$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gAHLelsAhN09OhGHiQRookmTSYs.roa File: gAHLelsAhN09OhGHiQRookmTSYs.roa (raw, json) Hash identifier: v7blK5EgLTbfw+e0ADl5zB4B2DA9f0Rv3hRB0Ey/O2U= Subject key identifier: 80:01:CB:7A:5B:00:84:DD:3D:3A:11:87:89:04:68:A2:49:93:49:8B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12A4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gAHLelsAhN09OhGHiQRookmTSYs.roa Signing time: Sun 01 Mar 2026 03:12:28 +0000 ROA not before: Sun 01 Mar 2026 03:12:28 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4772 (0x12a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:12:28 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=8001CB7A5B0084DD3D3A1187890468A24993498B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:b2:e5:ae:4e:08:cb:5a:ff:ff:4b:0d:89: 28:75:c2:e6:3e:ba:f3:f5:29:6a:af:25:22:39:6b: aa:5e:f0:ed:58:bb:a5:02:6d:f2:dd:79:7f:77:35: 16:c1:97:92:5a:11:ba:e4:e1:b9:3e:9f:e3:34:ba: f9:0c:c3:06:c3:c3:6c:af:ff:e6:81:11:d4:ce:c1: ce:1e:b7:cf:0b:0a:df:52:3c:2a:ec:72:55:9d:18: 81:16:80:54:b1:e3:12:a7:65:f5:5c:89:10:0c:f9: 46:39:4f:c2:b0:65:a2:ae:d1:ec:1b:9d:07:e8:dd: c0:8d:f6:dd:61:d9:89:14:aa:37:4a:36:26:3e:55: ea:86:49:64:86:29:bd:05:42:0c:be:da:87:b9:ec: 1d:8f:7e:8c:7e:06:e9:3b:1e:8c:a3:e7:73:5f:44: 69:80:89:a7:6a:6e:f1:36:21:e9:37:8e:e8:a3:3e: a9:0b:dc:2b:33:f7:57:b3:17:50:eb:c7:8b:d1:d2: ce:bb:4d:44:4d:5f:8b:de:2b:ef:80:c5:8e:7b:61: df:2e:e1:0d:8a:d7:d5:d8:84:9c:f5:3c:98:bc:cc: 24:a9:8f:eb:dc:d9:b1:9b:74:13:16:d9:56:39:e3: 1f:b5:5f:8b:60:a1:e4:ba:f7:b3:34:75:63:4d:c4: 37:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:01:CB:7A:5B:00:84:DD:3D:3A:11:87:89:04:68:A2:49:93:49:8B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gAHLelsAhN09OhGHiQRookmTSYs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.212.0/22 Signature Algorithm: sha256WithRSAEncryption c5:64:61:f4:a0:67:3e:ac:79:39:fc:ec:9b:60:ee:c0:e5:53: 39:c0:8c:1c:82:ff:27:68:20:a9:28:f6:91:31:60:63:ff:20: d2:a2:9c:55:d6:a4:2a:f8:5d:94:12:e0:b2:5c:2e:b7:4b:b8: db:e0:f2:44:ab:14:79:74:3f:1d:5f:64:3c:44:3a:9e:54:e4: 3e:d4:02:5b:f8:fd:d1:01:5b:89:14:8f:52:c0:53:b2:08:ab: 46:e9:ed:1b:c5:d6:00:85:51:ff:d6:de:10:0e:97:bd:9a:f9: 23:54:79:f0:42:a9:76:7c:50:7a:b2:f6:7d:81:80:11:b7:19: 2e:4a:0b:d1:2e:31:33:49:11:45:18:b4:3c:df:dd:4e:74:77: 1f:2d:d2:d1:7c:8c:28:33:2e:be:65:30:b5:00:7b:eb:b7:c9: f7:7c:c6:b0:60:c3:d7:ab:61:d8:ca:a1:e4:9c:8f:4b:e0:c6: 8b:c3:42:28:98:d6:d2:43:83:51:87:49:5c:7f:b7:12:00:54: c8:53:60:74:56:31:b8:39:cf:53:fb:6d:52:e7:3c:17:10:52: 65:1f:13:60:f8:52:cd:6e:67:88:2f:6e:5d:94:d0:1f:52:eb: 0c:03:4e:c9:f0:2a:08:fc:ee:14:17:8a:a1:2f:fb:04:2b:ad: ca:93:bf:01 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzEyMjhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgwMDFDQjdBNUIwMDg0 REQzRDNBMTE4Nzg5MDQ2OEEyNDk5MzQ5OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+ibLlrk4Iy1r//0sNiSh1wuY+uvP1KWqvJSI5a6pe8O1Yu6UC bfLdeX93NRbBl5JaEbrk4bk+n+M0uvkMwwbDw2yv/+aBEdTOwc4et88LCt9SPCrs clWdGIEWgFSx4xKnZfVciRAM+UY5T8KwZaKu0ewbnQfo3cCN9t1h2YkUqjdKNiY+ VeqGSWSGKb0FQgy+2oe57B2Pfox+Buk7Hoyj53NfRGmAiadqbvE2Iek3juijPqkL 3Csz91ezF1Drx4vR0s67TURNX4veK++AxY57Yd8u4Q2K19XYhJz1PJi8zCSpj+vc 2bGbdBMW2VY54x+1X4tgoeS697M0dWNNxDdnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgAHLelsAhN09OhGHiQRookmTSYswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2dBSExlbHNBaE4wOU9oR0hpUVJvb2ttVFNZcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYtQwDQYJKoZIhvcNAQELBQADggEBAMVkYfSgZz6seTn87Jtg7sDlUznA jByC/ydoIKko9pExYGP/INKinFXWpCr4XZQS4LJcLrdLuNvg8kSrFHl0Px1fZDxE Op5U5D7UAlv4/dEBW4kUj1LAU7IIq0bp7RvF1gCFUf/W3hAOl72a+SNUefBCqXZ8 UHqy9n2BgBG3GS5KC9EuMTNJEUUYtDzf3U50dx8t0tF8jCgzLr5lMLUAe+u3yfd8 xrBgw9erYdjKoeScj0vgxovDQiiY1tJDg1GHSVx/txIAVMhTYHRWMbg5z1P7bVLn PBcQUmUfE2D4Us1uZ4gvbl2U0B9S6wwDTsnwKgj87hQXiqEv+wQrrcqTvwE= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:14 2026 by rpki-client