$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jvMbVD8ZwkNVy7gvUeQtlGG7RNY.roa File: jvMbVD8ZwkNVy7gvUeQtlGG7RNY.roa (raw, json) Hash identifier: B5S5Dq54aKYaczufjmDoiqeX9UCajWvm7ee2f+rRSbs= Subject key identifier: 8E:F3:1B:54:3F:19:C2:43:55:CB:B8:2F:51:E4:2D:94:61:BB:44:D6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1262 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jvMbVD8ZwkNVy7gvUeQtlGG7RNY.roa Signing time: Sun 01 Mar 2026 03:00:29 +0000 ROA not before: Sun 01 Mar 2026 03:00:29 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4706 (0x1262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:00:29 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=8EF31B543F19C24355CBB82F51E42D9461BB44D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ff:72:4d:3a:5c:29:cf:45:c1:c4:ec:5b:8d: 9b:70:ed:ba:ce:5e:f2:74:25:b9:99:ef:75:01:7e: 4d:b1:83:70:dc:28:fa:f7:ef:30:34:0b:01:40:2f: 1a:7d:01:2e:c2:e8:ef:ff:45:e0:5e:b3:b5:2f:cb: 33:0c:aa:27:e0:e9:4c:11:48:6f:7b:9d:f4:54:d2: f8:8e:b6:49:b8:74:e9:3c:6a:64:d1:7a:ee:f9:7b: 57:c9:9a:81:7c:56:25:7f:25:80:5d:16:b2:d7:34: 09:f9:b6:3e:49:b3:1d:28:ae:fc:8b:35:53:b8:c1: 5c:92:ad:f9:87:3e:10:4f:54:e0:e8:71:d4:46:eb: 3e:88:8f:b7:88:5f:ef:09:be:3f:74:1b:ca:e3:6c: a0:86:dc:b6:97:93:8a:8d:73:ab:73:14:21:08:62: f2:31:15:e0:9a:73:6f:12:81:27:0a:36:b6:5b:df: 7f:f7:47:2d:b5:f0:6a:0f:90:9b:6a:14:59:22:dc: 47:e2:d4:e8:ca:e7:c3:52:2f:ae:a5:3e:30:f6:c6: f5:35:03:e4:17:ed:15:30:e8:53:63:5c:9c:27:1f: 8e:5d:1a:28:20:c4:51:3f:3a:c8:31:ab:40:bd:43: 1e:f2:ad:f4:8e:35:ac:9b:4a:c7:70:18:4f:af:b8: 03:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F3:1B:54:3F:19:C2:43:55:CB:B8:2F:51:E4:2D:94:61:BB:44:D6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jvMbVD8ZwkNVy7gvUeQtlGG7RNY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.18.0/24 Signature Algorithm: sha256WithRSAEncryption 42:27:34:50:85:d6:e5:b3:94:b6:5d:1d:da:77:7d:8e:dc:e2: 1d:3b:1d:a2:5e:95:c9:38:03:a8:d3:03:e4:15:f1:bb:d6:29: 77:f4:58:12:20:c1:f7:ad:8a:4e:38:cf:62:d2:ed:6f:06:92: 27:e5:9d:99:10:f5:d7:f9:72:7d:ce:bd:95:e9:cc:12:ae:fd: 5b:47:b1:64:1e:91:2a:25:c7:a6:11:d2:0d:ce:2c:29:9f:b8: 5c:03:8b:f1:8c:ac:93:ca:b6:e0:11:92:c6:bf:24:d7:e1:1b: 25:2d:bd:45:bb:dd:b7:c8:a3:a3:8b:9c:f1:83:94:5d:fa:e3: f1:5f:55:4a:a2:e9:40:a9:cc:b4:3d:f2:26:fa:c4:eb:31:f7: d7:fb:4b:d6:1a:7d:f3:6d:ea:57:f6:24:df:c0:ce:ac:aa:5f: 3f:71:bf:fe:79:0d:b5:fd:d6:a2:ce:77:aa:4a:b9:ca:88:f6: cb:7a:d4:55:2d:c5:28:a7:b7:08:c1:3b:88:35:d5:5e:4a:47: 06:f5:14:28:4f:62:ab:a3:ba:1f:fe:b6:20:cf:43:75:86:d7: d2:bf:5b:64:38:b4:52:21:9b:d5:22:22:99:31:6d:2e:34:e6: 36:5d:86:27:be:e5:4f:95:eb:e7:9b:bf:0f:34:1b:4f:6c:08: d6:c1:70:20 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzAwMjlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhFRjMxQjU0M0YxOUMy NDM1NUNCQjgyRjUxRTQyRDk0NjFCQjQ0RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI/3JNOlwpz0XBxOxbjZtw7brOXvJ0JbmZ73UBfk2xg3DcKPr3 7zA0CwFALxp9AS7C6O//ReBes7UvyzMMqifg6UwRSG97nfRU0viOtkm4dOk8amTR eu75e1fJmoF8ViV/JYBdFrLXNAn5tj5Jsx0orvyLNVO4wVySrfmHPhBPVODocdRG 6z6Ij7eIX+8Jvj90G8rjbKCG3LaXk4qNc6tzFCEIYvIxFeCac28SgScKNrZb33/3 Ry218GoPkJtqFFki3Efi1OjK58NSL66lPjD2xvU1A+QX7RUw6FNjXJwnH45dGigg xFE/Osgxq0C9Qx7yrfSONaybSsdwGE+vuAM3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjvMbVD8ZwkNVy7gvUeQtlGG7RNYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2p2TWJWRDhad2tOVnk3Z3ZVZVF0bEdHN1JOWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYhIwDQYJKoZIhvcNAQELBQADggEBAEInNFCF1uWzlLZdHdp3fY7c4h07 HaJelck4A6jTA+QV8bvWKXf0WBIgwfetik44z2LS7W8GkiflnZkQ9df5cn3OvZXp zBKu/VtHsWQekSolx6YR0g3OLCmfuFwDi/GMrJPKtuARksa/JNfhGyUtvUW73bfI o6OLnPGDlF364/FfVUqi6UCpzLQ98ib6xOsx99f7S9YaffNt6lf2JN/AzqyqXz9x v/55DbX91qLOd6pKucqI9st61FUtxSintwjBO4g11V5KRwb1FChPYqujuh/+tiDP Q3WG19K/W2Q4tFIhm9UiIpkxbS405jZdhie+5U+V6+ebvw80G09sCNbBcCA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:01:40 2026 by rpki-client