$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kmRRwX89mSIPlAkIqII6Ijtff3A.roa File: kmRRwX89mSIPlAkIqII6Ijtff3A.roa (raw, json) Hash identifier: tekpzbVM4zx+llpiqmDAr4NI6bYl2Vvi7brPIwZuc6s= Subject key identifier: 92:64:51:C1:7F:3D:99:22:0F:94:09:08:A8:82:3A:22:3B:5F:7F:70 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1268 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kmRRwX89mSIPlAkIqII6Ijtff3A.roa Signing time: Sun 01 Mar 2026 03:00:32 +0000 ROA not before: Sun 01 Mar 2026 03:00:32 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4712 (0x1268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:00:32 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=926451C17F3D99220F940908A8823A223B5F7F70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:d5:fb:19:77:ec:42:61:ed:86:45:08:14: 6d:6c:3b:4d:5e:29:9b:be:46:1c:1a:18:6a:50:d0: e6:03:7e:be:df:cd:9e:aa:a8:7b:57:3a:8f:82:60: fc:b0:2e:6a:9e:90:9c:08:d0:1b:1c:43:ae:f4:37: f1:21:43:0d:6b:bc:ca:eb:97:55:35:54:4c:f9:41: 3f:3b:71:6f:4d:74:2f:69:c3:3f:23:7c:2e:6a:2c: 52:9c:64:c6:47:89:62:0f:62:67:b6:87:44:51:63: e3:0f:d1:f5:32:34:47:d4:d0:ab:d9:74:80:1d:44: 0b:f7:3d:d5:04:fe:ef:5b:d2:16:6b:0c:84:cb:69: 92:e9:74:13:8c:f6:06:81:39:9c:f8:46:af:b2:60: d7:fa:0c:0e:fa:78:02:3a:d9:65:42:ef:a4:0f:8f: 1c:d4:d6:c6:79:3d:e1:de:5e:7f:88:ab:58:05:78: fd:ec:31:8b:83:07:cc:07:2d:9b:de:77:57:db:2d: 3e:fc:98:13:b7:9c:5d:8b:1c:07:80:c1:4b:4c:66: 5d:5b:7c:85:d1:2c:4e:30:c2:24:f5:76:3c:1d:89: 89:c7:21:e8:65:92:b3:86:18:00:3a:b1:18:b4:59: c4:9b:c8:6c:0d:ca:5c:ef:e2:5b:c9:b5:ce:42:20: 6d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:64:51:C1:7F:3D:99:22:0F:94:09:08:A8:82:3A:22:3B:5F:7F:70 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kmRRwX89mSIPlAkIqII6Ijtff3A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.136.0/23 Signature Algorithm: sha256WithRSAEncryption 21:6f:12:ce:fc:8a:fc:77:b5:7e:95:67:d7:6b:ab:35:aa:bc: 13:a7:b3:0b:45:a3:fc:f7:a9:37:21:ad:24:78:bb:39:c9:89: b0:f3:71:c0:b4:16:4f:4c:4c:e6:86:b6:23:fc:9a:91:93:65: e3:80:3c:97:2a:c9:85:c4:6f:9d:51:ec:37:71:b9:4d:09:4c: 5c:5b:15:dd:6e:7d:99:c1:4e:23:99:2d:2c:d0:9c:9b:df:35: da:84:29:20:ee:4f:8d:01:a3:9c:e6:65:e9:9c:26:d6:ee:2f: 9e:78:7c:88:69:45:73:a2:25:4b:14:0d:37:a5:df:5b:3d:40: 94:99:ee:e8:97:8e:c4:b8:48:cc:25:25:46:bf:32:c5:c8:67: 92:de:5c:cf:c7:ea:6e:29:e9:ea:74:b2:9b:bd:e6:6a:aa:fe: 4f:c7:09:4b:57:ec:6b:1a:17:15:bd:aa:ac:2b:a1:b7:54:0b: b7:de:b9:44:b6:56:7c:c6:14:fe:46:21:c9:31:2e:f5:e1:6c: 56:de:52:b8:2c:77:b1:31:cb:0c:dd:65:e1:ea:b2:33:a5:fd: 5b:f0:f2:1d:45:db:d0:60:3f:4c:6f:dd:82:09:36:f4:a4:13: f7:6d:12:61:94:6d:07:fd:f1:fa:21:eb:06:f5:3a:f3:ad:b5: 99:57:d8:5d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEmgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzAwMzJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkyNjQ1MUMxN0YzRDk5 MjIwRjk0MDkwOEE4ODIzQTIyM0I1RjdGNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6hdX7GXfsQmHthkUIFG1sO01eKZu+RhwaGGpQ0OYDfr7fzZ6q qHtXOo+CYPywLmqekJwI0BscQ670N/EhQw1rvMrrl1U1VEz5QT87cW9NdC9pwz8j fC5qLFKcZMZHiWIPYme2h0RRY+MP0fUyNEfU0KvZdIAdRAv3PdUE/u9b0hZrDITL aZLpdBOM9gaBOZz4Rq+yYNf6DA76eAI62WVC76QPjxzU1sZ5PeHeXn+Iq1gFeP3s MYuDB8wHLZved1fbLT78mBO3nF2LHAeAwUtMZl1bfIXRLE4wwiT1djwdiYnHIehl krOGGAA6sRi0WcSbyGwNylzv4lvJtc5CIG2BAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkmRRwX89mSIPlAkIqII6Ijtff3AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ttUlJ3WDg5bVNJUGxBa0lxSUk2SWp0ZmYzQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYogwDQYJKoZIhvcNAQELBQADggEBACFvEs78ivx3tX6VZ9drqzWqvBOn swtFo/z3qTchrSR4uznJibDzccC0Fk9MTOaGtiP8mpGTZeOAPJcqyYXEb51R7Ddx uU0JTFxbFd1ufZnBTiOZLSzQnJvfNdqEKSDuT40Bo5zmZemcJtbuL554fIhpRXOi JUsUDTel31s9QJSZ7uiXjsS4SMwlJUa/MsXIZ5LeXM/H6m4p6ep0spu95mqq/k/H CUtX7GsaFxW9qqwrobdUC7feuUS2VnzGFP5GIckxLvXhbFbeUrgsd7ExywzdZeHq sjOl/Vvw8h1F29BgP0xv3YIJNvSkE/dtEmGUbQf98foh6wb1OvOttZlX2F0= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:22 2026 by rpki-client