$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bfQ5Sde8fCOmnX4-uYCCoBMa8s4.roa File: bfQ5Sde8fCOmnX4-uYCCoBMa8s4.roa (raw, json) Hash identifier: a3L9z5i6zTvyrpy2zHUcGxLSXPSBRftdPOqyYqM/bkU= Subject key identifier: 6D:F4:39:49:D7:BC:7C:23:A6:9D:7E:3E:B9:80:82:A0:13:1A:F2:CE Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 8E Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bfQ5Sde8fCOmnX4-uYCCoBMa8s4.roa Signing time: Sun 01 Mar 2026 02:17:00 +0000 ROA not before: Sun 01 Mar 2026 02:17:00 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 160.249.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Mar 1 02:17:00 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=6DF43949D7BC7C23A69D7E3EB98082A0131AF2CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b3:d1:90:54:87:06:87:ea:5d:f8:7f:2b:19: 79:ae:46:86:0f:45:9c:5f:66:54:1d:ac:9d:42:d3: be:ba:13:60:3d:54:99:81:03:04:c7:b6:a7:73:d1: 81:a2:23:58:bd:31:fd:80:74:dd:2b:d7:9d:8e:0f: be:56:a2:0f:82:3e:c8:03:0f:f7:89:64:f5:7a:c9: c0:b6:8e:ba:c3:c1:31:da:d4:8c:92:01:52:a2:0f: c9:ec:3e:3d:67:05:31:35:a2:16:a7:7d:57:20:49: 66:8d:56:8d:15:1b:99:07:19:a5:cb:6c:4d:04:0f: ac:4a:a0:27:21:b9:b1:0c:86:77:b1:f6:60:19:1d: a7:98:dd:ab:a8:b6:46:c2:9d:45:d3:39:88:54:4b: ff:87:32:af:a1:42:e7:95:ab:65:0c:04:13:38:a8: 29:69:eb:88:dd:9a:00:a3:da:b9:de:86:52:6a:56: a3:30:e5:74:82:5c:56:0f:f4:3c:26:7a:f7:b6:4b: e6:5c:da:33:6d:e3:29:0d:a6:6a:af:9a:1d:59:a0: c7:5c:ab:86:45:b9:ba:48:c3:d5:6f:a0:72:59:0a: 6e:de:f3:95:d3:8f:d3:77:0c:23:72:6e:68:53:57: 04:5a:00:80:96:32:b4:68:88:7e:da:7e:1e:36:57: 91:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F4:39:49:D7:BC:7C:23:A6:9D:7E:3E:B9:80:82:A0:13:1A:F2:CE X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bfQ5Sde8fCOmnX4-uYCCoBMa8s4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.249.112.0/20 Signature Algorithm: sha256WithRSAEncryption 61:f3:23:44:c2:0c:c4:11:5f:fe:ff:3b:d3:5f:8f:97:98:e8: 60:a0:2e:a0:51:b4:71:39:12:34:bd:f7:2a:c7:b0:f6:21:c4: 1a:18:f4:39:86:d0:b6:19:a5:61:3a:d1:c2:37:6a:b7:78:6d: 60:59:17:9a:56:68:f8:57:ab:27:45:6d:1b:32:ec:cd:e0:01: 23:42:74:70:ea:b0:0a:bd:26:e9:b8:1a:a7:d9:db:a3:a3:ee: 9f:14:de:e0:1f:13:87:94:94:3f:44:0d:6f:56:02:e1:ff:a3: f0:07:18:7d:4c:a0:0d:75:55:c0:8c:e1:05:95:61:76:af:a0: 75:3c:86:24:53:7f:ca:91:26:f6:26:c6:5d:20:53:92:ad:58: 4a:3b:a6:a8:b5:e7:d8:a3:2d:2f:b9:10:15:f5:a4:0e:71:47: 3c:6a:b1:d3:86:c9:0a:0b:05:30:88:3b:b9:ea:a1:ce:c1:66: 82:24:51:37:48:10:78:6a:95:c9:da:70:ab:15:ef:1f:12:69: 77:2d:60:5b:8e:ea:b2:cc:63:01:c3:b3:67:5c:c9:95:92:f8: df:05:ec:21:71:19:68:f1:aa:28:0c:cb:16:86:13:da:14:e3: f5:4d:46:c9:67:dd:44:6d:0b:9f:6e:18:8c:54:f0:3e:ae:1a: c0:9d:3a:9f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5 RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNjAzMDEw MjE3MDBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZERjQzOTQ5RDdCQzdD MjNBNjlEN0UzRUI5ODA4MkEwMTMxQUYyQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhs9GQVIcGh+pd+H8rGXmuRoYPRZxfZlQdrJ1C0766E2A9VJmB AwTHtqdz0YGiI1i9Mf2AdN0r152OD75Wog+CPsgDD/eJZPV6ycC2jrrDwTHa1IyS AVKiD8nsPj1nBTE1ohanfVcgSWaNVo0VG5kHGaXLbE0ED6xKoCchubEMhnex9mAZ HaeY3auotkbCnUXTOYhUS/+HMq+hQueVq2UMBBM4qClp64jdmgCj2rnehlJqVqMw 5XSCXFYP9Dwmeve2S+Zc2jNt4ykNpmqvmh1ZoMdcq4ZFubpIw9VvoHJZCm7e85XT j9N3DCNybmhTVwRaAICWMrRoiH7afh42V5FJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbfQ5Sde8fCOmnX4+uYCCoBMa8s4wHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193 R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2JmUTVTZGU4ZkNPbW5YNC11WUNDb0JNYThzNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASg+XAwDQYJKoZIhvcNAQELBQADggEBAGHzI0TCDMQRX/7/O9Nfj5eY6GCg LqBRtHE5EjS99yrHsPYhxBoY9DmG0LYZpWE60cI3ard4bWBZF5pWaPhXqydFbRsy 7M3gASNCdHDqsAq9Jum4GqfZ26Oj7p8U3uAfE4eUlD9EDW9WAuH/o/AHGH1MoA11 VcCM4QWVYXavoHU8hiRTf8qRJvYmxl0gU5KtWEo7pqi159ijLS+5EBX1pA5xRzxq sdOGyQoLBTCIO7nqoc7BZoIkUTdIEHhqlcnacKsV7x8SaXctYFuO6rLMYwHDs2dc yZWS+N8F7CFxGWjxqigMyxaGE9oU4/VNRsln3URtC59uGIxU8D6uGsCdOp8= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:33 2026 by rpki-client