$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cZspwhk5fKP465XrPmoM-H2OwlI.roa File: cZspwhk5fKP465XrPmoM-H2OwlI.roa (raw, json) Hash identifier: bgXZTyJO36ls7jd2M3VPYxIatpF2qo2d3xovQaLZL1o= Subject key identifier: 71:9B:29:C2:19:39:7C:A3:F8:EB:95:EB:3E:6A:0C:F8:7D:8E:C2:52 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1278 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cZspwhk5fKP465XrPmoM-H2OwlI.roa Signing time: Sun 01 Mar 2026 03:04:37 +0000 ROA not before: Sun 01 Mar 2026 03:04:37 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4728 (0x1278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:04:37 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=719B29C219397CA3F8EB95EB3E6A0CF87D8EC252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:90:50:ba:8b:08:72:4e:08:04:c0:b0:0d: da:00:9f:f1:ff:f2:4e:ec:5c:98:af:7c:ac:cb:62: 72:e3:69:ab:ad:47:a3:65:6a:b2:2f:80:6e:33:c0: ce:e5:ef:f5:8e:3a:d3:93:ad:59:c6:90:e5:84:4b: 9d:fc:e5:21:70:84:d3:8e:00:51:88:70:4d:d1:dc: 4a:d8:25:86:f2:b6:38:08:37:88:75:0d:42:c9:00: 08:48:4d:11:0e:fe:17:8f:8f:60:3f:7b:5c:d8:bd: 92:5d:91:36:d3:71:f9:ab:c4:75:b9:29:37:2d:74: 9f:69:81:26:10:07:77:12:6d:22:66:93:82:52:2c: 28:cc:34:e3:89:84:37:97:be:fe:ca:a1:b6:82:48: 7c:0f:42:89:0f:c9:19:65:93:d6:84:b9:87:fd:6b: 95:a7:c0:5f:82:af:ad:75:7f:2b:f5:e2:3b:3c:41: 5d:d6:05:48:af:4f:59:0a:7f:07:92:21:f8:11:8d: 46:1d:70:ee:10:a8:c6:4a:29:2b:76:fa:6e:fc:32: c4:31:7e:66:14:bd:d0:52:f3:45:b3:51:3d:bd:4b: 42:07:db:11:ba:3c:84:fc:6f:39:70:74:43:37:6a: 80:f2:3a:10:42:7a:27:50:56:fb:62:0c:c1:73:bb: d9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9B:29:C2:19:39:7C:A3:F8:EB:95:EB:3E:6A:0C:F8:7D:8E:C2:52 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cZspwhk5fKP465XrPmoM-H2OwlI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.54.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:ff:b0:68:96:b8:27:8d:78:20:5c:84:61:7a:0d:58:5c:30: a9:5f:5d:a9:26:0b:67:f5:6c:95:2c:c6:78:8d:8c:b4:40:83: 52:80:7d:8e:bc:9e:b2:19:f0:39:15:7b:7f:0e:c2:5a:89:14: 81:89:64:9f:df:70:17:d0:3d:e7:40:f9:88:23:1f:74:9c:a9: 5f:af:99:f6:63:e9:35:54:f6:a5:66:d0:f7:b3:f5:d3:b1:fa: 8b:33:ea:0e:09:42:dc:a5:b7:33:23:d8:5b:c4:33:92:c3:d4: ce:27:66:64:08:1f:da:bb:1f:35:35:c5:6a:2e:da:2f:07:18: f4:1c:cd:97:6c:6b:04:f5:c3:5e:cf:ed:89:87:b2:f3:47:a7: 1f:ea:18:3e:4f:5f:f6:ea:47:fe:bd:13:07:ab:28:71:f1:83: e3:c0:20:c2:3d:62:14:c4:99:8f:e5:f3:91:d5:1b:e7:29:ea: 20:47:ea:23:0e:d0:36:08:39:30:69:d9:98:7f:c0:70:a1:41: 64:f8:fe:a1:28:f0:14:cc:ef:72:98:2b:b3:4f:20:ae:c0:82: 89:f5:8f:18:a6:00:71:f9:2e:9f:dc:ce:ff:f7:60:2b:e2:85: 60:6d:a7:a7:5b:8e:a3:11:d8:2e:0f:fa:a2:6b:ba:e7:7e:69: fa:6f:4b:66 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEngwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzA0MzdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcxOUIyOUMyMTkzOTdD QTNGOEVCOTVFQjNFNkEwQ0Y4N0Q4RUMyNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMi5BQuosIck4IBMCwDdoAn/H/8k7sXJivfKzLYnLjaautR6Nl arIvgG4zwM7l7/WOOtOTrVnGkOWES5385SFwhNOOAFGIcE3R3ErYJYbytjgIN4h1 DULJAAhITREO/hePj2A/e1zYvZJdkTbTcfmrxHW5KTctdJ9pgSYQB3cSbSJmk4JS LCjMNOOJhDeXvv7KobaCSHwPQokPyRllk9aEuYf9a5WnwF+Cr611fyv14js8QV3W BUivT1kKfweSIfgRjUYdcO4QqMZKKSt2+m78MsQxfmYUvdBS80WzUT29S0IH2xG6 PIT8bzlwdEM3aoDyOhBCeidQVvtiDMFzu9l1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcZspwhk5fKP465XrPmoM+H2OwlIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2Nac3B3aGs1ZktQNDY1WHJQbW9NLUgyT3dsSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYjYwDQYJKoZIhvcNAQELBQADggEBAH3/sGiWuCeNeCBchGF6DVhcMKlf XakmC2f1bJUsxniNjLRAg1KAfY68nrIZ8DkVe38OwlqJFIGJZJ/fcBfQPedA+Ygj H3ScqV+vmfZj6TVU9qVm0Pez9dOx+osz6g4JQtyltzMj2FvEM5LD1M4nZmQIH9q7 HzU1xWou2i8HGPQczZdsawT1w17P7YmHsvNHpx/qGD5PX/bqR/69EwerKHHxg+PA IMI9YhTEmY/l85HVG+cp6iBH6iMO0DYIOTBp2Zh/wHChQWT4/qEo8BTM73KYK7NP IK7Agon1jximAHH5Lp/czv/3YCvihWBtp6dbjqMR2C4P+qJruud+afpvS2Y= -----END CERTIFICATE-----Generated at Mon Mar 2 08:22:56 2026 by rpki-client