$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dbq5XLO7VqtDy2OlGWiJazdfmcA.roa File: dbq5XLO7VqtDy2OlGWiJazdfmcA.roa (raw, json) Hash identifier: wZ6LVNAiIrVngLO60Zzv3liKFJTnDODrsVpbYf8NFTE= Subject key identifier: 75:BA:B9:5C:B3:BB:56:AB:43:CB:63:A5:19:68:89:6B:37:5F:99:C0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 11C5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dbq5XLO7VqtDy2OlGWiJazdfmcA.roa Signing time: Sun 01 Mar 2026 02:36:31 +0000 ROA not before: Sun 01 Mar 2026 02:36:31 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4549 (0x11c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:36:31 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=75BAB95CB3BB56AB43CB63A51968896B375F99C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:21:59:0c:8a:cb:34:3b:8a:4b:d3:59:a6: 2d:22:f6:98:6c:be:18:f6:c9:1e:34:d7:d0:f0:83: c3:5f:2d:8e:2f:65:39:7a:b5:e7:35:18:43:2a:53: 63:24:28:a5:27:e4:5b:68:f6:8a:25:32:3d:48:0f: 58:8e:d8:c3:ae:29:17:78:0d:10:8d:41:e7:12:60: fb:b4:1f:0c:c5:b8:ae:77:12:be:85:4f:8f:c7:4a: 0b:a7:cb:f7:da:0b:03:5c:34:50:e7:48:59:64:a1: dc:d9:3c:fb:7f:04:fa:e0:ea:64:6d:f5:52:e4:44: b8:22:73:23:c1:04:53:cd:63:34:a5:a5:53:bb:8f: 79:32:cd:70:48:57:b0:15:18:fb:c8:f7:74:bc:7b: 15:32:61:37:26:cd:b4:b9:af:9a:55:45:08:0e:f0: e7:c1:ee:88:94:d9:a7:62:02:a0:04:6f:c4:7b:b6: a9:b2:0d:1a:d6:c1:f1:ef:23:69:6b:74:a8:22:84: f9:01:c0:9b:f9:92:a4:12:ca:58:fe:e2:0c:8d:f4: 2f:69:2b:47:c6:dd:7f:57:78:3c:3d:5b:6c:92:d4: 65:a6:76:b6:bb:73:5a:3c:b1:4d:f9:a6:3e:be:6e: 54:2f:ab:8e:4c:18:df:c9:1d:a2:69:97:d2:d9:5b: 9f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BA:B9:5C:B3:BB:56:AB:43:CB:63:A5:19:68:89:6B:37:5F:99:C0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dbq5XLO7VqtDy2OlGWiJazdfmcA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.8.0/21 Signature Algorithm: sha256WithRSAEncryption 66:57:7f:ea:43:9e:2f:e1:b8:14:7e:23:2f:02:28:51:19:5f: 89:49:2f:8e:01:44:93:64:0e:26:12:0c:81:5b:92:5b:4c:4f: a0:1c:93:85:d8:11:97:4e:0e:40:c0:06:31:c6:9d:3c:2c:d6: 0a:80:45:56:e3:fd:db:35:62:73:05:0f:a7:ca:89:ac:c8:38: 61:40:be:04:05:ec:c7:e4:c2:33:4d:25:6c:1d:5d:b4:a4:06: c4:e4:ad:5d:a5:92:60:0b:89:35:b6:56:80:b9:e7:a8:be:51: 73:53:6a:a0:a7:f4:4e:5e:48:bf:58:81:18:c2:7f:66:a6:f9: 2c:2c:07:e7:fc:a6:89:e3:d2:04:81:45:da:21:09:26:e4:ef: da:87:dc:f5:b8:cb:90:01:cb:af:23:15:c9:44:46:82:6b:17: 9e:b7:d7:f5:0a:53:94:1f:a3:24:6a:d7:fc:8d:a4:c6:c9:52: 49:ba:e0:d2:e3:ac:2a:35:4f:4c:5a:b6:80:d9:cc:7c:8d:23: ab:70:7a:38:52:7a:fb:12:5d:7c:e8:3d:88:9c:dd:85:24:05: 86:e8:0c:01:6e:57:f4:fe:f6:b0:d1:c8:01:b4:a5:e1:55:a8: 9e:97:5d:16:28:33:f3:eb:10:70:d3:4c:63:18:37:8d:5e:d2: 2c:91:71:e5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjM2MzFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc1QkFCOTVDQjNCQjU2 QUI0M0NCNjNBNTE5Njg4OTZCMzc1Rjk5QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCseCFZDIrLNDuKS9NZpi0i9phsvhj2yR4019Dwg8NfLY4vZTl6 tec1GEMqU2MkKKUn5Fto9oolMj1ID1iO2MOuKRd4DRCNQecSYPu0HwzFuK53Er6F T4/HSguny/faCwNcNFDnSFlkodzZPPt/BPrg6mRt9VLkRLgicyPBBFPNYzSlpVO7 j3kyzXBIV7AVGPvI93S8exUyYTcmzbS5r5pVRQgO8OfB7oiU2adiAqAEb8R7tqmy DRrWwfHvI2lrdKgihPkBwJv5kqQSylj+4gyN9C9pK0fG3X9XeDw9W2yS1GWmdra7 c1o8sU35pj6+blQvq45MGN/JHaJpl9LZW5/7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdbq5XLO7VqtDy2OlGWiJazdfmcAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2RicTVYTE83VnF0RHkyT2xHV2lKYXpkZm1jQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxYggwDQYJKoZIhvcNAQELBQADggEBAGZXf+pDni/huBR+Iy8CKFEZX4lJ L44BRJNkDiYSDIFbkltMT6Ack4XYEZdODkDABjHGnTws1gqARVbj/ds1YnMFD6fK iazIOGFAvgQF7MfkwjNNJWwdXbSkBsTkrV2lkmALiTW2VoC556i+UXNTaqCn9E5e SL9YgRjCf2am+SwsB+f8ponj0gSBRdohCSbk79qH3PW4y5ABy68jFclERoJrF563 1/UKU5QfoyRq1/yNpMbJUkm64NLjrCo1T0xatoDZzHyNI6twejhSevsSXXzoPYic 3YUkBYboDAFuV/T+9rDRyAG0peFVqJ6XXRYoM/PrEHDTTGMYN41e0iyRceU= -----END CERTIFICATE-----Generated at Mon Mar 2 08:23:00 2026 by rpki-client