$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LWd9ZBHPWLWlyk8IfD25DYECrAc.roa File: LWd9ZBHPWLWlyk8IfD25DYECrAc.roa (raw, json) Hash identifier: KFUiqq0h/vlFka8DjySX704TIEOhou0Q1T1f4kqaSyM= Subject key identifier: 2D:67:7D:64:11:CF:58:B5:A5:CA:4F:08:7C:3D:B9:0D:81:02:AC:07 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 10C8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LWd9ZBHPWLWlyk8IfD25DYECrAc.roa Signing time: Sun 01 Mar 2026 01:54:41 +0000 ROA not before: Sun 01 Mar 2026 01:54:41 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4296 (0x10c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:54:41 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=2D677D6411CF58B5A5CA4F087C3DB90D8102AC07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3c:73:90:07:cb:50:bd:af:31:6f:da:c9:99: fa:44:b9:bc:fb:c9:e7:ce:1a:34:a3:f9:0a:79:88: e1:ef:6a:2e:74:e2:62:57:0c:19:0b:d7:2b:95:cf: 1f:4f:ab:31:52:a8:87:a0:56:11:b9:a7:3b:86:f6: 44:8f:55:2e:97:6f:e5:6d:78:0e:a0:e7:98:e0:f3: cf:03:7d:b8:be:18:32:9e:e2:b3:67:2c:62:e1:58: 8a:70:75:82:c5:cf:a7:78:46:32:44:e4:8e:3b:4b: 03:15:d1:d6:5c:9d:14:4f:20:12:be:21:20:be:d0: 8f:8a:36:37:0c:21:4e:b3:43:c8:ff:c1:26:9e:b5: 84:4b:17:f9:1e:4d:09:89:42:52:10:16:da:f1:68: b3:e6:ab:ae:c3:92:cb:72:1c:fc:89:4c:28:46:a0: cf:91:36:48:a1:e2:46:19:78:83:42:f2:43:bd:3b: 7d:c5:9f:0d:06:4d:a6:af:86:8f:e3:c4:61:30:8a: ed:5e:5b:34:cf:7d:3f:21:1e:ff:08:62:11:f4:e9: eb:c9:c0:fb:89:e3:a4:02:b2:7c:45:34:b1:22:80: 3c:8c:aa:84:36:e2:21:07:8c:f7:f9:12:34:09:91: b9:b2:a7:0f:e3:a2:9b:c3:ff:a8:38:ac:76:99:e6: a9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:67:7D:64:11:CF:58:B5:A5:CA:4F:08:7C:3D:B9:0D:81:02:AC:07 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LWd9ZBHPWLWlyk8IfD25DYECrAc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.6.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:4e:4d:8f:cf:ec:2d:54:e9:b5:a8:dd:b1:f7:e9:cd:18:9c: 10:98:37:ea:ec:ed:67:3a:d4:28:73:72:e8:90:a8:11:a5:e1: a2:36:e2:bf:da:55:24:00:2d:a8:24:10:09:2a:13:10:d2:46: 2d:ac:ab:9d:b7:9c:3b:80:4b:d1:98:b7:d0:f0:13:22:43:e6: 43:e5:d7:ea:04:01:2a:07:7e:57:e9:70:db:de:ad:92:82:30: 19:cd:d3:c7:15:92:9c:f0:af:0b:2d:b7:5d:4c:ba:d7:0e:85: 7b:13:cd:34:f7:ca:7e:9c:a4:d3:68:4b:33:b5:a3:56:25:7f: 5e:47:2e:a2:7f:fd:3d:54:4d:c7:83:5b:0e:8a:b4:54:d9:bc: 83:2a:a3:74:f1:61:30:9c:85:fd:d5:30:03:de:49:bf:ae:b9: 23:a1:bf:92:2a:0c:ef:1c:ae:c6:34:fa:30:cb:6c:1b:6f:db: fc:73:96:a7:e7:bc:48:c8:fa:d4:30:fe:30:f5:66:2b:c4:5d: a4:aa:ee:17:5e:3f:8d:69:64:e1:11:5b:04:5f:bd:da:66:d0: 24:ad:06:d8:a2:5b:ac:cb:30:66:c9:1c:0b:4a:d5:df:53:ac: 3b:de:11:98:11:da:a5:38:af:b7:d9:9a:8a:d9:09:dd:e7:8d: 71:f4:9b:f0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTU0NDFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJENjc3RDY0MTFDRjU4 QjVBNUNBNEYwODdDM0RCOTBEODEwMkFDMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZPHOQB8tQva8xb9rJmfpEubz7yefOGjSj+Qp5iOHvai504mJX DBkL1yuVzx9PqzFSqIegVhG5pzuG9kSPVS6Xb+VteA6g55jg888Dfbi+GDKe4rNn LGLhWIpwdYLFz6d4RjJE5I47SwMV0dZcnRRPIBK+ISC+0I+KNjcMIU6zQ8j/wSae tYRLF/keTQmJQlIQFtrxaLPmq67DkstyHPyJTChGoM+RNkih4kYZeINC8kO9O33F nw0GTaavho/jxGEwiu1eWzTPfT8hHv8IYhH06evJwPuJ46QCsnxFNLEigDyMqoQ2 4iEHjPf5EjQJkbmypw/jopvD/6g4rHaZ5qmDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULWd9ZBHPWLWlyk8IfD25DYECrAcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xXZDlaQkhQV0xXbHlrOElmRDI1RFlFQ3JBYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYgYwDQYJKoZIhvcNAQELBQADggEBAJ9OTY/P7C1U6bWo3bH36c0YnBCY N+rs7Wc61ChzcuiQqBGl4aI24r/aVSQALagkEAkqExDSRi2sq523nDuAS9GYt9Dw EyJD5kPl1+oEASoHflfpcNverZKCMBnN08cVkpzwrwstt11MutcOhXsTzTT3yn6c pNNoSzO1o1Ylf15HLqJ//T1UTceDWw6KtFTZvIMqo3TxYTCchf3VMAPeSb+uuSOh v5IqDO8crsY0+jDLbBtv2/xzlqfnvEjI+tQw/jD1ZivEXaSq7hdeP41pZOERWwRf vdpm0CStBtiiW6zLMGbJHAtK1d9TrDveEZgR2qU4r7fZmorZCd3njXH0m/A= -----END CERTIFICATE-----Generated at Mon Mar 2 08:22:03 2026 by rpki-client