$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/T8RrOeUtOdgIjVxUKGYc_hNlTEE.roa File: T8RrOeUtOdgIjVxUKGYc_hNlTEE.roa (raw, json) Hash identifier: YycONrfyESi45Kycvci+h/mw0JhDwL+ZhzxZ/s0xg+g= Subject key identifier: 4F:C4:6B:39:E5:2D:39:D8:08:8D:5C:54:28:66:1C:FE:13:65:4C:41 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1323 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/T8RrOeUtOdgIjVxUKGYc_hNlTEE.roa Signing time: Sun 01 Mar 2026 03:36:17 +0000 ROA not before: Sun 01 Mar 2026 03:36:17 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.75.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4899 (0x1323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:36:17 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=4FC46B39E52D39D8088D5C5428661CFE13654C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8a:fb:ba:57:63:76:1a:ac:52:d4:5c:80:8b: 36:5b:0e:49:f6:0b:ce:16:51:f1:f5:f3:38:d5:fb: db:fa:cc:74:3a:fc:f3:c0:e6:87:dc:eb:c6:ca:b6: 27:23:86:58:78:49:94:15:3f:ce:6a:22:81:3f:c6: 1c:f9:37:0d:67:a2:43:a2:72:a2:60:75:df:16:88: e9:3a:51:ef:3a:fd:3e:84:25:01:e2:52:54:4f:d8: 20:7c:09:14:c8:95:e6:79:30:3d:6c:c9:ae:4a:ef: cb:1f:dc:27:fa:c9:dd:dd:f0:dc:3c:44:0e:fc:df: 36:2a:0f:6c:cc:07:1d:63:87:db:d9:4f:44:2c:06: eb:57:fb:0f:ff:84:9e:6f:8e:8d:97:58:65:ad:57: fb:cb:55:7e:0a:fe:f7:ad:c7:8d:30:a5:24:4e:6f: 38:d8:b1:7b:9f:3d:51:97:9e:20:22:ca:14:60:b2: 12:58:2d:8a:db:9f:0d:4f:d6:2a:8d:c9:f6:9d:38: ef:5b:e6:7d:8a:9c:fb:e6:79:2d:b3:a7:46:a1:9c: 41:76:19:cc:2d:5a:8b:8e:e0:3c:2e:82:aa:64:a4: ea:d6:52:05:e3:51:ef:00:49:67:37:bb:03:d9:73: 36:5b:de:79:aa:f0:b9:fa:2f:3e:cb:c0:b1:f0:57: 22:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C4:6B:39:E5:2D:39:D8:08:8D:5C:54:28:66:1C:FE:13:65:4C:41 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/T8RrOeUtOdgIjVxUKGYc_hNlTEE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.240.0/22 Signature Algorithm: sha256WithRSAEncryption bb:a4:0d:26:a0:74:11:18:c1:c0:d7:4a:37:1b:87:e3:29:1c: b7:70:12:af:6f:df:48:68:88:16:c4:38:54:97:d0:2d:ee:8c: 5b:e8:06:19:89:83:47:4e:01:2e:13:4b:6a:6f:07:29:7f:82: b5:8f:fc:c6:9a:51:4d:7d:e5:60:92:37:96:80:b4:38:da:28: ec:f2:ae:0d:3d:cc:98:e2:dc:57:38:3f:61:cd:2e:df:1c:c0: a4:6d:1b:26:31:d0:09:77:d1:48:2d:be:83:4c:36:c6:2a:e1: 39:65:d7:d0:62:45:2a:5e:90:a5:79:25:68:9e:47:8c:fe:df: 81:c4:d5:9d:e2:22:6f:39:a0:77:c3:71:1b:e3:2b:fa:8a:bb: 06:f3:27:b1:63:b2:b1:a7:d7:57:2f:cc:c1:1f:0f:10:09:dd: 00:a9:74:50:a3:bc:5c:82:75:42:f9:f8:aa:ed:0c:1f:5f:66: 07:d4:db:2b:ac:8e:4a:25:26:ae:e6:9a:36:1d:97:71:52:6f: 4f:fb:c1:d3:73:bb:b8:56:1f:58:a2:ea:24:b5:95:f2:7c:19: 45:b5:22:93:03:01:a3:db:45:42:74:02:a6:e3:78:71:b2:01: a8:e3:1e:47:b3:a2:bd:c4:6b:c3:98:4d:8c:fe:14:c0:14:71: 22:ee:bc:22 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEyMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzM2MTdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRGQzQ2QjM5RTUyRDM5 RDgwODhENUM1NDI4NjYxQ0ZFMTM2NTRDNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUivu6V2N2GqxS1FyAizZbDkn2C84WUfH18zjV+9v6zHQ6/PPA 5ofc68bKticjhlh4SZQVP85qIoE/xhz5Nw1nokOicqJgdd8WiOk6Ue86/T6EJQHi UlRP2CB8CRTIleZ5MD1sya5K78sf3Cf6yd3d8Nw8RA783zYqD2zMBx1jh9vZT0Qs ButX+w//hJ5vjo2XWGWtV/vLVX4K/vetx40wpSRObzjYsXufPVGXniAiyhRgshJY LYrbnw1P1iqNyfadOO9b5n2KnPvmeS2zp0ahnEF2GcwtWouO4DwugqpkpOrWUgXj Ue8ASWc3uwPZczZb3nmq8Ln6Lz7LwLHwVyItAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUT8RrOeUtOdgIjVxUKGYc/hNlTEEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1Q4UnJPZVV0T2RnSWpWeFVLR1ljX2hObFRFRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBS/AwDQYJKoZIhvcNAQELBQADggEBALukDSagdBEYwcDXSjcbh+MpHLdw Eq9v30hoiBbEOFSX0C3ujFvoBhmJg0dOAS4TS2pvByl/grWP/MaaUU195WCSN5aA tDjaKOzyrg09zJji3Fc4P2HNLt8cwKRtGyYx0Al30UgtvoNMNsYq4Tll19BiRSpe kKV5JWieR4z+34HE1Z3iIm85oHfDcRvjK/qKuwbzJ7FjsrGn11cvzMEfDxAJ3QCp dFCjvFyCdUL5+KrtDB9fZgfU2yusjkolJq7mmjYdl3FSb0/7wdNzu7hWH1ii6iS1 lfJ8GUW1IpMDAaPbRUJ0AqbjeHGyAajjHkezor3Ea8OYTYz+FMAUcSLuvCI= -----END CERTIFICATE-----Generated at Mon Mar 2 10:06:09 2026 by rpki-client