$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kwSJw7u-vMaUeTB6hDa6-ByoF1c.roa File: kwSJw7u-vMaUeTB6hDa6-ByoF1c.roa (raw, json) Hash identifier: YZlH1u1hLE6sZJSLcxeqZyjOFbaCbe/1D7krr5+8TcU= Subject key identifier: 93:04:89:C3:BB:BE:BC:C6:94:79:30:7A:84:36:BA:F8:1C:A8:17:57 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1095 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kwSJw7u-vMaUeTB6hDa6-ByoF1c.roa Signing time: Sun 01 Mar 2026 01:44:42 +0000 ROA not before: Sun 01 Mar 2026 01:44:42 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4245 (0x1095) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:44:42 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=930489C3BBBEBCC69479307A8436BAF81CA81757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:16:ce:3c:e2:e8:50:e1:f1:99:8e:8e:e3: 12:c9:c7:96:e1:97:03:b3:77:69:73:60:85:56:16: 9b:64:bf:63:c2:c7:dc:a8:26:01:1a:f0:ef:94:2e: 0d:34:30:6a:00:5d:a1:ce:71:4e:25:e8:a8:78:b1: 3a:a1:81:5b:22:0c:2d:91:45:71:17:a1:b0:6f:f5: 58:18:fc:1f:78:74:50:32:ca:5c:37:69:3f:a1:32: 6e:e8:7f:2a:9f:42:4d:0c:4a:7d:c9:57:d0:f4:be: 37:41:cd:46:7f:08:cb:8b:d4:9e:0c:12:4e:1d:14: ba:36:5a:ed:3a:84:7f:2b:f6:2f:35:ea:c4:34:09: 7a:f0:95:e5:fc:6c:9e:3e:fb:66:75:9b:9e:e5:42: 18:20:96:1f:56:ba:b4:d1:20:f0:c7:90:1f:c3:c0: d3:31:7d:8b:24:41:ac:9f:14:c5:31:dd:d0:a8:41: 82:ad:cb:82:c9:71:aa:76:b5:05:cf:c0:ce:0f:8b: 7c:35:5b:1e:71:eb:e4:68:7b:b6:7d:4e:a7:5a:ef: 08:f2:1a:12:4f:ea:ad:be:16:90:93:c4:57:c9:48: 31:da:b4:16:60:46:85:46:3f:9e:b7:29:09:61:6d: a3:53:ef:86:ac:63:dc:b2:3e:6a:39:88:48:7c:b4: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:04:89:C3:BB:BE:BC:C6:94:79:30:7A:84:36:BA:F8:1C:A8:17:57 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kwSJw7u-vMaUeTB6hDa6-ByoF1c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.48.0/24 Signature Algorithm: sha256WithRSAEncryption 94:6e:ab:8d:b1:6b:a4:53:a6:eb:b0:57:a1:79:47:aa:3f:d1: 7e:24:63:78:64:21:43:74:ba:7a:51:48:00:be:8e:87:7f:f0: 4b:73:79:0b:18:01:1f:5e:00:8b:b6:29:e7:fa:e4:36:68:24: f0:f5:42:26:7f:a3:c0:19:0a:4a:9d:68:5d:88:bf:7a:19:8f: 7c:dc:7c:67:5e:13:a2:2e:ae:4c:89:9e:2b:69:5e:99:1e:87: 2c:31:2a:d9:4a:7d:fb:68:f2:8d:4f:2e:c0:71:cc:e2:77:85: 68:8f:b0:d8:c5:7e:b2:1e:06:5a:b3:b3:33:80:82:a4:56:0d: 24:ae:3b:27:89:17:55:27:09:b0:97:6d:bf:16:c7:13:a0:c9: e8:10:e1:95:aa:14:b3:bf:be:2b:f1:c0:3a:fb:24:db:bb:aa: 14:59:6e:fe:de:5a:ab:06:ef:65:0d:6c:0d:6c:08:3b:5a:16: 58:04:e6:db:6c:0e:12:82:7d:56:11:4d:44:8f:ae:4b:97:03: 53:5e:13:e1:5c:f9:41:6b:05:56:ee:db:51:cd:98:58:60:85: 12:b5:b1:f6:15:29:da:b1:5d:98:23:32:4a:a2:80:37:56:5a: 10:dc:ad:e9:98:b2:04:49:c9:db:94:98:3b:ac:97:45:be:df: b7:4a:7f:85 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTQ0NDJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkzMDQ4OUMzQkJCRUJD QzY5NDc5MzA3QTg0MzZCQUY4MUNBODE3NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqGhbOPOLoUOHxmY6O4xLJx5bhlwOzd2lzYIVWFptkv2PCx9yo JgEa8O+ULg00MGoAXaHOcU4l6Kh4sTqhgVsiDC2RRXEXobBv9VgY/B94dFAyylw3 aT+hMm7ofyqfQk0MSn3JV9D0vjdBzUZ/CMuL1J4MEk4dFLo2Wu06hH8r9i816sQ0 CXrwleX8bJ4++2Z1m57lQhgglh9WurTRIPDHkB/DwNMxfYskQayfFMUx3dCoQYKt y4LJcap2tQXPwM4Pi3w1Wx5x6+Roe7Z9Tqda7wjyGhJP6q2+FpCTxFfJSDHatBZg RoVGP563KQlhbaNT74asY9yyPmo5iEh8tOSVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkwSJw7u+vMaUeTB6hDa6+ByoF1cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2t3U0p3N3Utdk1hVWVUQjZoRGE2LUJ5b0YxYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYDAwDQYJKoZIhvcNAQELBQADggEBAJRuq42xa6RTpuuwV6F5R6o/0X4k Y3hkIUN0unpRSAC+jod/8EtzeQsYAR9eAIu2Kef65DZoJPD1QiZ/o8AZCkqdaF2I v3oZj3zcfGdeE6IurkyJnitpXpkehywxKtlKffto8o1PLsBxzOJ3hWiPsNjFfrIe BlqzszOAgqRWDSSuOyeJF1UnCbCXbb8WxxOgyegQ4ZWqFLO/vivxwDr7JNu7qhRZ bv7eWqsG72UNbA1sCDtaFlgE5ttsDhKCfVYRTUSPrkuXA1NeE+Fc+UFrBVbu21HN mFhghRK1sfYVKdqxXZgjMkqigDdWWhDcremYsgRJyduUmDusl0W+37dKf4U= -----END CERTIFICATE-----Generated at Mon Mar 2 03:54:44 2026 by rpki-client