$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YjT-sjC7VbIPLfLfHA08cIOCsHE.roa File: YjT-sjC7VbIPLfLfHA08cIOCsHE.roa (raw, json) Hash identifier: IK5XLVoBJIam6B7pha6RrJaujH7RitX/WmZ1zVJapnw= Subject key identifier: 62:34:FE:B2:30:BB:55:B2:0F:2D:F2:DF:1C:0D:3C:70:83:82:B0:71 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1152 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YjT-sjC7VbIPLfLfHA08cIOCsHE.roa Signing time: Sun 01 Mar 2026 02:16:53 +0000 ROA not before: Sun 01 Mar 2026 02:16:53 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 211.14.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4434 (0x1152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:16:53 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=6234FEB230BB55B20F2DF2DF1C0D3C708382B071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:5b:88:b7:45:6f:29:51:65:b1:22:e8:28: 3b:84:4a:6e:6e:8d:79:a1:34:9c:ee:08:42:e7:2f: 2c:d0:bf:8f:2b:c3:1e:61:12:0a:5a:ab:b7:82:e0: 82:4a:22:33:4b:d1:a3:15:df:04:e4:5a:9f:e4:d5: 05:b2:a5:1e:10:21:ac:14:cc:82:03:a7:09:68:05: 06:7d:df:cb:42:18:71:53:c3:8b:ac:c9:a0:70:0b: 41:7d:ac:3e:8d:64:b1:7e:1f:38:a9:1c:b6:d4:7e: 4e:74:03:d4:bb:02:ad:cb:84:78:8b:3a:44:be:8b: 6b:a4:17:fb:6f:f4:41:09:f0:0a:7b:d5:1c:53:30: e2:e5:6f:c3:52:33:f2:2d:4f:62:c5:82:14:56:c5: 94:fa:96:c6:8b:a4:34:c8:23:bb:99:0c:c2:3a:0a: 7b:94:c2:74:d0:07:c3:51:21:53:03:d1:19:9f:75: 3c:4e:e2:f4:bd:0f:b1:09:42:9f:fa:48:78:9e:8d: fa:8a:60:9e:4d:49:b3:f7:6e:f8:f7:36:19:ef:35: b3:60:18:23:85:8c:08:a3:8e:97:0f:72:bc:1a:33: 47:9a:ea:96:31:13:7e:13:3e:49:4b:36:a7:e8:ee: 7f:0d:b6:dd:98:38:4c:d9:92:14:99:55:74:9c:74: c4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:34:FE:B2:30:BB:55:B2:0F:2D:F2:DF:1C:0D:3C:70:83:82:B0:71 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YjT-sjC7VbIPLfLfHA08cIOCsHE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.96.0/21 Signature Algorithm: sha256WithRSAEncryption 35:5d:6b:dd:26:f6:93:a3:6b:de:33:cb:44:66:96:b4:e6:2e: 05:c2:af:21:57:27:b8:9f:e7:59:86:5f:19:21:76:91:33:e4: 2d:13:1c:7d:0d:26:b1:d7:ec:d7:c3:9f:eb:1b:44:4b:08:ae: 23:cd:f2:29:cd:90:ca:5c:c5:31:bf:e8:b3:c0:31:b4:90:d1: 51:54:c4:b1:bd:92:4b:f4:67:25:19:72:24:6f:85:8f:bc:13: 70:38:3a:57:15:f9:96:90:57:7b:09:64:3a:f0:1d:7a:3d:6d: 0c:3f:4b:2a:75:b6:81:aa:21:e8:f2:70:06:55:58:9b:05:ba: d5:77:63:45:40:61:8b:ed:be:db:2e:84:65:b3:f5:e3:0a:ae: e8:73:50:50:6e:f5:d6:84:57:e6:1c:f5:9e:ab:c0:29:ae:a1: 17:24:1d:e8:b0:4f:92:a4:9e:8f:c7:0b:66:70:a9:d2:94:23: 30:ee:55:0f:77:23:bb:4c:2a:c7:39:b3:35:bc:9b:68:ad:60: 43:a2:c0:25:90:f7:14:f1:02:be:8c:d0:37:69:78:6b:9c:a7: 94:aa:c9:aa:d4:14:a9:f5:37:69:49:15:60:ef:4a:da:a5:b4: 2a:5c:8a:f8:1d:8a:5c:98:73:5b:d1:67:80:92:ee:2d:7c:78: a6:39:0a:9b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjE2NTNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYyMzRGRUIyMzBCQjU1 QjIwRjJERjJERjFDMEQzQzcwODM4MkIwNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9ZFuIt0VvKVFlsSLoKDuESm5ujXmhNJzuCELnLyzQv48rwx5h Egpaq7eC4IJKIjNL0aMV3wTkWp/k1QWypR4QIawUzIIDpwloBQZ938tCGHFTw4us yaBwC0F9rD6NZLF+HzipHLbUfk50A9S7Aq3LhHiLOkS+i2ukF/tv9EEJ8Ap71RxT MOLlb8NSM/ItT2LFghRWxZT6lsaLpDTII7uZDMI6CnuUwnTQB8NRIVMD0RmfdTxO 4vS9D7EJQp/6SHiejfqKYJ5NSbP3bvj3NhnvNbNgGCOFjAijjpcPcrwaM0ea6pYx E34TPklLNqfo7n8Ntt2YOEzZkhSZVXScdMQTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYjT+sjC7VbIPLfLfHA08cIOCsHEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1lqVC1zakM3VmJJUExmTGZIQTA4Y0lPQ3NIRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPTDmAwDQYJKoZIhvcNAQELBQADggEBADVda90m9pOja94zy0RmlrTmLgXC ryFXJ7if51mGXxkhdpEz5C0THH0NJrHX7NfDn+sbREsIriPN8inNkMpcxTG/6LPA MbSQ0VFUxLG9kkv0ZyUZciRvhY+8E3A4OlcV+ZaQV3sJZDrwHXo9bQw/Syp1toGq IejycAZVWJsFutV3Y0VAYYvtvtsuhGWz9eMKruhzUFBu9daEV+Yc9Z6rwCmuoRck HeiwT5Kkno/HC2ZwqdKUIzDuVQ93I7tMKsc5szW8m2itYEOiwCWQ9xTxAr6M0Ddp eGucp5SqyarUFKn1N2lJFWDvStqltCpcivgdilyYc1vRZ4CS7i18eKY5Cps= -----END CERTIFICATE-----Generated at Mon Mar 2 09:57:33 2026 by rpki-client