$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mNa5VtTbAXPqtzhqEVGjWL1scEI.roa File: mNa5VtTbAXPqtzhqEVGjWL1scEI.roa (raw, json) Hash identifier: dn7JZk4ejQTQ264mUCgOM0iBR6tcZGFq2MDM2jUhMSA= Subject key identifier: 98:D6:B9:56:D4:DB:01:73:EA:B7:38:6A:11:51:A3:58:BD:6C:70:42 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1292 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mNa5VtTbAXPqtzhqEVGjWL1scEI.roa Signing time: Sun 01 Mar 2026 03:08:41 +0000 ROA not before: Sun 01 Mar 2026 03:08:41 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.105.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4754 (0x1292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:08:41 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=98D6B956D4DB0173EAB7386A1151A358BD6C7042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:30:5e:ec:a3:cf:d0:09:88:e2:d7:c6:be:21: d9:81:b2:a6:5a:0f:45:b0:3b:4e:21:e3:7d:e2:b9: bc:78:69:c7:2a:a2:43:dc:ac:3c:35:fd:9b:5e:c6: 63:48:50:87:4f:f7:42:e3:e7:f4:ea:50:7c:de:94: e3:46:8f:a3:d9:50:7c:ce:c2:53:a3:1a:28:69:eb: 70:a4:5f:3b:e6:25:f1:44:3a:59:5b:fa:41:20:2f: 9d:e8:8d:91:57:35:9d:0b:83:a2:e8:88:3c:03:e5: dd:d2:0f:f7:b5:2f:1f:05:12:c4:f6:72:83:df:8a: 6a:1e:2d:61:ac:91:2e:dd:b1:fa:51:47:09:4d:89: 7d:b8:6b:87:45:fb:25:c0:81:4e:24:fb:73:39:f1: 9f:f9:41:e7:ca:32:64:a7:3f:e0:d3:16:13:1e:40: 62:6a:58:3a:12:b6:ac:1b:7a:37:30:37:f2:96:ca: ef:1a:6e:e3:f0:c7:83:0e:1f:01:53:e8:e1:7e:6d: 20:94:33:dd:83:5b:43:d3:b4:ab:9e:41:e7:73:a2: 13:8a:68:6f:eb:3f:7e:f9:52:ed:1d:65:d5:1e:91: be:ab:80:d7:12:a2:6b:b8:ae:f7:49:2d:d9:f8:41: 53:3f:c9:f8:9d:31:16:21:45:7f:b9:2c:18:c6:58: b8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D6:B9:56:D4:DB:01:73:EA:B7:38:6A:11:51:A3:58:BD:6C:70:42 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mNa5VtTbAXPqtzhqEVGjWL1scEI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.12.0/23 Signature Algorithm: sha256WithRSAEncryption b8:b9:df:2c:87:2d:f5:a8:93:16:f6:1f:5e:e8:3b:fe:3a:0c: a6:38:e9:2c:ef:6d:f9:47:54:42:53:ea:4c:b5:60:a6:98:61: da:ef:eb:00:49:fd:ce:28:0d:28:f8:24:e2:53:17:ac:bb:01: 67:b9:9e:82:f1:ea:1d:a1:63:25:29:dc:92:89:80:95:af:c3: 9b:b6:7c:b9:51:b3:bd:e4:54:99:de:32:88:60:e4:27:91:60: b7:78:ca:7e:07:2e:62:8e:1e:ff:6e:e3:5c:cc:08:a8:8d:c0: 5c:93:23:75:e4:37:32:0b:4f:f3:9e:5e:5e:37:52:bc:2d:df: e2:ab:a2:ba:6d:54:6e:b5:8c:a7:4d:92:28:4a:48:f1:bd:47: 83:68:cf:45:43:76:3e:e8:32:50:f8:c1:c2:db:d8:3f:ed:3e: 83:44:98:36:a4:ab:2e:62:e3:56:11:79:d2:64:97:c5:f7:c9: 7a:76:f5:29:d3:02:30:08:61:78:39:98:59:d4:4a:44:05:7c: cf:24:00:fe:f9:6d:7f:f6:ff:b2:5b:d9:74:e0:be:8d:8c:d7: 7e:76:03:8f:e8:e1:f8:b1:83:cb:0e:eb:61:68:5c:ac:7f:7c: b3:2c:44:55:e6:d0:b9:53:46:c3:7b:2a:1b:bf:1a:c9:81:e6: c1:59:16:ed -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEpIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzA4NDFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk4RDZCOTU2RDREQjAx NzNFQUI3Mzg2QTExNTFBMzU4QkQ2QzcwNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD6MF7so8/QCYji18a+IdmBsqZaD0WwO04h433iubx4accqokPc rDw1/ZtexmNIUIdP90Lj5/TqUHzelONGj6PZUHzOwlOjGihp63CkXzvmJfFEOllb +kEgL53ojZFXNZ0Lg6LoiDwD5d3SD/e1Lx8FEsT2coPfimoeLWGskS7dsfpRRwlN iX24a4dF+yXAgU4k+3M58Z/5QefKMmSnP+DTFhMeQGJqWDoStqwbejcwN/KWyu8a buPwx4MOHwFT6OF+bSCUM92DW0PTtKueQedzohOKaG/rP375Uu0dZdUekb6rgNcS omu4rvdJLdn4QVM/yfidMRYhRX+5LBjGWLiZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmNa5VtTbAXPqtzhqEVGjWL1scEIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L21OYTVWdFRiQVhQcXR6aHFFVkdqV0wxc2NFSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaQwwDQYJKoZIhvcNAQELBQADggEBALi53yyHLfWokxb2H17oO/46DKY4 6SzvbflHVEJT6ky1YKaYYdrv6wBJ/c4oDSj4JOJTF6y7AWe5noLx6h2hYyUp3JKJ gJWvw5u2fLlRs73kVJneMohg5CeRYLd4yn4HLmKOHv9u41zMCKiNwFyTI3XkNzIL T/OeXl43Urwt3+KrorptVG61jKdNkihKSPG9R4Noz0VDdj7oMlD4wcLb2D/tPoNE mDakqy5i41YRedJkl8X3yXp29SnTAjAIYXg5mFnUSkQFfM8kAP75bX/2/7Jb2XTg vo2M1352A4/o4fixg8sO62FoXKx/fLMsRFXm0LlTRsN7Khu/GsmB5sFZFu0= -----END CERTIFICATE-----Generated at Mon Mar 2 06:55:41 2026 by rpki-client