$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TSLtp1W7jEt2yoPMkg9FwE9dJcc.roa File: TSLtp1W7jEt2yoPMkg9FwE9dJcc.roa (raw, json) Hash identifier: UmpNnCMh7hb9xuN66KPby7Wx0RMlDbnpldsB31R6stQ= Subject key identifier: 4D:22:ED:A7:55:BB:8C:4B:76:CA:83:CC:92:0F:45:C0:4F:5D:25:C7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 133B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TSLtp1W7jEt2yoPMkg9FwE9dJcc.roa Signing time: Sun 01 Mar 2026 03:36:30 +0000 ROA not before: Sun 01 Mar 2026 03:36:30 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4923 (0x133b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:36:30 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=4D22EDA755BB8C4B76CA83CC920F45C04F5D25C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:9c:11:34:72:a2:ab:29:3b:a9:7e:18:97: 08:e7:9d:24:82:da:66:ca:be:49:5d:ce:b3:f3:c8: aa:ba:85:82:c5:98:7e:f1:37:c6:fa:e5:67:96:57: f5:b3:ba:4b:a4:a2:22:7e:f8:7b:8c:05:9c:97:32: 42:e9:c8:31:9b:f4:3c:0f:04:cf:bf:f7:70:db:1d: 87:97:dc:70:00:6a:36:b5:87:e3:76:85:a8:25:29: b9:14:d0:8f:6d:1a:66:99:33:3e:ea:84:63:ba:70: a5:f9:b7:28:3f:fb:37:2a:1f:46:f1:f8:7e:2c:ac: bd:8a:47:18:44:42:39:e1:19:0f:e7:cf:47:78:75: 21:37:ab:91:07:60:8e:e6:01:cf:96:2b:10:ee:56: 71:e2:4d:30:99:24:36:a6:d4:dc:4e:19:dd:e2:c5: bc:53:22:3f:86:8b:40:db:e4:dc:d7:f4:5c:74:47: 14:3c:70:c0:b9:51:aa:84:11:ed:a2:b1:55:4d:93: 77:dd:d3:2d:68:15:3a:ab:29:2f:a2:4e:38:74:14: 7e:ea:f6:c8:74:6e:a2:f5:8f:3d:bd:02:d0:78:36: 3a:fb:21:3e:09:5d:73:a1:5d:7c:88:39:0f:c6:26: 03:ea:8e:09:20:8a:54:c7:b8:43:fd:c2:55:e7:61: d6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:22:ED:A7:55:BB:8C:4B:76:CA:83:CC:92:0F:45:C0:4F:5D:25:C7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TSLtp1W7jEt2yoPMkg9FwE9dJcc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.86.0/23 Signature Algorithm: sha256WithRSAEncryption e0:74:0c:59:ac:54:89:d1:7d:31:1f:51:e1:82:41:99:bf:a8: 74:16:c7:42:f0:f0:5f:1b:0e:cc:6a:a8:fe:9d:5a:40:0b:74: f1:cb:31:30:02:08:d1:ce:98:8b:e7:3b:7f:f1:c8:17:4e:d8: 43:48:18:94:61:ce:d8:ba:ba:7a:bc:c3:5f:9e:b0:53:22:a3: 38:db:f4:8f:46:fe:54:de:68:5b:e6:36:b2:7d:4a:42:ce:5b: b0:a7:62:05:de:25:45:f2:70:60:ee:eb:33:e6:93:0f:e8:8c: 35:2f:bb:df:4c:5b:a5:54:1e:8e:3b:54:b8:07:cf:c1:cf:dd: 1c:7a:4c:89:9e:4e:8b:9b:8a:50:ad:db:22:06:c9:e8:31:7f: 54:ec:4a:15:71:5b:ae:72:ae:8b:32:9a:0b:68:dd:ae:dc:b9: 03:c1:cc:cd:11:5d:c4:55:06:8f:1f:06:fb:3e:83:7e:0e:a9: 05:d0:1b:99:9c:da:6c:ae:78:b1:90:a6:a3:61:05:94:e7:b9: 5b:f5:71:26:4c:77:42:9c:7b:ee:03:d4:6d:60:69:65:f8:49: 0b:45:fe:88:fc:50:65:0f:fd:90:a4:e3:2d:cf:86:90:11:12: 12:b1:1a:d5:63:d4:c4:0a:3f:8e:7c:81:3c:08:e2:80:2a:21: f8:71:15:a0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEzswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzM2MzBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDREMjJFREE3NTVCQjhD NEI3NkNBODNDQzkyMEY0NUMwNEY1RDI1QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMJJwRNHKiqyk7qX4YlwjnnSSC2mbKvkldzrPzyKq6hYLFmH7x N8b65WeWV/WzukukoiJ++HuMBZyXMkLpyDGb9DwPBM+/93DbHYeX3HAAaja1h+N2 haglKbkU0I9tGmaZMz7qhGO6cKX5tyg/+zcqH0bx+H4srL2KRxhEQjnhGQ/nz0d4 dSE3q5EHYI7mAc+WKxDuVnHiTTCZJDam1NxOGd3ixbxTIj+Gi0Db5NzX9Fx0RxQ8 cMC5UaqEEe2isVVNk3fd0y1oFTqrKS+iTjh0FH7q9sh0bqL1jz29AtB4Njr7IT4J XXOhXXyIOQ/GJgPqjgkgilTHuEP9wlXnYdYJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTSLtp1W7jEt2yoPMkg9FwE9dJccwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RTTHRwMVc3akV0MnlvUE1rZzlGd0U5ZEpjYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYlYwDQYJKoZIhvcNAQELBQADggEBAOB0DFmsVInRfTEfUeGCQZm/qHQW x0Lw8F8bDsxqqP6dWkALdPHLMTACCNHOmIvnO3/xyBdO2ENIGJRhzti6unq8w1+e sFMiozjb9I9G/lTeaFvmNrJ9SkLOW7CnYgXeJUXycGDu6zPmkw/ojDUvu99MW6VU Ho47VLgHz8HP3Rx6TImeToubilCt2yIGyegxf1TsShVxW65yrosymgto3a7cuQPB zM0RXcRVBo8fBvs+g34OqQXQG5mc2myueLGQpqNhBZTnuVv1cSZMd0Kce+4D1G1g aWX4SQtF/oj8UGUP/ZCk4y3PhpAREhKxGtVj1MQKP458gTwI4oAqIfhxFaA= -----END CERTIFICATE-----Generated at Mon Mar 2 13:10:48 2026 by rpki-client