$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/alyGaYRZ-X2gALQdzN0tJpm98EU.roa File: alyGaYRZ-X2gALQdzN0tJpm98EU.roa (raw, json) Hash identifier: T76nBe9RLK+zk9UAiBw9uu/J5mslsgmYhAnTEYVJhAg= Subject key identifier: 6A:5C:86:69:84:59:F9:7D:A0:00:B4:1D:CC:DD:2D:26:99:BD:F0:45 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 115B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/alyGaYRZ-X2gALQdzN0tJpm98EU.roa Signing time: Sun 01 Mar 2026 02:16:59 +0000 ROA not before: Sun 01 Mar 2026 02:16:59 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4443 (0x115b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:16:59 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=6A5C86698459F97DA000B41DCCDD2D2699BDF045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4b:df:55:f3:06:cc:7a:e1:13:f7:3f:27:92: d6:89:d2:51:5f:1d:65:81:89:01:5b:82:b2:5c:06: b0:29:f6:fb:12:db:cf:53:1d:43:bd:57:24:9c:72: 4c:20:bf:73:ac:ea:e7:59:21:e9:ec:ce:a3:5c:e1: 21:5f:26:84:ca:a0:6b:81:e7:c7:53:25:1b:81:16: b5:b2:10:4b:03:b1:0b:d3:4a:f4:c2:f0:7b:c3:36: 9c:a8:09:b2:7e:6b:b8:d7:4f:43:2e:57:52:35:a3: 80:3d:cf:b0:fc:79:33:1f:c5:0e:8c:79:e8:71:a2: ce:96:7d:fb:1f:a9:4c:2f:5f:6f:ce:62:f9:4c:3b: 4b:d7:9a:85:e5:c4:f8:7d:fe:df:58:6b:fa:51:5d: 4d:d9:44:f1:cc:c2:59:f2:0f:22:89:25:ee:e3:cb: 00:0b:30:4b:ce:08:20:34:22:cc:85:4e:05:f9:1c: a8:7f:08:24:e2:6e:6a:b8:6e:54:88:7b:bc:28:7c: 1d:26:62:3b:f4:f2:ab:80:ab:39:65:13:28:42:1e: a1:79:33:0a:e4:e4:b2:11:27:68:1d:93:c8:df:18: af:76:8c:5f:4d:ae:97:4f:a1:3b:46:c3:0b:9b:32: 37:cc:23:58:29:d9:2e:98:c4:01:86:f1:f6:07:ce: 3a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5C:86:69:84:59:F9:7D:A0:00:B4:1D:CC:DD:2D:26:99:BD:F0:45 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/alyGaYRZ-X2gALQdzN0tJpm98EU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.238.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:8a:f7:28:39:aa:be:f5:e4:c6:fe:98:54:e8:b7:01:cb:0a: 14:d1:e6:e9:47:fb:de:dd:5e:e5:8a:9d:9e:bb:ba:e2:7b:0c: 0e:a3:29:53:70:87:93:5b:7d:45:e7:56:6a:c5:ca:4d:6f:32: bb:0a:2c:77:f0:82:22:d2:9e:2f:70:83:f2:cd:c6:47:33:56: 7f:81:29:35:38:94:ee:17:f5:ea:fb:cb:49:15:c1:34:24:58: b8:7c:49:e0:04:65:51:a0:c6:3e:ba:fb:f7:72:80:8e:8e:f7: 57:2b:d0:0b:2e:87:b2:23:70:4d:45:d4:31:c1:22:d2:68:e5: ba:17:5c:8a:5c:37:80:e2:d0:22:71:72:84:16:ec:44:d9:c6: 1d:52:7f:9f:b2:4f:47:fd:bc:dc:6c:d9:75:0c:7f:1b:b3:49: a6:2f:f8:74:4b:d9:eb:d2:06:5d:2a:82:f8:ab:34:22:c6:35: c7:32:de:72:e3:4a:c5:88:1b:0c:c6:ee:83:71:05:c4:c9:91: e0:b2:4d:6c:06:3a:34:d4:70:15:f7:54:71:91:ed:aa:8f:6e: 86:d3:c3:7b:70:5c:f7:3c:81:b7:27:e2:a3:e7:a2:cf:3e:d3: 51:7b:96:b1:8d:f5:24:f2:d5:1d:83:7b:54:8e:ec:a7:de:8d: 47:52:2f:5c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEVswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjE2NTlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZBNUM4NjY5ODQ1OUY5 N0RBMDAwQjQxRENDREQyRDI2OTlCREYwNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtS99V8wbMeuET9z8nktaJ0lFfHWWBiQFbgrJcBrAp9vsS289T HUO9VyScckwgv3Os6udZIenszqNc4SFfJoTKoGuB58dTJRuBFrWyEEsDsQvTSvTC 8HvDNpyoCbJ+a7jXT0MuV1I1o4A9z7D8eTMfxQ6Meehxos6WffsfqUwvX2/OYvlM O0vXmoXlxPh9/t9Ya/pRXU3ZRPHMwlnyDyKJJe7jywALMEvOCCA0IsyFTgX5HKh/ CCTibmq4blSIe7wofB0mYjv08quAqzllEyhCHqF5Mwrk5LIRJ2gdk8jfGK92jF9N rpdPoTtGwwubMjfMI1gp2S6YxAGG8fYHzjqbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUalyGaYRZ+X2gALQdzN0tJpm98EUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2FseUdhWVJaLVgyZ0FMUWR6TjB0SnBtOThFVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcn+4wDQYJKoZIhvcNAQELBQADggEBAF2K9yg5qr715Mb+mFTotwHLChTR 5ulH+97dXuWKnZ67uuJ7DA6jKVNwh5NbfUXnVmrFyk1vMrsKLHfwgiLSni9wg/LN xkczVn+BKTU4lO4X9er7y0kVwTQkWLh8SeAEZVGgxj66+/dygI6O91cr0Asuh7Ij cE1F1DHBItJo5boXXIpcN4Di0CJxcoQW7ETZxh1Sf5+yT0f9vNxs2XUMfxuzSaYv +HRL2evSBl0qgvirNCLGNccy3nLjSsWIGwzG7oNxBcTJkeCyTWwGOjTUcBX3VHGR 7aqPbobTw3twXPc8gbcn4qPnos8+01F7lrGN9STy1R2De1SO7KfejUdSL1w= -----END CERTIFICATE-----Generated at Mon Mar 2 05:17:28 2026 by rpki-client