$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K8o2Bxxms6SIHT6gw2vew6xdsRI.roa File: K8o2Bxxms6SIHT6gw2vew6xdsRI.roa (raw, json) Hash identifier: FkP687epsPYchGDi5lzMOb1Be1O9AVRnQGFYgmfBimI= Subject key identifier: 2B:CA:36:07:1C:66:B3:A4:88:1D:3E:A0:C3:6B:DE:C3:AC:5D:B1:12 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 120F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K8o2Bxxms6SIHT6gw2vew6xdsRI.roa Signing time: Sun 01 Mar 2026 02:48:39 +0000 ROA not before: Sun 01 Mar 2026 02:48:39 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4623 (0x120f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:48:39 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=2BCA36071C66B3A4881D3EA0C36BDEC3AC5DB112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:57:d8:95:be:4c:5e:6d:9d:e9:eb:23:68:18: 3c:b0:df:02:b1:1e:63:8e:00:61:aa:7f:c8:a0:d3: 77:f1:42:97:d9:88:6b:09:ce:ca:1d:ce:93:10:d3: 9e:a7:42:b3:85:6d:77:5b:7a:74:a7:8e:de:e4:ce: a4:af:72:9a:a7:bb:17:ba:db:0a:1f:fb:e2:e1:9e: fa:d3:86:6a:e8:f1:99:42:e5:0b:13:e1:29:b7:5a: 5c:15:b6:25:f1:05:df:fb:b8:12:ad:6c:26:9f:e5: dd:51:fe:00:16:4b:42:d4:9b:40:92:1c:48:fb:1c: 9a:d0:c8:84:05:7a:6b:2b:02:3f:cf:fc:a7:eb:51: 6f:6a:8a:68:dd:8e:47:91:5a:91:d8:97:56:35:75: 6e:61:79:86:8e:92:12:c9:71:00:85:8b:a4:46:0a: 03:76:45:7e:5f:9c:c7:4a:77:fe:0c:db:47:2c:e5: 2f:1b:7a:34:04:5c:00:be:d1:90:47:da:6c:2d:6e: 63:5d:12:85:a4:50:60:b3:3a:46:79:af:f5:a2:19: 89:4a:d6:08:84:3f:2e:37:4e:60:d9:1a:63:67:6a: 5c:49:c1:47:1c:22:3b:15:b2:ac:19:44:fe:f7:c5: 2a:2a:f6:89:76:c0:5a:19:9e:dc:29:62:e4:5d:ce: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CA:36:07:1C:66:B3:A4:88:1D:3E:A0:C3:6B:DE:C3:AC:5D:B1:12 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K8o2Bxxms6SIHT6gw2vew6xdsRI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.188.0/22 Signature Algorithm: sha256WithRSAEncryption 93:2e:34:6a:85:a9:d1:0f:c2:5f:36:70:8a:2b:95:c0:a2:3d: f8:7a:ee:e2:11:4a:eb:e8:65:f0:0d:5c:54:f4:74:7c:26:c8: 4c:4c:4d:16:3e:23:b3:61:75:50:ba:d9:4e:ed:33:22:9d:6a: 3c:95:d5:9a:05:b5:b2:a4:de:d9:5c:ce:be:b1:a4:51:c3:c2: e9:f5:79:e3:a8:2d:eb:c4:58:3b:8e:07:22:bf:61:82:99:14: 64:a7:2e:53:53:1f:9a:84:d6:90:02:e8:47:fb:74:64:48:74: 84:93:ba:51:18:80:8a:19:af:86:f2:d6:d3:13:55:c0:b7:1f: cd:6c:b8:91:b6:96:e0:14:38:59:a0:3c:43:ce:e5:12:ca:66: 78:eb:ee:a3:3f:62:ed:39:c5:7b:4a:29:50:b2:ed:ab:ef:3f: 4e:e9:66:91:e2:a8:60:bd:64:70:f1:0b:f8:02:85:9f:29:e8: 57:94:fe:4e:82:0c:8b:cb:7e:ce:da:d6:b5:f6:6c:fc:da:d0: 88:f0:46:d7:b8:39:a6:f7:e9:be:7d:67:d5:d2:65:3f:96:10: 9b:31:b7:52:76:58:76:dc:59:82:5f:a1:60:5b:04:a5:a9:b2: 39:56:d7:c7:06:09:76:40:c7:d2:db:9a:72:dd:32:f8:34:97: 43:f0:87:67 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQ4MzlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJCQ0EzNjA3MUM2NkIz QTQ4ODFEM0VBMEMzNkJERUMzQUM1REIxMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgV9iVvkxebZ3p6yNoGDyw3wKxHmOOAGGqf8ig03fxQpfZiGsJ zsodzpMQ056nQrOFbXdbenSnjt7kzqSvcpqnuxe62wof++LhnvrThmro8ZlC5QsT 4Sm3WlwVtiXxBd/7uBKtbCaf5d1R/gAWS0LUm0CSHEj7HJrQyIQFemsrAj/P/Kfr UW9qimjdjkeRWpHYl1Y1dW5heYaOkhLJcQCFi6RGCgN2RX5fnMdKd/4M20cs5S8b ejQEXAC+0ZBH2mwtbmNdEoWkUGCzOkZ5r/WiGYlK1giEPy43TmDZGmNnalxJwUcc IjsVsqwZRP73xSoq9ol2wFoZntwpYuRdzkuRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUK8o2Bxxms6SIHT6gw2vew6xdsRIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0s4bzJCeHhtczZTSUhUNmd3MnZldzZ4ZHNSSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYrwwDQYJKoZIhvcNAQELBQADggEBAJMuNGqFqdEPwl82cIorlcCiPfh6 7uIRSuvoZfANXFT0dHwmyExMTRY+I7NhdVC62U7tMyKdajyV1ZoFtbKk3tlczr6x pFHDwun1eeOoLevEWDuOByK/YYKZFGSnLlNTH5qE1pAC6Ef7dGRIdISTulEYgIoZ r4by1tMTVcC3H81suJG2luAUOFmgPEPO5RLKZnjr7qM/Yu05xXtKKVCy7avvP07p ZpHiqGC9ZHDxC/gChZ8p6FeU/k6CDIvLfs7a1rX2bPza0IjwRte4Oab36b59Z9XS ZT+WEJsxt1J2WHbcWYJfoWBbBKWpsjlW18cGCXZAx9LbmnLdMvg0l0Pwh2c= -----END CERTIFICATE-----Generated at Mon Mar 2 06:55:45 2026 by rpki-client