$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iFVmLR70A_Cagq2vei4F0otlZ5w.roa File: iFVmLR70A_Cagq2vei4F0otlZ5w.roa (raw, json) Hash identifier: r2I7wTxiQSelp/AmRhqxFeNvR5yP9ssPWUhp6YHTWN0= Subject key identifier: 88:55:66:2D:1E:F4:03:F0:9A:82:AD:AF:7A:2E:05:D2:8B:65:67:9C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12AF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iFVmLR70A_Cagq2vei4F0otlZ5w.roa Signing time: Sun 01 Mar 2026 03:12:33 +0000 ROA not before: Sun 01 Mar 2026 03:12:33 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4783 (0x12af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:12:33 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=8855662D1EF403F09A82ADAF7A2E05D28B65679C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:78:32:e8:8a:61:1e:79:c2:3f:55:75:f5: b4:51:dd:c8:0f:c7:a1:32:e7:b6:2e:82:cd:1c:52: eb:f8:11:81:2d:d4:e1:fe:db:2d:63:75:da:dc:e3: 08:bc:fa:4f:cc:be:1e:90:1e:1e:93:0f:89:e4:2c: 7a:32:45:d2:6a:a8:e6:39:ff:44:64:f6:1e:a5:fc: fa:9d:b4:b6:e7:43:75:32:26:18:15:d4:d1:a5:46: 01:e8:9e:b0:5d:d3:4c:87:52:9c:c9:93:92:81:33: 47:6a:d6:9c:a7:bc:06:d4:a2:fa:95:0d:44:3e:53: 5a:28:2f:f3:c2:d3:e8:94:e1:96:53:48:89:49:5c: 53:4b:a0:45:39:be:f7:af:40:37:96:a4:1e:4b:e2: 55:45:6b:e8:be:15:1f:c3:bb:7c:8d:ee:45:dc:03: 7d:f0:24:3e:e9:c6:18:bf:f0:b9:df:23:ea:89:65: 9f:38:11:9e:72:dd:ed:ca:40:c9:16:31:30:8c:93: 8e:38:d6:e5:c6:01:b4:ad:72:ac:13:f5:dc:9b:8f: 46:7d:3a:40:96:c6:5d:22:cb:e9:65:3c:e8:e7:d2: b6:3e:c7:f4:41:97:d1:08:c3:5b:e1:82:e7:8d:5d: 62:62:28:67:a6:ff:e7:46:1f:b6:23:a4:00:b0:18: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:55:66:2D:1E:F4:03:F0:9A:82:AD:AF:7A:2E:05:D2:8B:65:67:9C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iFVmLR70A_Cagq2vei4F0otlZ5w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.16.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:35:fb:0b:fb:7c:62:37:7f:62:d9:60:df:cf:07:26:31:bb: 1a:bb:0d:9d:5b:77:f9:bc:b2:6b:39:0f:2d:e7:55:d4:21:eb: f4:ef:dd:43:7c:49:16:7d:cd:dd:04:10:67:89:00:f4:56:e7: ee:d9:49:c4:d9:1e:38:db:8d:fa:82:60:99:17:68:df:c6:16: ac:1f:ae:49:1c:5b:67:f6:59:47:4a:63:e4:1f:7a:fd:65:9f: 10:ce:ac:00:cc:8c:2c:a7:ae:5c:6c:6d:4e:a6:d5:e8:a0:c8: 36:e4:51:18:03:e8:1f:f7:e0:67:e0:df:d9:03:96:1b:2e:25: 2e:72:70:f1:4f:b7:91:f9:95:d7:33:79:f3:ef:d5:90:21:08: 83:f8:77:15:5a:fe:98:34:fa:8a:cc:1e:80:80:01:5a:e3:58: 4a:c3:f7:09:be:76:79:32:b5:39:9a:7c:37:f1:07:fc:81:05: bf:52:51:0e:c6:1f:0e:b8:0f:63:8c:f7:4b:52:fd:bf:d0:7d: 83:26:a1:5c:04:7c:3c:85:e0:fe:b3:d8:a9:e0:cf:44:52:66: 70:0c:91:48:b6:3e:fa:e1:1b:8a:90:6f:23:26:2b:77:8d:a5: 85:b9:ed:05:cc:35:8f:84:f1:63:10:e4:03:c1:62:48:16:8d: 05:6e:3b:fa -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEq8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzEyMzNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg4NTU2NjJEMUVGNDAz RjA5QTgyQURBRjdBMkUwNUQyOEI2NTY3OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFC3gy6IphHnnCP1V19bRR3cgPx6Ey57Yugs0cUuv4EYEt1OH+ 2y1jddrc4wi8+k/Mvh6QHh6TD4nkLHoyRdJqqOY5/0Rk9h6l/PqdtLbnQ3UyJhgV 1NGlRgHonrBd00yHUpzJk5KBM0dq1pynvAbUovqVDUQ+U1ooL/PC0+iU4ZZTSIlJ XFNLoEU5vvevQDeWpB5L4lVFa+i+FR/Du3yN7kXcA33wJD7pxhi/8LnfI+qJZZ84 EZ5y3e3KQMkWMTCMk4441uXGAbStcqwT9dybj0Z9OkCWxl0iy+llPOjn0rY+x/RB l9EIw1vhgueNXWJiKGem/+dGH7YjpACwGB4pAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUiFVmLR70A/Cagq2vei4F0otlZ5wwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2lGVm1MUjcwQV9DYWdxMnZlaTRGMG90bFo1dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYhAwDQYJKoZIhvcNAQELBQADggEBAG81+wv7fGI3f2LZYN/PByYxuxq7 DZ1bd/m8sms5Dy3nVdQh6/Tv3UN8SRZ9zd0EEGeJAPRW5+7ZScTZHjjbjfqCYJkX aN/GFqwfrkkcW2f2WUdKY+Qfev1lnxDOrADMjCynrlxsbU6m1eigyDbkURgD6B/3 4Gfg39kDlhsuJS5ycPFPt5H5ldczefPv1ZAhCIP4dxVa/pg0+orMHoCAAVrjWErD 9wm+dnkytTmafDfxB/yBBb9SUQ7GHw64D2OM90tS/b/QfYMmoVwEfDyF4P6z2Kng z0RSZnAMkUi2PvrhG4qQbyMmK3eNpYW57QXMNY+E8WMQ5APBYkgWjQVuO/o= -----END CERTIFICATE-----Generated at Mon Mar 2 06:54:20 2026 by rpki-client