$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/h8K0ht3fOYdzADOqRX1FFkrZRMM.roa File: h8K0ht3fOYdzADOqRX1FFkrZRMM.roa (raw, json) Hash identifier: ljoeXJC4IsW+dLx/CrYJrL9eF9ux3m3xEhsvsUoygvg= Subject key identifier: 87:C2:B4:86:DD:DF:39:87:73:00:33:AA:45:7D:45:16:4A:D9:44:C3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 121C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h8K0ht3fOYdzADOqRX1FFkrZRMM.roa Signing time: Sun 01 Mar 2026 02:48:45 +0000 ROA not before: Sun 01 Mar 2026 02:48:45 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4636 (0x121c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:48:45 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=87C2B486DDDF3987730033AA457D45164AD944C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:e0:94:65:b9:e5:ed:62:e5:14:5e:62:9e: a4:e1:ab:db:04:28:c7:c3:77:c9:f1:3b:39:08:b1: 04:b9:25:23:20:c4:45:89:e8:6c:12:44:74:bc:6c: 26:2b:c9:30:a7:16:41:1d:95:9c:1f:7f:50:33:c6: bc:cb:89:9f:11:fa:7a:e6:43:06:43:f0:99:08:b7: e0:7a:b0:02:dc:8f:fd:e5:5b:ca:5a:6d:1d:6d:50: 89:7e:fc:83:34:3c:00:da:fa:18:28:67:eb:44:25: fc:9c:7d:c4:df:32:30:3c:78:d4:98:ee:21:79:3a: 19:d0:53:81:3f:5c:72:25:46:e5:e9:89:33:f3:84: 21:a2:2e:fa:bf:eb:04:47:fb:c5:84:59:14:d4:36: 7e:2f:a2:36:aa:de:63:e8:4b:1e:5f:42:72:27:b7: 0c:63:a8:aa:8c:05:b5:58:5e:e7:9d:fb:2c:ad:d2: dc:16:bc:8e:c7:c9:6a:18:29:ad:50:e5:7d:8b:8e: 0c:23:19:f2:04:45:11:8a:d3:81:df:90:5e:54:6a: b4:8d:cd:bf:e9:90:97:a7:19:07:72:55:de:4b:cf: ad:d7:31:66:01:d3:72:ba:13:29:91:05:5b:06:50: 82:c9:c0:0a:31:3b:c6:14:47:1d:0f:db:15:be:ef: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C2:B4:86:DD:DF:39:87:73:00:33:AA:45:7D:45:16:4A:D9:44:C3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h8K0ht3fOYdzADOqRX1FFkrZRMM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.42.0/23 Signature Algorithm: sha256WithRSAEncryption 06:7a:40:f9:8e:7c:94:46:ce:e8:74:7a:4d:c3:e2:05:48:d1: e9:3a:eb:ef:49:59:21:97:8e:d3:9d:f0:cb:31:dd:58:72:5f: f8:18:3b:77:82:e8:0d:62:b2:16:23:43:da:96:4d:79:f3:3f: 5f:fc:6a:94:d7:16:37:65:5a:e8:0b:97:de:14:dd:a4:d6:4e: c6:71:57:af:a2:1f:2c:64:82:a0:09:8f:87:de:4a:c3:94:c8: 0b:19:2b:07:58:65:6c:a1:7b:1e:51:fc:81:f2:3a:02:a0:db: 32:6b:a9:0b:e0:23:18:36:3b:43:3f:82:bc:31:a3:60:27:44: 73:ed:f2:e8:6e:93:cd:7d:db:2e:e0:b5:cd:a4:d8:a9:07:6e: 2f:63:fb:6a:f8:c4:36:1a:50:f4:7d:46:1c:79:73:44:fd:7c: a0:0d:6d:be:cb:e6:0f:a8:5f:61:f7:0f:74:c8:ef:15:e1:0c: 99:6b:2e:68:70:38:21:d7:ec:36:a8:05:e2:28:7d:b3:7e:f4: 1b:3a:4c:66:ac:27:18:a5:95:6b:42:2a:e1:e0:bf:a8:ec:d7: ea:f1:e1:7d:1c:ac:04:ad:10:f9:e4:62:b9:d7:a1:92:46:7c: 7c:72:d4:07:da:65:e6:9d:cd:9b:ff:cb:3c:e7:72:50:59:e9: a0:71:b6:87 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQ4NDVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg3QzJCNDg2RERERjM5 ODc3MzAwMzNBQTQ1N0Q0NTE2NEFEOTQ0QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC84uCUZbnl7WLlFF5inqThq9sEKMfDd8nxOzkIsQS5JSMgxEWJ 6GwSRHS8bCYryTCnFkEdlZwff1AzxrzLiZ8R+nrmQwZD8JkIt+B6sALcj/3lW8pa bR1tUIl+/IM0PADa+hgoZ+tEJfycfcTfMjA8eNSY7iF5OhnQU4E/XHIlRuXpiTPz hCGiLvq/6wRH+8WEWRTUNn4vojaq3mPoSx5fQnIntwxjqKqMBbVYXued+yyt0twW vI7HyWoYKa1Q5X2LjgwjGfIERRGK04HfkF5UarSNzb/pkJenGQdyVd5Lz63XMWYB 03K6EymRBVsGUILJwAoxO8YURx0P2xW+71xRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUh8K0ht3fOYdzADOqRX1FFkrZRMMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2g4SzBodDNmT1lkekFET3FSWDFGRmtyWlJNTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYiowDQYJKoZIhvcNAQELBQADggEBAAZ6QPmOfJRGzuh0ek3D4gVI0ek6 6+9JWSGXjtOd8Msx3VhyX/gYO3eC6A1ishYjQ9qWTXnzP1/8apTXFjdlWugLl94U 3aTWTsZxV6+iHyxkgqAJj4feSsOUyAsZKwdYZWyhex5R/IHyOgKg2zJrqQvgIxg2 O0M/grwxo2AnRHPt8uhuk8192y7gtc2k2KkHbi9j+2r4xDYaUPR9Rhx5c0T9fKAN bb7L5g+oX2H3D3TI7xXhDJlrLmhwOCHX7DaoBeIofbN+9Bs6TGasJxillWtCKuHg v6js1+rx4X0crAStEPnkYrnXoZJGfHxy1AfaZeadzZv/yzznclBZ6aBxtoc= -----END CERTIFICATE-----Generated at Mon Mar 2 11:26:28 2026 by rpki-client