$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lDtvF7cbUhA7Yhh0DbQri5HcwCE.roa File: lDtvF7cbUhA7Yhh0DbQri5HcwCE.roa (raw, json) Hash identifier: jTIKFJhtDYxpq7r9u/J+2/aS+vmrocpLZrE7RVh2fuA= Subject key identifier: 94:3B:6F:17:B7:1B:52:10:3B:62:18:74:0D:B4:2B:8B:91:DC:C0:21 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 10BE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lDtvF7cbUhA7Yhh0DbQri5HcwCE.roa Signing time: Sun 01 Mar 2026 01:49:23 +0000 ROA not before: Sun 01 Mar 2026 01:49:23 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4286 (0x10be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:49:23 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=943B6F17B71B52103B6218740DB42B8B91DCC021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:be:f2:4e:81:7d:3f:7a:3c:22:f5:5d:00: 12:7c:2a:87:c8:eb:70:d5:0e:42:96:f0:13:9b:47: c1:9c:de:65:a0:5e:79:18:ba:47:7c:0b:d4:eb:46: f3:3f:95:8e:17:e0:ad:a7:1e:e2:e8:e7:44:bd:a4: 2f:66:37:57:c1:e6:7b:e3:b7:91:f0:79:53:16:bc: 90:99:1b:77:68:3c:d0:73:6c:d7:23:54:b2:d0:8f: 96:63:67:65:3b:45:5e:18:b2:f1:1d:d7:02:2a:38: 44:fb:da:c2:44:4d:03:5b:e4:b1:11:ad:ef:de:d9: 9c:de:6b:9d:aa:d4:b1:d2:65:8b:48:15:30:52:00: 85:a5:df:e0:08:08:68:f0:85:bf:cf:65:a5:f5:6d: 7e:87:8f:88:76:88:16:95:b9:98:96:4f:97:fb:00: 35:72:18:e0:9d:8f:ee:57:fd:8f:49:b7:68:47:af: c6:aa:e1:7a:a1:a6:f7:18:34:de:9d:ad:d0:6c:57: d8:1a:d7:0e:b2:01:5b:ce:ff:a9:b8:dd:cd:6f:76: cd:e1:3f:97:5f:37:e2:4e:40:41:39:fc:9a:7a:d7: 75:1e:d9:97:6d:60:56:21:92:3d:64:bb:28:8b:5f: 07:49:da:d7:25:d3:7c:bf:ec:8f:91:6a:8c:41:4d: 62:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3B:6F:17:B7:1B:52:10:3B:62:18:74:0D:B4:2B:8B:91:DC:C0:21 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lDtvF7cbUhA7Yhh0DbQri5HcwCE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.4.0/23 Signature Algorithm: sha256WithRSAEncryption 89:09:00:ce:ac:bc:3d:1d:84:7a:1a:da:02:2a:30:c9:0a:a5: 45:65:bd:8e:16:d1:25:f2:2b:9a:9a:1d:c2:0a:e4:83:14:cb: 62:da:2f:5e:fb:0a:cd:d9:bc:44:a0:92:bb:e8:50:3c:c3:c0: 06:71:e7:81:d5:73:9e:7a:15:d4:90:4b:99:3c:93:75:5d:98: 9f:34:38:a0:7e:42:6d:f6:65:6f:bf:f1:e6:dc:ba:3c:07:34: 56:6d:5c:f6:5a:65:5e:cc:84:bb:2f:86:6c:36:e2:b5:3c:78: 8a:3f:b0:38:75:82:fb:38:d1:1d:02:89:c1:0f:3a:6b:b8:1f: cf:0a:b6:8c:52:64:51:27:ee:75:b8:6e:89:5a:ab:1b:53:16: b2:4b:d1:ab:79:18:23:8c:0b:60:4c:ad:db:ea:dd:4e:01:33: 17:af:cb:b9:11:77:bb:25:cc:23:49:3d:d2:d6:d0:31:91:23: 73:4e:3e:93:65:c3:d1:f7:88:4a:11:41:ab:ce:ef:88:8c:43: 24:97:b8:eb:f3:12:74:f0:e9:9b:f2:94:84:f1:12:1b:83:f7: e2:dc:2f:37:1d:3f:95:9b:c9:0b:a8:c6:26:53:3f:23:f6:0b: fb:f4:56:5c:15:8b:c0:ff:f0:80:21:8c:56:e1:70:b7:01:4a: 89:fc:1f:23 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTQ5MjNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk0M0I2RjE3QjcxQjUy MTAzQjYyMTg3NDBEQjQyQjhCOTFEQ0MwMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFVb7yToF9P3o8IvVdABJ8KofI63DVDkKW8BObR8Gc3mWgXnkY ukd8C9TrRvM/lY4X4K2nHuLo50S9pC9mN1fB5nvjt5HweVMWvJCZG3doPNBzbNcj VLLQj5ZjZ2U7RV4YsvEd1wIqOET72sJETQNb5LERre/e2Zzea52q1LHSZYtIFTBS AIWl3+AICGjwhb/PZaX1bX6Hj4h2iBaVuZiWT5f7ADVyGOCdj+5X/Y9Jt2hHr8aq 4XqhpvcYNN6drdBsV9ga1w6yAVvO/6m43c1vds3hP5dfN+JOQEE5/Jp613Ue2Zdt YFYhkj1kuyiLXwdJ2tcl03y/7I+RaoxBTWIxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlDtvF7cbUhA7Yhh0DbQri5HcwCEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2xEdHZGN2NiVWhBN1loaDBEYlFyaTVIY3dDRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYAQwDQYJKoZIhvcNAQELBQADggEBAIkJAM6svD0dhHoa2gIqMMkKpUVl vY4W0SXyK5qaHcIK5IMUy2LaL177Cs3ZvESgkrvoUDzDwAZx54HVc556FdSQS5k8 k3VdmJ80OKB+Qm32ZW+/8ebcujwHNFZtXPZaZV7MhLsvhmw24rU8eIo/sDh1gvs4 0R0CicEPOmu4H88KtoxSZFEn7nW4bolaqxtTFrJL0at5GCOMC2BMrdvq3U4BMxev y7kRd7slzCNJPdLW0DGRI3NOPpNlw9H3iEoRQavO74iMQySXuOvzEnTw6ZvylITx EhuD9+LcLzcdP5WbyQuoxiZTPyP2C/v0VlwVi8D/8IAhjFbhcLcBSon8HyM= -----END CERTIFICATE-----Generated at Mon Mar 2 05:17:31 2026 by rpki-client