$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Oqi1J8Kmmjg705waSHeSFQYf5Gg.roa File: Oqi1J8Kmmjg705waSHeSFQYf5Gg.roa (raw, json) Hash identifier: CFuzgTdDRlgN3D/iCSuDzbZmM8LDuskd2tD95aSI90w= Subject key identifier: 3A:A8:B5:27:C2:A6:9A:38:3B:D3:9C:1A:48:77:92:15:06:1F:E4:68 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 11BA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Oqi1J8Kmmjg705waSHeSFQYf5Gg.roa Signing time: Sun 01 Mar 2026 02:36:25 +0000 ROA not before: Sun 01 Mar 2026 02:36:25 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.103.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4538 (0x11ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:36:25 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=3AA8B527C2A69A383BD39C1A48779215061FE468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0a:3f:ca:17:58:b7:7f:ef:99:99:06:07:cd: 68:b1:44:4e:a2:d1:ec:c4:d6:54:77:a3:75:1d:06: 22:d0:73:10:bf:72:ad:2b:c7:8e:3f:19:c2:4b:9f: b7:57:59:7e:98:f7:9c:72:b8:9c:32:98:7f:7e:c7: 6e:8e:81:41:cb:2b:a4:ad:c0:7e:01:b3:36:6a:a2: 94:0e:99:c0:95:ea:58:55:41:bf:f1:64:aa:65:e5: 46:fe:7b:19:18:ba:aa:d2:3f:95:b5:77:fc:4e:d9: 65:b4:1f:92:4a:c1:26:b7:4d:94:ec:9f:7c:1c:03: 70:d6:bb:21:79:02:6a:0b:ef:b4:f8:49:f7:8b:95: d5:81:ab:c3:c9:3b:78:da:89:86:35:0f:24:a1:da: 1e:10:45:c1:e6:94:dc:be:5e:a4:0c:d4:37:b5:e4: 4a:59:8c:b2:65:0c:0b:14:c8:f8:a7:31:37:96:71: 13:df:d9:76:a4:3c:83:02:0b:c0:af:c2:0b:a3:e5: 98:2a:36:ff:57:42:d4:25:d9:27:97:ca:13:39:a0: 76:78:1e:4f:67:d2:2f:e7:91:2a:5f:aa:1e:34:9f: 47:cd:1d:7e:ad:5a:3d:f5:65:17:3c:98:7f:0e:08: e7:83:72:3d:a3:14:07:cd:63:d2:7a:77:b9:14:27: 4d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A8:B5:27:C2:A6:9A:38:3B:D3:9C:1A:48:77:92:15:06:1F:E4:68 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Oqi1J8Kmmjg705waSHeSFQYf5Gg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.103.16.0/23 Signature Algorithm: sha256WithRSAEncryption d1:6f:eb:51:bf:ad:00:2c:b8:0e:2c:52:99:85:6b:78:61:cd: 63:28:1e:52:a6:08:b6:2d:38:61:6f:e3:5f:59:3f:fa:e3:91: 20:b3:62:2e:6f:23:d5:db:05:be:47:fd:fe:e0:d8:d4:2e:bb: eb:3e:42:bc:c3:77:6c:44:6b:e1:3e:db:4e:a6:fd:21:b0:c8: f0:f7:e6:d3:d6:6f:6b:2e:64:23:8c:44:f0:8f:c2:67:49:29: f5:92:62:e1:b1:8f:54:d6:eb:e9:e2:ff:d9:b2:26:1a:97:c6: 52:b5:09:10:d4:84:e8:71:9e:3f:40:0c:5d:53:49:57:68:e1: 5f:b8:93:fa:3b:f1:4a:be:a3:d6:11:fc:26:e8:81:ba:62:24: ab:79:fc:db:e7:7a:b1:3a:20:a9:38:41:cc:ea:55:8f:75:54: 10:6f:ba:64:c2:50:b1:85:8b:fe:d2:79:da:fa:60:34:19:b1: f6:17:15:42:7c:58:15:54:04:94:24:22:f3:4f:d2:37:b3:da: af:9a:24:04:36:a7:fe:6f:d9:0c:55:45:18:22:f9:d5:19:fe: db:85:8a:ed:61:d4:08:cb:e9:63:f8:05:92:32:16:26:c1:8f: 93:32:85:d9:ac:85:bd:b4:7b:84:92:cb:fe:e5:da:c1:b4:53: b6:08:be:ac -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjM2MjVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNBQThCNTI3QzJBNjlB MzgzQkQzOUMxQTQ4Nzc5MjE1MDYxRkU0NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmCj/KF1i3f++ZmQYHzWixRE6i0ezE1lR3o3UdBiLQcxC/cq0r x44/GcJLn7dXWX6Y95xyuJwymH9+x26OgUHLK6StwH4BszZqopQOmcCV6lhVQb/x ZKpl5Ub+exkYuqrSP5W1d/xO2WW0H5JKwSa3TZTsn3wcA3DWuyF5AmoL77T4SfeL ldWBq8PJO3jaiYY1DySh2h4QRcHmlNy+XqQM1De15EpZjLJlDAsUyPinMTeWcRPf 2XakPIMCC8Cvwguj5ZgqNv9XQtQl2SeXyhM5oHZ4Hk9n0i/nkSpfqh40n0fNHX6t Wj31ZRc8mH8OCOeDcj2jFAfNY9J6d7kUJ003AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOqi1J8Kmmjg705waSHeSFQYf5GgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09xaTFKOEttbWpnNzA1d2FTSGVTRlFZZjVHZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExZxAwDQYJKoZIhvcNAQELBQADggEBANFv61G/rQAsuA4sUpmFa3hhzWMo HlKmCLYtOGFv419ZP/rjkSCzYi5vI9XbBb5H/f7g2NQuu+s+QrzDd2xEa+E+206m /SGwyPD35tPWb2suZCOMRPCPwmdJKfWSYuGxj1TW6+ni/9myJhqXxlK1CRDUhOhx nj9ADF1TSVdo4V+4k/o78Uq+o9YR/CbogbpiJKt5/NvnerE6IKk4QczqVY91VBBv umTCULGFi/7Sedr6YDQZsfYXFUJ8WBVUBJQkIvNP0jez2q+aJAQ2p/5v2QxVRRgi +dUZ/tuFiu1h1AjL6WP4BZIyFibBj5Myhdmshb20e4SSy/7l2sG0U7YIvqw= -----END CERTIFICATE-----Generated at Mon Mar 2 03:54:08 2026 by rpki-client