$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cuhQzInQ1MQEmjE9Bbx5BqN3vfU.roa File: cuhQzInQ1MQEmjE9Bbx5BqN3vfU.roa (raw, json) Hash identifier: UipqHomI5RBBwoTd/RWhOy0abYAQqDRYLbDAzO/c850= Subject key identifier: 72:E8:50:CC:89:D0:D4:C4:04:9A:31:3D:05:BC:79:06:A3:77:BD:F5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 126F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cuhQzInQ1MQEmjE9Bbx5BqN3vfU.roa Signing time: Sun 01 Mar 2026 03:04:32 +0000 ROA not before: Sun 01 Mar 2026 03:04:32 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.159.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4719 (0x126f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:04:32 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=72E850CC89D0D4C4049A313D05BC7906A377BDF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:6c:ff:c0:67:bb:aa:91:e8:4c:78:fb:04: 74:40:8e:22:eb:cf:5f:f1:4c:3d:1d:0e:db:bb:3e: 54:f1:d9:c1:bd:6b:27:cb:fe:aa:b7:66:aa:f0:e4: 51:11:3a:2c:f6:4c:73:ee:7a:3b:71:80:2e:cf:3a: ca:0a:8f:ba:42:cb:48:e2:1a:37:bf:af:75:5b:21: 33:fb:66:8f:51:d3:f9:a9:5a:42:89:e9:d3:00:a3: 2c:08:5a:f0:37:3b:a5:25:9f:dc:84:ba:5e:ee:0a: 5d:63:61:5b:99:9e:dc:85:fc:09:d0:3c:63:a7:76: 05:a5:18:28:38:bf:9e:d1:8f:e2:e5:b4:ec:6a:16: 95:85:3f:62:9f:be:37:c9:78:0d:90:2b:cd:a3:d6: f3:f0:1e:8d:24:8f:56:2f:b1:8f:9b:c1:7a:b4:74: a7:05:d3:99:6d:09:a7:6e:68:4e:fb:7b:d6:3c:a3: 88:75:a5:32:6b:a3:0e:f2:f7:65:8b:01:46:5a:56: ba:61:63:c3:a8:82:8a:79:2b:77:01:b2:49:b5:fb: a8:7e:91:10:17:dd:3b:a9:16:6c:27:59:63:38:fa: 91:79:6c:0f:cb:b3:f3:f4:4b:71:4e:93:f4:c7:23: e0:27:d7:14:7f:00:e3:57:70:52:e8:64:73:43:72: 5b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E8:50:CC:89:D0:D4:C4:04:9A:31:3D:05:BC:79:06:A3:77:BD:F5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cuhQzInQ1MQEmjE9Bbx5BqN3vfU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.237.0/24 Signature Algorithm: sha256WithRSAEncryption de:86:14:2d:a7:5d:90:97:c4:72:4a:f0:74:8a:fc:cc:2a:f0: 7e:5f:bc:3f:a9:1c:48:9f:52:56:f1:20:cf:83:3c:7e:0f:86: 09:18:b1:81:a0:10:c7:6b:c9:bd:30:b0:52:32:50:ea:77:c2: 08:4b:a3:64:b6:5b:39:f9:12:30:5e:bf:47:b4:41:e3:ba:4f: b8:4a:84:ee:96:1e:cd:1b:87:16:5c:0f:1a:eb:98:c1:ba:a5: 7b:59:16:7d:f6:7f:27:27:6c:2e:85:69:e4:62:24:3b:3c:ef: 11:9e:cc:6f:b4:f2:5e:09:16:11:88:cf:e3:83:46:61:11:16: 94:aa:7d:3e:ba:e0:9d:98:79:b1:99:89:fb:99:44:92:31:c2: 36:89:09:fc:97:c5:94:33:78:4f:a6:1b:97:e3:b0:c9:bf:e5: b8:89:28:e2:2b:73:62:d4:18:7b:c5:b1:e6:bd:00:bd:3f:c1: be:a6:09:3f:9c:7c:cd:64:06:55:a8:3b:d2:de:54:1c:c7:6b: a2:bc:ae:8f:94:e2:ab:30:01:e3:81:a0:9c:e4:fd:2f:c4:c4: 1c:3b:52:33:ac:eb:cd:e2:11:f3:48:a9:5a:f2:63:a7:b0:db: 73:b0:bd:6e:74:8b:5b:d4:b7:7d:c4:d0:85:5e:4e:67:13:ba: 40:97:86:fe -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzA0MzJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcyRTg1MENDODlEMEQ0 QzQwNDlBMzEzRDA1QkM3OTA2QTM3N0JERjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSjmz/wGe7qpHoTHj7BHRAjiLrz1/xTD0dDtu7PlTx2cG9ayfL /qq3Zqrw5FEROiz2THPuejtxgC7POsoKj7pCy0jiGje/r3VbITP7Zo9R0/mpWkKJ 6dMAoywIWvA3O6Uln9yEul7uCl1jYVuZntyF/AnQPGOndgWlGCg4v57Rj+LltOxq FpWFP2KfvjfJeA2QK82j1vPwHo0kj1YvsY+bwXq0dKcF05ltCaduaE77e9Y8o4h1 pTJrow7y92WLAUZaVrphY8Oogop5K3cBskm1+6h+kRAX3TupFmwnWWM4+pF5bA/L s/P0S3FOk/THI+An1xR/AONXcFLoZHNDclszAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcuhQzInQ1MQEmjE9Bbx5BqN3vfUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2N1aFF6SW5RMU1RRW1qRTlCYng1QnFOM3ZmVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcn+0wDQYJKoZIhvcNAQELBQADggEBAN6GFC2nXZCXxHJK8HSK/Mwq8H5f vD+pHEifUlbxIM+DPH4PhgkYsYGgEMdryb0wsFIyUOp3wghLo2S2Wzn5EjBev0e0 QeO6T7hKhO6WHs0bhxZcDxrrmMG6pXtZFn32fycnbC6FaeRiJDs87xGezG+08l4J FhGIz+ODRmERFpSqfT664J2YebGZifuZRJIxwjaJCfyXxZQzeE+mG5fjsMm/5biJ KOIrc2LUGHvFsea9AL0/wb6mCT+cfM1kBlWoO9LeVBzHa6K8ro+U4qswAeOBoJzk /S/ExBw7UjOs683iEfNIqVryY6ew23OwvW50i1vUt33E0IVeTmcTukCXhv4= -----END CERTIFICATE-----Generated at Mon Mar 2 10:06:53 2026 by rpki-client