$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/a2C7lWcQo1oJedE4c93HPq9nxSk.roa File: a2C7lWcQo1oJedE4c93HPq9nxSk.roa (raw, json) Hash identifier: Ze3ChUAG356h/1ezBHzrmm3IpXGxfpgdXr8F5U1Wa4k= Subject key identifier: 6B:60:BB:95:67:10:A3:5A:09:79:D1:38:73:DD:C7:3E:AF:67:C5:29 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 10E5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a2C7lWcQo1oJedE4c93HPq9nxSk.roa Signing time: Sun 01 Mar 2026 01:58:39 +0000 ROA not before: Sun 01 Mar 2026 01:58:39 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4325 (0x10e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:58:39 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=6B60BB956710A35A0979D13873DDC73EAF67C529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:7a:1e:de:f3:55:7b:07:bd:a5:65:33:79: 38:a1:b8:80:15:fb:a6:65:b0:87:bf:48:fb:d0:1a: 4e:0c:c5:c0:5d:d3:9e:3b:91:e0:de:b5:78:29:c6: 0c:06:70:66:a3:bd:25:2d:25:45:82:90:4f:06:87: 34:41:5e:aa:ef:64:48:fd:25:e8:33:53:7e:33:07: e4:3d:02:3f:db:24:8a:2b:21:c9:7c:3d:f1:28:13: 79:0d:19:e9:11:07:fc:ad:2e:59:52:b2:58:d8:33: fb:5d:fd:ab:5d:9f:d8:d0:76:db:36:d9:e8:53:90: 07:ff:59:a4:71:ed:94:ee:58:94:96:97:99:dd:f6: 37:71:d0:2e:a2:27:8b:0f:d9:07:be:ab:43:1f:2b: 83:8c:b0:bb:0e:ce:82:3a:0a:62:d9:c1:15:a0:3e: da:5d:14:1f:5d:ac:1f:47:2a:7b:21:a6:b8:37:18: 1b:9f:29:1c:48:5c:1c:19:4e:8e:4b:fb:7d:c7:93: 17:c0:91:3c:4e:db:56:2b:42:94:f6:32:ee:83:ec: 18:11:4b:42:20:ac:53:9c:a9:bb:f9:ac:26:9c:1a: 17:24:64:e2:c7:3c:98:29:47:06:08:01:da:18:7b: 7b:13:d2:c2:53:63:07:af:14:58:96:0d:3c:0b:c7: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:60:BB:95:67:10:A3:5A:09:79:D1:38:73:DD:C7:3E:AF:67:C5:29 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a2C7lWcQo1oJedE4c93HPq9nxSk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.220.0/22 Signature Algorithm: sha256WithRSAEncryption ad:a4:58:71:9c:63:3c:05:24:03:f4:4d:c6:c6:83:13:4c:98: f0:2c:bc:d0:a9:0b:9c:4e:ac:1b:1a:2e:8d:60:fb:9b:da:4d: 2a:23:b3:d4:bb:a5:96:60:bc:ad:4e:7f:01:27:0d:d7:66:6f: 80:b8:32:33:e5:69:1a:70:c5:d9:8f:c1:51:af:b2:a2:d2:5d: 08:63:9b:28:6d:f5:e0:a4:77:22:16:b5:b8:8b:5e:04:44:85: 4b:37:32:47:02:48:d9:a9:41:b5:91:9a:9f:bd:20:de:6b:f9: a0:d3:0a:e8:7c:43:5c:92:f3:70:aa:75:c7:df:02:df:e2:51: 87:8a:60:31:ec:02:ac:26:52:3d:b2:ba:b5:5d:17:6c:6e:00: 25:90:8b:b7:46:e5:fa:1a:e6:4a:4e:95:43:d9:c4:ec:f7:9c: 77:d0:df:fc:f4:fd:27:cf:91:8d:48:6d:e6:ff:f9:6c:73:e1: 9c:72:c3:32:3d:2f:9f:66:e5:f5:fa:68:7c:3a:e5:0e:5a:71: 98:35:f6:f0:7f:9d:e0:01:23:b6:fe:28:44:ce:6d:f8:0f:4a: 4b:33:1b:b7:a0:ef:73:f3:e3:66:e4:f5:6c:7f:c3:7a:b4:31: c8:a6:43:bf:66:bf:93:16:75:b4:90:85:60:49:82:fb:fe:5d: 85:9c:4b:7c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTU4MzlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZCNjBCQjk1NjcxMEEz NUEwOTc5RDEzODczRERDNzNFQUY2N0M1MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeXHoe3vNVewe9pWUzeTihuIAV+6ZlsIe/SPvQGk4MxcBd0547 keDetXgpxgwGcGajvSUtJUWCkE8GhzRBXqrvZEj9JegzU34zB+Q9Aj/bJIorIcl8 PfEoE3kNGekRB/ytLllSsljYM/td/atdn9jQdts22ehTkAf/WaRx7ZTuWJSWl5nd 9jdx0C6iJ4sP2Qe+q0MfK4OMsLsOzoI6CmLZwRWgPtpdFB9drB9HKnshprg3GBuf KRxIXBwZTo5L+33HkxfAkTxO21YrQpT2Mu6D7BgRS0IgrFOcqbv5rCacGhckZOLH PJgpRwYIAdoYe3sT0sJTYwevFFiWDTwLx7s3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUa2C7lWcQo1oJedE4c93HPq9nxSkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2EyQzdsV2NRbzFvSmVkRTRjOTNIUHE5bnhTay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYNwwDQYJKoZIhvcNAQELBQADggEBAK2kWHGcYzwFJAP0TcbGgxNMmPAs vNCpC5xOrBsaLo1g+5vaTSojs9S7pZZgvK1OfwEnDddmb4C4MjPlaRpwxdmPwVGv sqLSXQhjmyht9eCkdyIWtbiLXgREhUs3MkcCSNmpQbWRmp+9IN5r+aDTCuh8Q1yS 83CqdcffAt/iUYeKYDHsAqwmUj2yurVdF2xuACWQi7dG5foa5kpOlUPZxOz3nHfQ 3/z0/SfPkY1Ibeb/+Wxz4ZxywzI9L59m5fX6aHw65Q5acZg19vB/neABI7b+KETO bfgPSkszG7eg73Pz42bk9Wx/w3q0McimQ79mv5MWdbSQhWBJgvv+XYWcS3w= -----END CERTIFICATE-----Generated at Mon Mar 2 13:12:16 2026 by rpki-client