$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QYel2mPU8bEKR9CtrSBdPsDAQQY.roa File: QYel2mPU8bEKR9CtrSBdPsDAQQY.roa (raw, json) Hash identifier: BJXV/90Sh2ChLCw4JTjQWdehuqtKQDZ5YCcjljYQLCQ= Subject key identifier: 41:87:A5:DA:63:D4:F1:B1:0A:47:D0:AD:AD:20:5D:3E:C0:C0:41:06 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1114 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QYel2mPU8bEKR9CtrSBdPsDAQQY.roa Signing time: Sun 01 Mar 2026 02:07:26 +0000 ROA not before: Sun 01 Mar 2026 02:07:26 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 110.162.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4372 (0x1114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:07:26 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=4187A5DA63D4F1B10A47D0ADAD205D3EC0C04106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:df:cb:4e:99:a0:fe:13:65:30:3e:6d:c4: 86:0d:e5:a2:7b:3c:ba:45:7f:5b:d0:75:17:c9:ef: d2:66:4f:73:e9:90:7d:ca:1c:22:1d:d1:71:e3:44: 4b:14:0f:33:10:67:ea:c6:4d:2e:0f:2a:a0:59:67: 1d:a0:a1:02:64:7b:fe:4e:69:55:f9:61:a4:9d:42: 03:09:8d:5e:fc:c2:9f:f0:1f:6f:24:70:e1:0c:d4: 12:45:b0:c1:c1:ae:cd:0b:b3:7b:8f:51:4e:1f:78: 36:05:77:b6:f0:dc:84:6e:fa:51:2d:c3:c0:fa:cc: 8b:53:77:6c:05:72:88:34:9d:1e:64:f4:30:4a:10: aa:b3:5c:a4:0e:4d:57:90:06:17:2e:78:b7:fe:f3: f8:a9:fc:49:a8:60:d9:49:26:78:76:01:19:e5:05: 50:0e:1e:8f:99:04:77:e1:64:90:4e:57:8b:b3:f1: e7:e3:01:e2:51:07:e0:50:47:55:db:ca:2f:4a:48: c8:07:7e:e2:19:06:07:a3:54:b4:2f:2d:bd:25:8b: b6:b9:1c:1a:70:26:d0:f0:d0:ff:c1:8a:5d:d3:e6: 0c:8d:a7:43:45:cd:65:95:2b:2f:16:f1:5e:c6:c9: 48:95:90:a1:eb:d0:23:27:93:1f:e7:4f:e4:ba:66: 05:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:87:A5:DA:63:D4:F1:B1:0A:47:D0:AD:AD:20:5D:3E:C0:C0:41:06 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QYel2mPU8bEKR9CtrSBdPsDAQQY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.162.96.0/19 Signature Algorithm: sha256WithRSAEncryption 6e:fa:b9:45:da:6f:c9:51:8a:01:77:85:6e:8a:e9:72:bd:00: 6a:c8:d6:cf:c0:1c:63:80:e6:e0:1d:7d:35:f1:a7:aa:05:44: 44:99:ed:ad:37:4a:ae:18:f8:28:d6:cf:e4:03:e9:fa:8b:0f: b3:da:26:cc:5b:e2:f2:be:5b:0d:5e:13:9b:57:f4:68:3a:f2: fa:4b:a3:c3:25:5d:4b:74:c8:d5:a9:f3:51:17:95:9e:24:6b: 87:cb:35:f6:87:fd:5b:fc:c2:df:60:2e:f0:d6:7c:4f:3e:a9: 67:b3:e0:65:0b:93:e5:2e:ba:47:b3:40:8f:a7:11:fa:7b:d0: 9e:bf:42:92:a8:cd:32:37:de:3e:58:25:0a:5f:75:84:f0:db: a2:e5:6c:24:19:1f:ce:f9:37:86:9f:55:69:af:27:f5:7b:fe: a5:cd:e8:2d:7d:93:4f:01:d6:ca:9c:c9:56:63:31:08:36:1b: d5:5d:01:b3:e7:46:c0:c8:cb:15:36:1d:44:fb:30:73:61:93: 1e:3c:86:d0:fd:2b:2a:71:a1:f2:a1:ac:48:7b:8d:33:7e:a9: ab:1c:49:50:1b:e9:ff:22:c9:c8:56:73:84:4c:35:74:6a:37: c9:1d:32:22:53:a7:ce:37:7c:3f:f1:0b:aa:f7:a3:75:66:70: 78:08:87:36 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICERQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjA3MjZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQxODdBNURBNjNENEYx QjEwQTQ3RDBBREFEMjA1RDNFQzBDMDQxMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtht/LTpmg/hNlMD5txIYN5aJ7PLpFf1vQdRfJ79JmT3PpkH3K HCId0XHjREsUDzMQZ+rGTS4PKqBZZx2goQJke/5OaVX5YaSdQgMJjV78wp/wH28k cOEM1BJFsMHBrs0Ls3uPUU4feDYFd7bw3IRu+lEtw8D6zItTd2wFcog0nR5k9DBK EKqzXKQOTVeQBhcueLf+8/ip/EmoYNlJJnh2ARnlBVAOHo+ZBHfhZJBOV4uz8efj AeJRB+BQR1Xbyi9KSMgHfuIZBgejVLQvLb0li7a5HBpwJtDw0P/Bil3T5gyNp0NF zWWVKy8W8V7GyUiVkKHr0CMnkx/nT+S6ZgVlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQYel2mPU8bEKR9CtrSBdPsDAQQYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1FZZWwybVBVOGJFS1I5Q3RyU0JkUHNEQVFRWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVuomAwDQYJKoZIhvcNAQELBQADggEBAG76uUXab8lRigF3hW6K6XK9AGrI 1s/AHGOA5uAdfTXxp6oFRESZ7a03Sq4Y+CjWz+QD6fqLD7PaJsxb4vK+Ww1eE5tX 9Gg68vpLo8MlXUt0yNWp81EXlZ4ka4fLNfaH/Vv8wt9gLvDWfE8+qWez4GULk+Uu ukezQI+nEfp70J6/QpKozTI33j5YJQpfdYTw26LlbCQZH875N4afVWmvJ/V7/qXN 6C19k08B1sqcyVZjMQg2G9VdAbPnRsDIyxU2HUT7MHNhkx48htD9KypxofKhrEh7 jTN+qascSVAb6f8iychWc4RMNXRqN8kdMiJTp843fD/xC6r3o3VmcHgIhzY= -----END CERTIFICATE-----Generated at Mon Mar 2 10:04:38 2026 by rpki-client