$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YbAiplm2bnvcG55cA0m7QMm6p8E.roa File: YbAiplm2bnvcG55cA0m7QMm6p8E.roa (raw, json) Hash identifier: pw8gPq0AnVoip1l6uxwVsxkNAMLK8gG+7bPwVA6hHO8= Subject key identifier: 61:B0:22:A6:59:B6:6E:7B:DC:1B:9E:5C:03:49:BB:40:C9:BA:A7:C1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12EA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YbAiplm2bnvcG55cA0m7QMm6p8E.roa Signing time: Sun 01 Mar 2026 03:20:45 +0000 ROA not before: Sun 01 Mar 2026 03:20:45 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4842 (0x12ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:20:45 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=61B022A659B66E7BDC1B9E5C0349BB40C9BAA7C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:41:2e:3f:a8:1d:d2:63:82:93:af:79:05: ec:b5:83:02:4b:43:38:9a:11:e2:b3:9d:2d:83:cc: a7:36:36:d8:65:91:43:8f:b4:26:14:f6:05:58:70: b8:5c:2e:2b:f0:db:42:0c:df:30:03:a0:09:f9:f3: 29:bb:4d:d8:4a:30:c0:78:ee:35:30:62:8b:ef:94: 31:69:6e:db:bf:21:3f:e6:82:6a:a6:27:0f:d6:d2: a5:f7:38:25:ce:6a:b7:84:56:c3:ad:54:ea:fa:a2: ae:0c:8d:5a:d5:31:56:88:4a:42:9c:a8:49:a6:8c: fa:12:35:90:7d:d1:47:28:f0:0d:01:78:97:10:5a: 85:da:38:22:f0:43:3f:a2:db:71:06:72:40:a7:5f: 9a:8c:49:55:65:72:09:89:47:58:02:4d:d0:87:4d: bc:1a:8a:d7:e1:d2:7c:3a:a3:eb:d7:be:f3:14:bb: cb:ed:2d:1a:92:4f:4b:2d:e2:82:33:cc:a8:ca:42: 6c:1c:4b:e4:8b:fe:db:dc:20:1f:ed:33:75:b3:cf: ea:51:70:4c:e4:b9:58:ca:c3:c0:21:44:d9:9e:34: 79:43:db:85:b4:2e:70:e3:e9:e5:c6:3e:7c:74:2d: e9:11:a4:29:ae:65:e6:d1:1b:7b:0a:30:a2:5a:24: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B0:22:A6:59:B6:6E:7B:DC:1B:9E:5C:03:49:BB:40:C9:BA:A7:C1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YbAiplm2bnvcG55cA0m7QMm6p8E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.208.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:c3:5b:f4:11:af:e1:0c:91:5b:97:72:e2:5f:a5:dd:84:f2: da:ef:e2:4b:0f:10:b7:b6:12:8b:4b:86:ab:ad:aa:1f:5d:58: 06:8e:ec:52:d5:11:55:95:6b:23:40:93:80:6d:a9:0d:1f:93: 82:14:24:c8:29:cf:7b:ab:de:fc:0e:3b:45:14:a7:f7:0e:3d: 82:44:f5:d7:80:a4:17:0c:87:fc:7e:cc:81:27:71:b5:1b:d3: bb:e1:c7:1b:92:0f:2e:40:16:53:f1:53:f0:07:04:4e:9f:0b: 3d:bb:99:f0:10:5c:5b:83:4d:66:63:47:09:a6:04:bc:4d:d0: 08:fa:72:2e:28:0a:50:fa:c9:4c:b6:1e:fa:31:f7:c5:4c:34: a4:f6:8b:02:b2:91:a3:2e:3a:82:e8:05:d3:26:4b:d8:de:52: 52:0c:6e:01:c0:b1:af:14:f8:86:43:e2:75:c2:88:3b:be:d9: 43:7e:bb:9d:5d:e9:18:b4:25:2e:ca:18:67:cf:63:4e:17:dd: fd:0c:56:42:48:db:e3:36:bb:45:a6:25:64:48:64:98:06:d9: a1:21:92:1c:15:3c:5d:5d:b0:1a:f2:8b:75:76:6d:ce:86:93: fb:48:ba:cb:ae:80:f0:5d:84:4d:2c:ad:90:00:4a:8b:a1:56: d7:0a:17:d8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEuowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzIwNDVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYxQjAyMkE2NTlCNjZF N0JEQzFCOUU1QzAzNDlCQjQwQzlCQUE3QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHTEEuP6gd0mOCk695Bey1gwJLQziaEeKznS2DzKc2NthlkUOP tCYU9gVYcLhcLivw20IM3zADoAn58ym7TdhKMMB47jUwYovvlDFpbtu/IT/mgmqm Jw/W0qX3OCXOareEVsOtVOr6oq4MjVrVMVaISkKcqEmmjPoSNZB90Uco8A0BeJcQ WoXaOCLwQz+i23EGckCnX5qMSVVlcgmJR1gCTdCHTbwaitfh0nw6o+vXvvMUu8vt LRqST0st4oIzzKjKQmwcS+SL/tvcIB/tM3Wzz+pRcEzkuVjKw8AhRNmeNHlD24W0 LnDj6eXGPnx0LekRpCmuZebRG3sKMKJaJNm3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYbAiplm2bnvcG55cA0m7QMm6p8EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1liQWlwbG0yYm52Y0c1NWNBMG03UU1tNnA4RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExatAwDQYJKoZIhvcNAQELBQADggEBAH3DW/QRr+EMkVuXcuJfpd2E8trv 4ksPELe2EotLhqutqh9dWAaO7FLVEVWVayNAk4BtqQ0fk4IUJMgpz3ur3vwOO0UU p/cOPYJE9deApBcMh/x+zIEncbUb07vhxxuSDy5AFlPxU/AHBE6fCz27mfAQXFuD TWZjRwmmBLxN0Aj6ci4oClD6yUy2Hvox98VMNKT2iwKykaMuOoLoBdMmS9jeUlIM bgHAsa8U+IZD4nXCiDu+2UN+u51d6Ri0JS7KGGfPY04X3f0MVkJI2+M2u0WmJWRI ZJgG2aEhkhwVPF1dsBryi3V2bc6Gk/tIusuugPBdhE0srZAASouhVtcKF9g= -----END CERTIFICATE-----Generated at Mon Mar 2 10:07:09 2026 by rpki-client