVFlE.roa File: IRlYsgj0eTbQCdhOUxqJ_RsVFlE.roa (raw, json) Hash identifier: OEm55YUW7CUsc4MeoLegz4BXDZACUeYFu8Pk67nzVFI= Subject key identifier: 21:19:58:B2:08:F4:79:36:D0:09:D8:4E:53:1A:89:FD:1B:15:16:51 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 125B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IRlYsgj0eTbQCdhOUxqJ_RsVFlE.roa Signing time: Sun 01 Mar 2026 03:00:25 +0000 ROA not before: Sun 01 Mar 2026 03:00:25 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4699 (0x125b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:00:25 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=211958B208F47936D009D84E531A89FD1B151651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:3e:9c:e2:20:f3:32:e0:c0:6c:c6:1d:8f: ef:b5:8e:97:d0:24:a2:9b:18:de:b6:e5:fc:1d:3b: 86:20:56:c8:d8:ef:0d:f3:29:1a:87:d2:91:a8:cd: 6d:4b:32:de:55:9b:17:72:fc:2c:5e:f8:ea:2f:95: 3a:59:3a:cd:5c:33:9e:0c:71:61:91:a5:74:9f:02: 0a:f8:b9:27:d9:4a:cd:ee:9a:c4:81:42:4e:1d:9a: 7f:da:7d:9d:62:3c:9f:32:b0:22:23:e8:67:33:53: f3:7f:07:27:d1:17:7b:64:e6:e1:c2:33:f0:04:5a: 0d:19:d8:ec:98:b4:21:32:ad:b1:5d:e6:80:e0:c8: 81:73:e2:b3:1c:1e:f9:46:eb:6d:ed:1b:e0:dc:00: 97:e0:44:8f:a5:17:4e:e9:5f:2c:79:9c:a0:b7:79: 1b:cc:f2:a0:fd:89:04:bd:81:ea:aa:20:61:c2:6d: 86:76:f3:a6:56:56:f1:49:0a:b7:43:15:80:66:d8: a5:09:3f:5c:ee:5e:02:ad:d2:0e:2c:f2:96:26:cb: 87:5b:a0:74:17:3c:15:a4:6e:3b:34:59:24:49:f1: 92:df:a0:6d:f8:c6:f4:f3:48:ee:37:4b:d3:e8:39: 7e:6d:d3:d8:e4:f8:89:cb:24:47:3b:a6:37:b4:9e: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:19:58:B2:08:F4:79:36:D0:09:D8:4E:53:1A:89:FD:1B:15:16:51 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IRlYsgj0eTbQCdhOUxqJ_RsVFlE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.215.0/24 Signature Algorithm: sha256WithRSAEncryption 83:fe:0d:1e:14:6d:43:cd:e5:df:3d:27:54:d1:b5:a5:92:40: bf:17:b1:d8:94:ff:69:75:a7:03:80:1c:7c:f9:8d:90:eb:b9: ec:f4:03:89:dc:0d:9c:bc:9d:7f:99:6f:02:49:ae:2c:f2:a3: e6:15:69:52:62:d2:ad:e2:64:c5:da:8a:a8:9c:b3:82:99:4a: 90:11:72:78:60:24:4a:e4:63:fd:1b:1e:e8:8e:40:a8:83:94: a0:21:3a:e1:1c:29:57:6f:ce:d8:8f:85:9e:a9:eb:25:bc:44: 8b:8b:17:62:22:78:85:b6:d3:c0:cb:1d:17:2a:7a:b6:e7:2a: 7f:e8:44:9e:cd:b1:6e:86:4c:6d:16:62:0a:1f:78:79:65:02: c6:66:a9:92:d4:8d:4f:83:fa:0d:fb:07:6d:47:7f:d0:17:3b: 67:69:05:30:21:bf:44:1e:c0:14:ba:28:19:26:9b:db:4e:43: 33:34:70:a2:5c:84:7f:44:4d:4f:0c:b8:d3:c0:82:ee:ef:75: ad:ae:56:fa:76:57:7d:82:09:4c:8a:c6:99:83:e8:a1:d8:b2: 3b:79:c4:7f:70:d1:b8:db:25:55:7b:ed:68:fc:1e:35:7a:27: 79:a1:be:38:e6:9e:65:2b:5c:08:da:ff:13:e0:23:21:fe:2a: dc:b6:bc:7b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICElswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzAwMjVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIxMTk1OEIyMDhGNDc5 MzZEMDA5RDg0RTUzMUE4OUZEMUIxNTE2NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPND6c4iDzMuDAbMYdj++1jpfQJKKbGN625fwdO4YgVsjY7w3z KRqH0pGozW1LMt5Vmxdy/Cxe+OovlTpZOs1cM54McWGRpXSfAgr4uSfZSs3umsSB Qk4dmn/afZ1iPJ8ysCIj6GczU/N/ByfRF3tk5uHCM/AEWg0Z2OyYtCEyrbFd5oDg yIFz4rMcHvlG623tG+DcAJfgRI+lF07pXyx5nKC3eRvM8qD9iQS9geqqIGHCbYZ2 86ZWVvFJCrdDFYBm2KUJP1zuXgKt0g4s8pYmy4dboHQXPBWkbjs0WSRJ8ZLfoG34 xvTzSO43S9PoOX5t09jk+InLJEc7pje0nue9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIRlYsgj0eTbQCdhOUxqJ/RsVFlEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lSbFlzZ2owZVRiUUNkaE9VeHFKX1JzVkZsRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxatcwDQYJKoZIhvcNAQELBQADggEBAIP+DR4UbUPN5d89J1TRtaWSQL8X sdiU/2l1pwOAHHz5jZDruez0A4ncDZy8nX+ZbwJJrizyo+YVaVJi0q3iZMXaiqic s4KZSpARcnhgJErkY/0bHuiOQKiDlKAhOuEcKVdvztiPhZ6p6yW8RIuLF2IieIW2 08DLHRcqerbnKn/oRJ7NsW6GTG0WYgofeHllAsZmqZLUjU+D+g37B21Hf9AXO2dp BTAhv0QewBS6KBkmm9tOQzM0cKJchH9ETU8MuNPAgu7vda2uVvp2V32CCUyKxpmD 6KHYsjt5xH9w0bjbJVV77Wj8HjV6J3mhvjjmnmUrXAja/xPgIyH+Kty2vHs= -----END CERTIFICATE-----Generated at Mon Mar 2 05:17:26 2026 by rpki-client