$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/J0IgF1GJ6lI5ZwBL3VlBK8K7tHQ.roa File: J0IgF1GJ6lI5ZwBL3VlBK8K7tHQ.roa (raw, json) Hash identifier: QwTJMxDIHbc+jLIr2NKEI/T54PjvwH7EZlR/nIh7KAI= Subject key identifier: 27:42:20:17:51:89:EA:52:39:67:00:4B:DD:59:41:2B:C2:BB:B4:74 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 108F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J0IgF1GJ6lI5ZwBL3VlBK8K7tHQ.roa Signing time: Sun 01 Mar 2026 01:44:39 +0000 ROA not before: Sun 01 Mar 2026 01:44:39 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4239 (0x108f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:44:39 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=274220175189EA523967004BDD59412BC2BBB474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:58:fe:17:e4:f4:fd:9c:e2:95:22:b4:45:bc: 81:77:8c:ae:12:43:b0:6f:bb:32:72:df:5a:37:da: d1:3b:31:31:3d:9a:94:0d:8a:35:a4:28:b3:6b:96: 44:d9:5f:bf:5d:d7:90:99:d9:1e:f0:2c:eb:9c:f3: 89:17:07:dd:92:1f:40:55:23:7a:b5:2b:77:20:7a: 65:5b:34:6c:38:8c:a1:36:42:9e:bb:a8:79:a7:25: 70:0f:9d:6b:4a:3f:59:cc:c1:e5:68:52:e1:c8:2f: 6c:3f:48:6d:8f:6b:ac:9b:82:c0:32:44:22:fc:ac: 1a:5a:ce:6a:86:c1:52:92:39:72:50:71:b5:3d:68: 63:2e:c8:3d:c3:7d:7d:0b:72:a2:23:33:52:5b:f0: 87:2b:27:6f:91:f6:53:3a:59:71:17:fe:72:0d:33: 38:e8:14:b5:19:cf:14:e3:65:40:89:87:2e:30:47: fa:78:11:f5:c3:23:07:ef:6b:8b:95:56:6e:90:15: 84:80:46:d0:02:95:3b:a5:d5:5e:c7:e4:3f:0a:de: 08:9c:9b:7b:62:01:a6:5c:7d:81:5f:db:87:b8:74: b7:ac:9f:1f:fb:00:e2:0c:bc:8b:c5:fe:b6:78:48: 47:16:b9:75:94:66:95:2d:90:ba:00:c2:5f:d4:4e: 82:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:42:20:17:51:89:EA:52:39:67:00:4B:DD:59:41:2B:C2:BB:B4:74 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J0IgF1GJ6lI5ZwBL3VlBK8K7tHQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.0.0/22 Signature Algorithm: sha256WithRSAEncryption 51:7f:83:22:38:4f:a3:cc:a1:27:a7:a5:35:72:33:04:c9:29: a3:1f:63:4a:95:ce:fe:ee:c0:7d:2f:d0:9e:c1:d0:2b:40:f3: 10:52:14:38:a1:71:e9:0e:e2:7f:4f:a6:59:f4:87:a2:54:08: 3f:a5:fc:af:31:db:88:b9:26:3e:76:2d:c4:7c:b4:04:c3:c3: 29:99:38:b6:8e:3a:14:f8:2b:bf:ff:7d:dd:26:d4:f8:dd:c5: c1:4a:5b:42:04:9a:cf:e9:70:7a:fc:92:c3:c4:37:2e:a2:aa: 29:7d:65:ee:10:bd:5d:d5:d8:c2:cf:99:37:61:da:cd:5e:8a: a1:49:6e:ae:ca:36:2d:62:2c:40:a7:f1:65:bf:e9:fe:5e:91: 09:37:19:39:3e:07:19:b0:1c:ea:7d:01:61:81:ec:c6:50:08: c0:9a:7a:4e:31:b1:57:a0:61:bd:5f:3c:57:83:cc:5b:13:8e: 01:50:f0:dc:cf:4b:20:68:dc:0f:6e:7d:3f:b2:39:f7:8a:95: b7:75:9c:49:c2:13:d2:d7:0e:d9:42:79:b2:89:7e:78:4b:f9: 70:78:99:98:38:f5:49:fa:94:44:07:6b:42:8a:94:cc:ed:57: 3a:2f:5b:6a:dc:a2:0a:79:32:d0:ff:e7:d2:64:f3:44:64:2f: 0e:37:f2:8a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTQ0MzlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI3NDIyMDE3NTE4OUVB NTIzOTY3MDA0QkRENTk0MTJCQzJCQkI0NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3WP4X5PT9nOKVIrRFvIF3jK4SQ7BvuzJy31o32tE7MTE9mpQN ijWkKLNrlkTZX79d15CZ2R7wLOuc84kXB92SH0BVI3q1K3cgemVbNGw4jKE2Qp67 qHmnJXAPnWtKP1nMweVoUuHIL2w/SG2Pa6ybgsAyRCL8rBpazmqGwVKSOXJQcbU9 aGMuyD3DfX0LcqIjM1Jb8IcrJ2+R9lM6WXEX/nINMzjoFLUZzxTjZUCJhy4wR/p4 EfXDIwfva4uVVm6QFYSARtAClTul1V7H5D8K3gicm3tiAaZcfYFf24e4dLesnx/7 AOIMvIvF/rZ4SEcWuXWUZpUtkLoAwl/UToLZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJ0IgF1GJ6lI5ZwBL3VlBK8K7tHQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0owSWdGMUdKNmxJNVp3QkwzVmxCSzhLN3RIUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYgAwDQYJKoZIhvcNAQELBQADggEBAFF/gyI4T6PMoSenpTVyMwTJKaMf Y0qVzv7uwH0v0J7B0CtA8xBSFDihcekO4n9Ppln0h6JUCD+l/K8x24i5Jj52LcR8 tATDwymZOLaOOhT4K7//fd0m1PjdxcFKW0IEms/pcHr8ksPENy6iqil9Ze4QvV3V 2MLPmTdh2s1eiqFJbq7KNi1iLECn8WW/6f5ekQk3GTk+BxmwHOp9AWGB7MZQCMCa ek4xsVegYb1fPFeDzFsTjgFQ8NzPSyBo3A9ufT+yOfeKlbd1nEnCE9LXDtlCebKJ fnhL+XB4mZg49Un6lEQHa0KKlMztVzovW2rcogp5MtD/59Jk80RkLw438oo= -----END CERTIFICATE-----Generated at Mon Mar 2 10:34:37 2026 by rpki-client