$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/L8fbYP9vIbHeyfHSr0tYMEtAXwc.roa File: L8fbYP9vIbHeyfHSr0tYMEtAXwc.roa (raw, json) Hash identifier: fFVwLYAqYrlgJIzdcKw6mJc1KUNr7uwWZX6FWQYHVX8= Subject key identifier: 2F:C7:DB:60:FF:6F:21:B1:DE:C9:F1:D2:AF:4B:58:30:4B:40:5F:07 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1165 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L8fbYP9vIbHeyfHSr0tYMEtAXwc.roa Signing time: Sun 01 Mar 2026 02:21:53 +0000 ROA not before: Sun 01 Mar 2026 02:21:53 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 110.158.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4453 (0x1165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:21:53 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=2FC7DB60FF6F21B1DEC9F1D2AF4B58304B405F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:fa:0b:21:a6:86:4d:8d:ec:7c:59:f4:ed: d3:3f:ad:8d:8a:7c:30:7f:d1:4f:34:6f:ba:5f:99: 62:6e:db:ac:04:5e:96:b4:6b:e9:c1:7f:ad:ec:5d: d1:28:06:81:10:d7:28:f6:33:2d:70:94:59:f0:0b: 03:f6:46:03:34:af:58:a7:0c:83:65:62:bf:52:8f: 2c:00:c5:b3:93:ea:25:84:7e:a2:e7:6e:1a:cf:10: 70:b3:36:5a:c9:d0:58:72:28:6f:2f:f5:f5:20:5c: 6e:13:47:40:9d:68:aa:0c:e7:b5:dc:8e:3b:21:3c: e8:c3:ab:a0:20:cd:6e:bb:6b:c8:05:50:9b:15:3e: 88:3b:50:2e:ea:df:d9:c8:23:ff:ef:69:ad:8a:7d: c2:ad:4b:8d:5e:c2:a5:7a:1a:d9:0f:ca:97:8e:e9: 41:a1:93:05:c0:75:0d:d0:8e:3c:9f:e1:7d:57:be: 23:69:d0:36:63:54:04:da:8e:7d:58:6a:a7:ce:00: 57:b4:80:01:66:7f:d8:e4:2a:fd:7e:84:cb:7e:af: 79:c2:55:47:fe:26:9f:e1:f4:a8:51:b5:f5:5a:2c: 91:f4:5a:a1:68:ba:86:4d:9c:fc:2d:ee:c6:ec:d6: eb:f8:e3:fb:7d:25:61:04:a7:ee:3c:21:48:6b:26: 58:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C7:DB:60:FF:6F:21:B1:DE:C9:F1:D2:AF:4B:58:30:4B:40:5F:07 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L8fbYP9vIbHeyfHSr0tYMEtAXwc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.144.0/20 Signature Algorithm: sha256WithRSAEncryption 43:ac:81:a3:1d:99:20:cf:78:f9:83:70:03:68:18:ec:c4:4e: 93:ed:68:cc:36:4b:1f:95:07:ec:5e:d6:69:eb:22:fd:29:ef: d1:96:af:14:88:e2:ae:54:21:04:ca:6f:87:d1:6e:28:e5:ef: bf:77:76:7c:8c:72:72:a6:07:fa:e5:81:8c:3c:46:f8:f4:9e: d4:10:ae:ec:34:92:82:d4:88:f3:bd:0e:f6:39:c3:9b:b8:4f: e6:e2:47:85:f1:04:86:55:21:4e:0b:56:e6:2f:0c:e5:1f:6d: ba:97:48:cb:59:c2:1d:d5:7b:7a:f6:5a:71:23:73:1c:c4:86: 22:14:17:1e:ab:e0:08:4c:86:9c:5a:9a:1a:7a:ec:13:d5:ea: e5:9e:b1:b5:de:f6:87:1d:a4:1c:86:0b:ba:13:5a:d0:15:b1: 0e:0b:c7:c9:b6:c9:e1:50:54:9c:cd:dd:6d:82:eb:46:fe:05: 3e:68:61:6f:de:13:be:ae:e1:2f:d6:a9:0b:23:bf:94:04:aa: ca:94:56:bb:a1:b3:15:cc:51:93:92:ea:48:06:6f:16:40:a2: 09:1e:db:ad:29:f3:b6:33:c2:48:f0:19:86:e5:e2:4d:30:3a: 4e:13:b5:79:f5:55:7d:f4:34:9b:94:9d:77:b9:9e:4e:46:b5: 92:9a:d1:aa -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEWUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjIxNTNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJGQzdEQjYwRkY2RjIx QjFERUM5RjFEMkFGNEI1ODMwNEI0MDVGMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1qvoLIaaGTY3sfFn07dM/rY2KfDB/0U80b7pfmWJu26wEXpa0 a+nBf63sXdEoBoEQ1yj2My1wlFnwCwP2RgM0r1inDINlYr9SjywAxbOT6iWEfqLn bhrPEHCzNlrJ0FhyKG8v9fUgXG4TR0CdaKoM57XcjjshPOjDq6AgzW67a8gFUJsV Pog7UC7q39nII//vaa2KfcKtS41ewqV6GtkPypeO6UGhkwXAdQ3Qjjyf4X1XviNp 0DZjVATajn1YaqfOAFe0gAFmf9jkKv1+hMt+r3nCVUf+Jp/h9KhRtfVaLJH0WqFo uoZNnPwt7sbs1uv44/t9JWEEp+48IUhrJlhLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUL8fbYP9vIbHeyfHSr0tYMEtAXwcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0w4ZmJZUDl2SWJIZXlmSFNyMHRZTUV0QVh3Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARunpAwDQYJKoZIhvcNAQELBQADggEBAEOsgaMdmSDPePmDcANoGOzETpPt aMw2Sx+VB+xe1mnrIv0p79GWrxSI4q5UIQTKb4fRbijl7793dnyMcnKmB/rlgYw8 Rvj0ntQQruw0koLUiPO9DvY5w5u4T+biR4XxBIZVIU4LVuYvDOUfbbqXSMtZwh3V e3r2WnEjcxzEhiIUFx6r4AhMhpxamhp67BPV6uWesbXe9ocdpByGC7oTWtAVsQ4L x8m2yeFQVJzN3W2C60b+BT5oYW/eE76u4S/WqQsjv5QEqsqUVruhsxXMUZOS6kgG bxZAogke260p87YzwkjwGYbl4k0wOk4TtXn1VX30NJuUnXe5nk5GtZKa0ao= -----END CERTIFICATE-----Generated at Mon Mar 2 19:56:34 2026 by rpki-client