$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hZHabEqjq2FJnKFf_xsmFSdWfJs.roa File: hZHabEqjq2FJnKFf_xsmFSdWfJs.roa (raw, json) Hash identifier: UDQDyBvylMP+nAnqOy2bQwmBzt6U+oeDOlGMT+81KsA= Subject key identifier: 85:91:DA:6C:4A:A3:AB:61:49:9C:A1:5F:FF:1B:26:15:27:56:7C:9B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 11EE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hZHabEqjq2FJnKFf_xsmFSdWfJs.roa Signing time: Sun 01 Mar 2026 02:44:30 +0000 ROA not before: Sun 01 Mar 2026 02:44:30 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.66.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4590 (0x11ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:44:30 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=8591DA6C4AA3AB61499CA15FFF1B261527567C9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9c:44:ca:f9:ac:68:0b:6c:ef:44:25:ad:18: 8c:d1:79:2c:34:c6:53:7b:fc:da:c0:1d:d0:a9:87: 3f:9a:37:68:23:36:f6:9c:87:c7:fc:e5:9b:6d:35: cb:8d:c6:c6:7b:4e:c3:15:62:ba:a1:8b:d2:a6:33: 34:85:85:71:63:ee:f2:12:ca:1b:a3:09:79:52:3a: 36:26:ed:0b:c6:ce:9f:f2:0a:ac:91:6b:da:eb:e4: aa:b6:e6:1f:d3:15:cf:cd:1e:20:72:31:64:8d:60: bd:41:a3:24:37:54:ea:16:ee:1b:7c:4e:06:7e:dd: c0:78:13:4e:5b:a4:35:47:c4:a8:ac:28:73:df:cb: df:99:c8:c8:c7:63:24:42:06:34:53:95:8e:ce:45: f8:11:f7:41:66:a6:9b:63:b0:a1:89:e5:36:f2:8f: a7:28:03:41:ea:57:f9:4c:98:1e:2c:94:9d:f6:a4: fe:8d:9d:bc:ed:83:96:91:b7:a5:e1:a2:0e:91:a9: 34:78:f0:4d:cd:a1:b5:78:61:ae:40:35:b8:39:3b: c9:3a:ce:fb:81:bc:56:2a:d5:6d:f3:32:a8:7b:b2: 6c:56:17:32:63:49:50:50:c4:5b:4c:b9:1f:52:80: f0:f0:6f:40:b7:0e:88:1f:ff:16:77:0e:e1:a5:e0: 85:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:91:DA:6C:4A:A3:AB:61:49:9C:A1:5F:FF:1B:26:15:27:56:7C:9B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hZHabEqjq2FJnKFf_xsmFSdWfJs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.112.0/20 Signature Algorithm: sha256WithRSAEncryption 6a:f7:68:17:0f:3e:72:54:c3:8b:4a:b9:89:eb:29:3c:de:fc: 9a:a3:b7:89:b5:9d:39:1d:0c:d1:c4:10:c8:61:63:27:6c:a8: c2:06:32:da:24:35:db:63:67:cf:7e:a2:2e:70:8c:f6:c5:72: f2:e2:8d:1c:84:dd:05:33:53:d2:cd:6e:dc:e7:80:c7:e4:7d: d9:f0:b3:f8:88:d9:61:82:3d:a7:e6:9d:bc:94:73:c3:76:e9: b5:43:83:2e:a9:af:20:58:45:33:a6:71:f5:2d:ac:61:6a:e9: 0b:45:fa:95:c8:79:79:db:50:63:7e:93:d2:f6:ec:16:71:5b: e3:b8:18:7a:55:27:be:e8:81:c9:1e:ce:05:5b:80:04:8e:1a: a4:ba:a5:79:61:c3:5a:f6:95:8f:78:cd:b2:0f:d1:d6:2c:6e: 5e:29:fa:39:86:88:04:82:0a:e7:c2:80:12:58:80:39:96:2d: d3:26:b6:87:28:59:bf:7d:5b:a8:43:13:8c:c2:1b:a6:a8:fe: 3a:d7:85:d1:93:26:7e:f8:fb:58:cf:05:c2:e9:d1:90:e0:d8: d6:32:1d:81:bb:83:f2:46:fe:ca:fe:d2:54:78:cf:19:4b:ae: 26:23:55:c8:a4:01:fe:cb:a4:39:bf:c5:74:bb:17:41:a7:a1: 29:b8:49:7b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQ0MzBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg1OTFEQTZDNEFBM0FC NjE0OTlDQTE1RkZGMUIyNjE1Mjc1NjdDOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCknETK+axoC2zvRCWtGIzReSw0xlN7/NrAHdCphz+aN2gjNvac h8f85ZttNcuNxsZ7TsMVYrqhi9KmMzSFhXFj7vISyhujCXlSOjYm7QvGzp/yCqyR a9rr5Kq25h/TFc/NHiByMWSNYL1BoyQ3VOoW7ht8TgZ+3cB4E05bpDVHxKisKHPf y9+ZyMjHYyRCBjRTlY7ORfgR90FmpptjsKGJ5Tbyj6coA0HqV/lMmB4slJ32pP6N nbztg5aRt6Xhog6RqTR48E3NobV4Ya5ANbg5O8k6zvuBvFYq1W3zMqh7smxWFzJj SVBQxFtMuR9SgPDwb0C3Dogf/xZ3DuGl4IXtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhZHabEqjq2FJnKFf/xsmFSdWfJswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2haSGFiRXFqcTJGSm5LRmZfeHNtRlNkV2ZKcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBQnAwDQYJKoZIhvcNAQELBQADggEBAGr3aBcPPnJUw4tKuYnrKTze/Jqj t4m1nTkdDNHEEMhhYydsqMIGMtokNdtjZ89+oi5wjPbFcvLijRyE3QUzU9LNbtzn gMfkfdnws/iI2WGCPafmnbyUc8N26bVDgy6pryBYRTOmcfUtrGFq6QtF+pXIeXnb UGN+k9L27BZxW+O4GHpVJ77ogckezgVbgASOGqS6pXlhw1r2lY94zbIP0dYsbl4p +jmGiASCCufCgBJYgDmWLdMmtocoWb99W6hDE4zCG6ao/jrXhdGTJn74+1jPBcLp 0ZDg2NYyHYG7g/JG/sr+0lR4zxlLriYjVcikAf7LpDm/xXS7F0GnoSm4SXs= -----END CERTIFICATE-----Generated at Mon Mar 2 09:57:25 2026 by rpki-client