$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/L7h0-EAhUueJ6fMDhL84mwPjMnE.roa File: L7h0-EAhUueJ6fMDhL84mwPjMnE.roa (raw, json) Hash identifier: 6Cubuej76GVScPu9WFTezymZwOW6gMUE0OHBNdDceVg= Subject key identifier: 2F:B8:74:F8:40:21:52:E7:89:E9:F3:03:84:BF:38:9B:03:E3:32:71 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1188 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L7h0-EAhUueJ6fMDhL84mwPjMnE.roa Signing time: Sun 01 Mar 2026 02:27:05 +0000 ROA not before: Sun 01 Mar 2026 02:27:05 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4488 (0x1188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:27:05 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=2FB874F8402152E789E9F30384BF389B03E33271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:c5:cb:84:59:82:da:a7:d0:47:2b:16:d2: c5:a9:64:5d:71:6a:f2:30:b6:03:94:95:72:5c:a5: 37:2e:9c:8f:61:e7:87:6e:35:e8:7c:54:f2:ea:24: aa:f0:7e:9f:79:32:1d:6d:7c:61:8b:43:2c:cf:eb: 15:e7:17:e7:2e:bf:25:aa:f6:88:11:18:79:c4:d2: 7e:a8:54:e6:50:87:a6:aa:e1:95:8a:20:81:c2:d3: 7b:51:35:4b:9c:be:a3:14:69:fd:0c:0c:7e:2e:e9: ab:28:2b:db:d7:bc:37:43:5b:31:95:d2:ad:50:e6: 1b:de:64:0b:b6:53:83:91:2d:69:68:70:b7:7f:57: 19:3d:28:ed:9f:71:50:60:2f:93:54:17:e5:1f:7b: 4a:84:dc:9f:0d:9b:79:36:2c:5a:c4:f6:a2:17:9c: 7b:88:25:ba:be:6e:25:ed:d2:d2:e1:fa:50:19:d5: 95:8c:3b:95:2e:77:e7:d8:a6:2f:a3:96:db:9e:98: d7:ba:bd:d2:7d:43:bb:6d:40:fb:5c:9b:8b:76:99: 9c:a6:38:de:4c:66:81:ae:8d:40:48:14:a0:2e:26: 5d:31:cb:63:4d:81:c2:44:a2:40:37:8b:89:8d:70: 69:39:c1:97:31:fa:90:7d:11:fa:97:64:83:6c:75: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B8:74:F8:40:21:52:E7:89:E9:F3:03:84:BF:38:9B:03:E3:32:71 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L7h0-EAhUueJ6fMDhL84mwPjMnE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.208.0/24 Signature Algorithm: sha256WithRSAEncryption c3:4f:cd:ad:e9:57:2c:6a:7f:6c:39:99:f4:f1:f5:8b:a9:eb: d6:29:57:f1:be:70:5a:a2:15:2a:f4:fc:b0:49:f1:a2:f4:5f: 5f:88:74:1d:6a:99:8b:68:04:e1:73:a3:fb:17:82:1d:fe:3a: 6e:2a:8f:fb:f5:bd:97:e1:f9:0e:ca:2f:c4:1e:aa:24:a8:5d: 00:56:07:63:dd:bd:d8:b8:e4:f4:e5:07:13:a6:17:ce:79:69: 58:99:00:62:0f:9f:00:1e:f6:1f:f1:bf:f4:4a:1b:2c:43:94: df:c5:4e:9e:24:77:5a:22:46:00:31:6e:c9:70:2f:bc:d3:1a: 68:91:ef:0b:57:27:d7:c9:fc:69:29:be:94:06:95:7a:53:45: 43:6e:fa:a6:0b:fb:02:5b:40:86:cf:af:d7:99:22:42:77:2e: 54:ab:03:d5:84:da:e5:a0:36:3f:ec:14:6a:79:f0:db:64:40: 66:f5:9d:53:23:77:b3:27:e7:b7:6b:18:9c:83:41:70:0d:a1: 2b:ed:b7:97:42:24:4a:09:00:78:62:95:15:02:cc:21:20:ba: 31:1b:84:75:49:08:e0:e3:78:71:3d:b7:dd:ee:c7:7a:71:31: f8:14:06:ac:c2:0e:88:0a:b3:28:88:98:17:ac:47:0a:9c:56: 53:a1:2a:04 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEYgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjI3MDVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJGQjg3NEY4NDAyMTUy RTc4OUU5RjMwMzg0QkYzODlCMDNFMzMyNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0l8XLhFmC2qfQRysW0sWpZF1xavIwtgOUlXJcpTcunI9h54du Neh8VPLqJKrwfp95Mh1tfGGLQyzP6xXnF+cuvyWq9ogRGHnE0n6oVOZQh6aq4ZWK IIHC03tRNUucvqMUaf0MDH4u6asoK9vXvDdDWzGV0q1Q5hveZAu2U4ORLWlocLd/ Vxk9KO2fcVBgL5NUF+Ufe0qE3J8Nm3k2LFrE9qIXnHuIJbq+biXt0tLh+lAZ1ZWM O5Uud+fYpi+jltuemNe6vdJ9Q7ttQPtcm4t2mZymON5MZoGujUBIFKAuJl0xy2NN gcJEokA3i4mNcGk5wZcx+pB9EfqXZINsddoJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUL7h0+EAhUueJ6fMDhL84mwPjMnEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0w3aDAtRUFoVXVlSjZmTURoTDg0bXdQak1uRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxatAwDQYJKoZIhvcNAQELBQADggEBAMNPza3pVyxqf2w5mfTx9Yup69Yp V/G+cFqiFSr0/LBJ8aL0X1+IdB1qmYtoBOFzo/sXgh3+Om4qj/v1vZfh+Q7KL8Qe qiSoXQBWB2Pdvdi45PTlBxOmF855aViZAGIPnwAe9h/xv/RKGyxDlN/FTp4kd1oi RgAxbslwL7zTGmiR7wtXJ9fJ/GkpvpQGlXpTRUNu+qYL+wJbQIbPr9eZIkJ3LlSr A9WE2uWgNj/sFGp58NtkQGb1nVMjd7Mn57drGJyDQXANoSvtt5dCJEoJAHhilRUC zCEgujEbhHVJCODjeHE9t93ux3pxMfgUBqzCDogKsyiImBesRwqcVlOhKgQ= -----END CERTIFICATE-----Generated at Mon Mar 2 06:55:20 2026 by rpki-client