$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OrtKUMFsb_biVtFAQ3AMu_jp5to.roa File: OrtKUMFsb_biVtFAQ3AMu_jp5to.roa (raw, json) Hash identifier: eVqfwAIDo0kIzWHwfBmyGEe/o77cvEb6KdXId9114Ao= Subject key identifier: 3A:BB:4A:50:C1:6C:6F:F6:E2:56:D1:40:43:70:0C:BB:F8:E9:E6:DA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1147 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OrtKUMFsb_biVtFAQ3AMu_jp5to.roa Signing time: Sun 01 Mar 2026 02:12:51 +0000 ROA not before: Sun 01 Mar 2026 02:12:51 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4423 (0x1147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:12:51 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=3ABB4A50C16C6FF6E256D14043700CBBF8E9E6DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:15:7d:b6:e4:f4:3d:14:e5:28:0e:d9:b7: f6:a2:d3:4c:20:2f:a1:e0:83:82:30:8e:67:24:02: b1:d2:e3:df:73:8d:d4:d1:98:1e:3a:e9:e7:6d:f4: 19:ab:fb:87:79:d6:7a:ab:de:25:10:a3:21:d3:a5: b9:96:5a:d8:08:ae:f2:1f:15:0f:dd:41:09:fa:54: 81:33:0b:7d:f6:6d:c9:59:27:0c:9d:d5:f7:86:0e: f3:a3:80:c8:78:f2:43:46:49:62:93:46:20:06:36: c1:a4:06:f3:8f:6d:c3:13:f3:30:0e:d9:17:e5:c6: 9a:a9:0e:88:05:96:ef:4d:c1:47:54:71:e6:cd:52: 09:30:c8:a5:cc:76:58:cb:83:d7:d9:fc:69:f6:63: dd:9f:ad:91:00:e5:4a:0f:ef:de:aa:9c:db:ea:a9: 7d:cd:82:91:4f:27:b3:eb:72:2f:20:9c:21:5d:d7: 94:e5:50:91:a1:cd:36:40:42:da:71:84:9d:43:aa: b7:bf:08:8c:31:9f:6d:85:10:22:db:0d:51:d3:fc: c2:5a:74:65:84:46:67:20:43:31:b3:6f:a6:0e:07: 66:e6:96:dd:e7:3b:2d:fd:fd:28:96:e4:4b:bf:90: a8:d9:01:66:4a:46:da:37:ca:fe:8f:6b:f6:e7:41: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BB:4A:50:C1:6C:6F:F6:E2:56:D1:40:43:70:0C:BB:F8:E9:E6:DA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OrtKUMFsb_biVtFAQ3AMu_jp5to.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.154.0/23 Signature Algorithm: sha256WithRSAEncryption a5:d7:14:d3:46:20:e9:ed:b0:95:8e:c5:08:27:b1:d4:4c:66: 33:a1:c3:41:6a:12:df:f2:ec:25:cf:bd:cf:2e:d1:1d:07:e8: 2c:4a:27:b8:b3:85:ad:2c:db:c2:8b:86:ac:33:86:b7:6c:f1: 4f:4d:1a:40:2b:ee:5c:ba:45:82:48:d6:99:67:16:aa:63:ea: f7:79:7d:a9:a6:37:f8:26:e2:97:ce:66:41:bd:25:17:91:7f: 10:2f:28:6a:36:07:5d:ae:21:25:c5:5b:a1:49:69:b3:4f:10: e8:38:27:c2:09:fa:f8:86:cf:23:c6:27:bd:42:b0:cb:2c:a4: bc:e2:63:13:00:c9:72:3a:b1:66:79:89:f6:d3:9f:ca:ff:c0: 6b:c3:33:dd:4b:ce:8e:a0:f6:d9:bf:3b:92:4c:71:55:cb:42: da:85:0f:bf:4d:0e:37:f6:d4:54:15:59:02:e4:f8:13:ff:b0: 83:11:8a:1f:43:7a:4e:7c:08:93:fd:5a:c6:47:ed:28:f7:05: 99:00:94:90:4a:1e:69:82:35:08:26:b5:81:6f:57:00:76:08: 47:91:ef:8d:b5:2a:ce:5c:86:92:0e:37:ff:9d:37:f2:95:c9: 31:36:64:0b:d6:65:04:af:54:5d:cb:1b:9f:a7:2e:b6:b4:2c: 55:96:55:72 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjEyNTFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNBQkI0QTUwQzE2QzZG RjZFMjU2RDE0MDQzNzAwQ0JCRjhFOUU2REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3xRV9tuT0PRTlKA7Zt/ai00wgL6Hgg4IwjmckArHS499zjdTR mB466edt9Bmr+4d51nqr3iUQoyHTpbmWWtgIrvIfFQ/dQQn6VIEzC332bclZJwyd 1feGDvOjgMh48kNGSWKTRiAGNsGkBvOPbcMT8zAO2RflxpqpDogFlu9NwUdUcebN UgkwyKXMdljLg9fZ/Gn2Y92frZEA5UoP796qnNvqqX3NgpFPJ7Prci8gnCFd15Tl UJGhzTZAQtpxhJ1Dqre/CIwxn22FECLbDVHT/MJadGWERmcgQzGzb6YOB2bmlt3n Oy39/SiW5Eu/kKjZAWZKRto3yv6Pa/bnQbZZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOrtKUMFsb/biVtFAQ3AMu/jp5towHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09ydEtVTUZzYl9iaVZ0RkFRM0FNdV9qcDV0by5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYpowDQYJKoZIhvcNAQELBQADggEBAKXXFNNGIOntsJWOxQgnsdRMZjOh w0FqEt/y7CXPvc8u0R0H6CxKJ7izha0s28KLhqwzhrds8U9NGkAr7ly6RYJI1pln Fqpj6vd5fammN/gm4pfOZkG9JReRfxAvKGo2B12uISXFW6FJabNPEOg4J8IJ+viG zyPGJ71CsMsspLziYxMAyXI6sWZ5ifbTn8r/wGvDM91Lzo6g9tm/O5JMcVXLQtqF D79NDjf21FQVWQLk+BP/sIMRih9Dek58CJP9WsZH7Sj3BZkAlJBKHmmCNQgmtYFv VwB2CEeR7421Ks5chpION/+dN/KVyTE2ZAvWZQSvVF3LG5+nLra0LFWWVXI= -----END CERTIFICATE-----Generated at Mon Mar 2 13:09:21 2026 by rpki-client