$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lhXU5sK4GcX6faT_pqYvyzEctWM.roa File: lhXU5sK4GcX6faT_pqYvyzEctWM.roa (raw, json) Hash identifier: bqI5uyrRSAS4ggFCmBDQ7FAqNbtEZ3by3WbqjVv50ms= Subject key identifier: 96:15:D4:E6:C2:B8:19:C5:FA:7D:A4:FF:A6:A6:2F:CB:31:1C:B5:63 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12D1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lhXU5sK4GcX6faT_pqYvyzEctWM.roa Signing time: Sun 01 Mar 2026 03:16:29 +0000 ROA not before: Sun 01 Mar 2026 03:16:29 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.106.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4817 (0x12d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:16:29 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=9615D4E6C2B819C5FA7DA4FFA6A62FCB311CB563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f6:de:c4:46:94:d8:ec:30:10:76:29:fd:36: ec:e7:40:62:24:a0:41:66:0b:e0:32:60:9f:8b:ca: 5d:7c:b3:06:e0:48:a8:c2:d4:44:f7:da:6b:ae:c2: 77:b5:3f:ab:2b:9e:c4:19:80:64:db:4b:49:9a:de: 7e:cd:79:34:f1:c6:3b:82:26:c1:37:df:64:85:cf: 0c:06:12:7c:8f:f0:21:3c:e3:e0:f2:62:e4:2b:c9: a3:51:1b:a2:d7:8d:e4:17:2a:2f:1c:f5:73:7e:74: 9d:9a:91:7b:08:67:67:26:86:33:35:69:8b:4e:f0: 57:f1:2e:7d:30:e7:07:58:84:58:20:04:59:11:46: 63:1b:f9:53:be:e1:5f:0b:15:96:5d:0a:a8:a5:2a: 90:1e:d6:a5:86:89:eb:62:08:6b:30:be:44:de:3e: 1d:32:a6:0a:09:81:20:0e:26:8d:54:41:50:9c:3e: 1e:03:8f:bc:56:ad:1b:34:8b:bf:cd:de:d2:4d:93: 48:b0:c1:54:b2:ce:4d:06:f8:c9:50:68:58:25:30: e5:80:79:92:0e:54:ed:90:23:bf:a2:ca:95:0d:55: d3:5c:c9:e5:99:0d:2e:2a:a2:58:d6:f6:27:2e:64: ad:04:d3:8f:54:03:21:1a:f4:f6:02:00:6a:05:bf: 5a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:15:D4:E6:C2:B8:19:C5:FA:7D:A4:FF:A6:A6:2F:CB:31:1C:B5:63 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lhXU5sK4GcX6faT_pqYvyzEctWM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.92.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:80:71:27:f0:06:f6:09:d7:f2:10:be:53:6c:24:db:59:37: 3b:ab:ba:4c:2e:dc:4a:b6:35:c0:17:4b:ac:8f:d8:96:35:84: 7c:57:9b:57:65:23:43:ee:18:fd:c6:76:7b:6e:c3:71:27:d8: 0c:4f:d8:84:e5:e8:ab:fa:5f:2d:d7:2c:af:fb:ab:a7:0d:50: 9a:bc:69:8d:41:bc:22:c6:26:93:47:50:86:6f:72:83:d0:5d: 28:95:b4:e6:8b:ee:c7:e8:4d:4e:87:50:9b:d3:5f:7e:fb:f2: e1:a9:a7:9b:a0:2e:03:28:88:cb:33:5b:39:06:6c:74:e7:1c: 0b:8d:c1:a4:9c:e1:5d:06:37:6a:84:07:e5:e5:33:16:95:6b: a8:a2:0f:5a:32:a1:03:8a:00:6d:15:56:94:6f:0c:50:19:75: 96:71:b7:e8:29:51:d3:25:2c:56:cf:0c:f9:d7:97:f9:12:35: 5e:44:ab:7f:c3:1c:a3:e0:e8:b5:d8:4e:0a:8c:92:d2:38:a2: 43:21:c2:61:66:13:1a:12:56:f3:0c:f5:20:0f:4f:da:aa:71: 94:57:90:97:04:82:32:6a:ef:f2:5e:26:78:5a:91:3c:83:45: bf:a7:82:36:d5:0b:6f:ee:63:b5:d1:8e:64:46:b2:26:5a:50: 29:10:62:54 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzE2MjlaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk2MTVENEU2QzJCODE5 QzVGQTdEQTRGRkE2QTYyRkNCMzExQ0I1NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq9t7ERpTY7DAQdin9NuznQGIkoEFmC+AyYJ+Lyl18swbgSKjC 1ET32muuwne1P6srnsQZgGTbS0ma3n7NeTTxxjuCJsE332SFzwwGEnyP8CE84+Dy YuQryaNRG6LXjeQXKi8c9XN+dJ2akXsIZ2cmhjM1aYtO8FfxLn0w5wdYhFggBFkR RmMb+VO+4V8LFZZdCqilKpAe1qWGietiCGswvkTePh0ypgoJgSAOJo1UQVCcPh4D j7xWrRs0i7/N3tJNk0iwwVSyzk0G+MlQaFglMOWAeZIOVO2QI7+iypUNVdNcyeWZ DS4qoljW9icuZK0E049UAyEa9PYCAGoFv1qNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlhXU5sK4GcX6faT/pqYvyzEctWMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2xoWFU1c0s0R2NYNmZhVF9wcVl2eXpFY3RXTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxalwwDQYJKoZIhvcNAQELBQADggEBADqAcSfwBvYJ1/IQvlNsJNtZNzur ukwu3Eq2NcAXS6yP2JY1hHxXm1dlI0PuGP3Gdntuw3En2AxP2ITl6Kv6Xy3XLK/7 q6cNUJq8aY1BvCLGJpNHUIZvcoPQXSiVtOaL7sfoTU6HUJvTX3778uGpp5ugLgMo iMszWzkGbHTnHAuNwaSc4V0GN2qEB+XlMxaVa6iiD1oyoQOKAG0VVpRvDFAZdZZx t+gpUdMlLFbPDPnXl/kSNV5Eq3/DHKPg6LXYTgqMktI4okMhwmFmExoSVvMM9SAP T9qqcZRXkJcEgjJq7/JeJnhakTyDRb+ngjbVC2/uY7XRjmRGsiZaUCkQYlQ= -----END CERTIFICATE-----Generated at Mon Mar 2 10:06:52 2026 by rpki-client