$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aOtqV-sPoq4LE0mhT9T_cFXnCdE.roa File: aOtqV-sPoq4LE0mhT9T_cFXnCdE.roa (raw, json) Hash identifier: mmWLmlDi6N4eAG1GztoDbecfMsxRy2Kyzen4kVND4os= Subject key identifier: 68:EB:6A:57:EB:0F:A2:AE:0B:13:49:A1:4F:D4:FF:70:55:E7:09:D1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 108B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aOtqV-sPoq4LE0mhT9T_cFXnCdE.roa Signing time: Sun 01 Mar 2026 01:40:05 +0000 ROA not before: Sun 01 Mar 2026 01:40:05 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4235 (0x108b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:40:05 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=68EB6A57EB0FA2AE0B1349A14FD4FF7055E709D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:19:45:45:c0:65:7e:f7:5b:3a:03:44:df:9f: e5:b4:01:74:0e:7f:52:7b:49:17:be:ff:72:a4:e4: 7d:81:26:43:1e:4f:be:3c:58:f2:26:55:09:23:7d: d9:1e:d9:28:3f:3b:55:89:19:08:7d:00:69:c5:8f: 15:bf:c9:22:d6:ef:cd:24:85:8c:96:15:af:97:73: 46:aa:71:07:9b:14:33:33:13:72:32:7b:07:32:93: 4d:b7:3b:8e:4a:00:79:4d:1c:29:ee:1b:f3:b6:fc: fb:7b:a8:4b:1e:1c:e0:be:67:73:49:a5:a0:a0:13: 4a:0a:e8:3b:11:b9:d9:1c:be:ba:e4:02:95:bc:3f: e0:fe:8e:65:4d:13:e9:fe:c7:a5:62:1b:a0:cc:39: ff:45:4e:dd:cb:48:56:0d:b4:36:45:9b:fc:67:fb: 02:32:ca:07:de:21:d9:d2:a7:6f:3f:b6:1c:e1:7a: 85:80:bf:09:8c:29:e4:0d:4c:ae:38:7c:b6:6c:83: 66:46:70:96:4c:d0:02:20:c4:36:37:84:e0:af:a3: bb:49:98:6a:f5:9e:2f:46:40:5a:13:ee:fd:83:b7: 3a:aa:a7:76:e6:56:5f:27:7e:21:a6:bc:ca:b4:3b: 94:fe:e5:06:7b:79:eb:b3:78:47:87:25:4b:21:de: 0e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EB:6A:57:EB:0F:A2:AE:0B:13:49:A1:4F:D4:FF:70:55:E7:09:D1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aOtqV-sPoq4LE0mhT9T_cFXnCdE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.20.0/23 Signature Algorithm: sha256WithRSAEncryption b2:96:3f:a4:36:c8:7b:3e:25:7e:e6:9c:b2:d5:0b:6c:07:9d: a2:12:65:b2:0e:3f:f7:bf:a0:54:2e:a3:14:5e:13:5c:18:3c: e3:34:60:52:ef:8b:8b:54:cb:12:ac:cb:9e:f0:dd:9a:89:d2: 4f:d6:1d:07:71:6d:70:0d:06:97:8f:48:2b:cc:82:11:fa:0e: 8c:f7:e2:9e:a9:49:19:89:09:4c:ac:34:0d:6e:b6:15:13:c6: 76:75:d7:9c:44:75:8a:50:48:98:a4:e5:27:9e:17:fc:c6:a9: 61:db:e3:37:09:d4:a1:f3:0a:36:9a:d0:a1:65:6b:2b:71:78: 1c:fd:06:52:24:08:6c:3c:ed:9b:71:8b:2e:dd:11:98:58:dc: 86:ba:20:86:69:fa:79:81:2b:4f:7f:f2:57:e8:b6:10:c1:1c: 71:8a:8f:5e:3c:67:e8:4d:bd:4a:c6:54:27:f0:b6:f9:1e:46: f7:73:95:e6:e6:a4:ec:b5:45:40:54:27:95:41:62:9a:be:c4: 96:e6:ba:11:bf:1c:fd:3c:56:0f:ed:f2:49:49:16:4c:29:bc: 8c:c1:f0:5a:1b:d4:c4:1c:e3:cf:2e:20:72:12:b0:3e:a0:9e: 6e:e0:f8:3a:63:df:e3:a8:6c:72:a1:a9:a5:dd:2a:90:9a:1a: 2b:a7:ce:bf -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTQwMDVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY4RUI2QTU3RUIwRkEy QUUwQjEzNDlBMTRGRDRGRjcwNTVFNzA5RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxGUVFwGV+91s6A0Tfn+W0AXQOf1J7SRe+/3Kk5H2BJkMeT748 WPImVQkjfdke2Sg/O1WJGQh9AGnFjxW/ySLW780khYyWFa+Xc0aqcQebFDMzE3Iy ewcyk023O45KAHlNHCnuG/O2/Pt7qEseHOC+Z3NJpaCgE0oK6DsRudkcvrrkApW8 P+D+jmVNE+n+x6ViG6DMOf9FTt3LSFYNtDZFm/xn+wIyygfeIdnSp28/thzheoWA vwmMKeQNTK44fLZsg2ZGcJZM0AIgxDY3hOCvo7tJmGr1ni9GQFoT7v2Dtzqqp3bm Vl8nfiGmvMq0O5T+5QZ7eeuzeEeHJUsh3g7hAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUaOtqV+sPoq4LE0mhT9T/cFXnCdEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2FPdHFWLXNQb3E0TEUwbWhUOVRfY0ZYbkNkRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaBQwDQYJKoZIhvcNAQELBQADggEBALKWP6Q2yHs+JX7mnLLVC2wHnaIS ZbIOP/e/oFQuoxReE1wYPOM0YFLvi4tUyxKsy57w3ZqJ0k/WHQdxbXANBpePSCvM ghH6Doz34p6pSRmJCUysNA1uthUTxnZ115xEdYpQSJik5SeeF/zGqWHb4zcJ1KHz Cjaa0KFlaytxeBz9BlIkCGw87Ztxiy7dEZhY3Ia6IIZp+nmBK09/8lfothDBHHGK j148Z+hNvUrGVCfwtvkeRvdzlebmpOy1RUBUJ5VBYpq+xJbmuhG/HP08Vg/t8klJ FkwpvIzB8Fob1MQc488uIHISsD6gnm7g+Dpj3+OobHKhqaXdKpCaGiunzr8= -----END CERTIFICATE-----Generated at Mon Mar 2 03:57:01 2026 by rpki-client