$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oCUuCXSalk-vxOWhGL5_mdHtsNc.roa File: oCUuCXSalk-vxOWhGL5_mdHtsNc.roa (raw, json) Hash identifier: S/qKrKUjjrezRe1ZxOQJIdbcVaryM/g+LfOuhisw31M= Subject key identifier: A0:25:2E:09:74:9A:96:4F:AF:C4:E5:A1:18:BE:7F:99:D1:ED:B0:D7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 10D5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oCUuCXSalk-vxOWhGL5_mdHtsNc.roa Signing time: Sun 01 Mar 2026 01:54:48 +0000 ROA not before: Sun 01 Mar 2026 01:54:48 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4309 (0x10d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:54:48 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=A0252E09749A964FAFC4E5A118BE7F99D1EDB0D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:01:49:75:be:79:bc:c4:3f:c7:44:0f:34:4a: 1c:8b:79:ad:73:49:e4:d1:9e:75:51:c6:4b:c8:d3: 03:3a:9d:79:81:b1:4d:f1:5c:d9:44:49:d7:76:cc: aa:cd:48:7c:d6:a7:4e:6c:4a:1b:e0:c1:fd:82:60: ce:b3:a0:d0:d5:48:ad:76:b1:eb:7a:09:38:71:0c: df:a0:41:12:2f:d5:72:69:9e:91:e9:77:9e:b7:0a: 63:b3:83:78:a9:36:66:66:82:f3:0b:8a:85:8a:1b: 85:19:99:0d:77:c5:ca:22:13:f6:da:11:4d:98:ff: e5:d6:77:0f:ad:38:dc:39:82:9a:c1:bc:a1:0a:57: 23:d1:bf:94:8e:7e:b3:b6:60:fa:c1:62:9f:a7:49: 8b:f7:85:29:23:b8:9f:27:d4:f9:2c:45:d3:61:73: 17:f9:d2:f2:a4:fa:22:04:90:f9:a0:47:e4:73:6e: 5c:d2:8a:36:9f:43:b4:0b:b0:d1:5c:ef:63:1f:6b: ab:40:fa:8e:7d:11:4a:b7:42:83:1d:76:82:fb:53: 5c:72:b6:c9:bb:de:0b:41:c9:19:c8:83:cc:8e:27: 3d:25:6f:18:3f:d2:88:7a:59:9a:55:ee:f8:ed:76: 53:97:79:be:3e:24:d0:cd:4c:1f:19:d7:37:3d:f9: 7a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:25:2E:09:74:9A:96:4F:AF:C4:E5:A1:18:BE:7F:99:D1:ED:B0:D7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oCUuCXSalk-vxOWhGL5_mdHtsNc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.192.0/22 Signature Algorithm: sha256WithRSAEncryption 11:c2:5d:85:26:9a:eb:de:3f:0b:75:7d:42:e1:93:90:84:1e: 3c:ae:0b:6c:bb:47:65:37:d3:a5:ca:5b:2c:a7:5d:bb:d5:5b: 29:da:a8:83:9c:73:2b:e2:b4:f7:a5:25:59:91:37:e8:7d:31: 36:0d:9e:da:b3:3e:a7:7d:39:aa:96:5f:a8:d2:7d:38:a8:74: 59:a2:33:26:b7:86:4a:00:a1:2d:34:d8:19:a0:6f:57:df:5a: 4e:05:97:83:4d:a3:1a:a7:72:c1:21:c0:8a:c1:eb:3e:9c:c9: f9:41:ac:12:bc:99:2a:ff:bb:95:84:8f:cb:2b:58:42:c5:0f: 3c:2e:a5:8f:55:7e:90:f8:08:db:ac:9c:bd:24:70:57:41:9d: 84:4e:8a:cf:7d:1e:99:c6:33:c6:6b:5b:02:cc:fb:b9:7e:c9: b0:ce:76:07:44:22:f7:70:66:35:56:ce:62:16:9d:54:05:b1: 29:c9:d9:65:b9:ec:ca:3a:dc:c1:b9:e0:c8:f7:05:0d:0c:9a: bc:c5:05:54:19:d6:bc:77:a5:1b:76:13:ad:fa:5c:58:27:6c: 38:a3:ef:22:8a:7c:56:34:74:92:a6:c7:05:50:a6:bf:c9:fe: 0b:91:63:0d:7f:0e:fa:28:54:cd:1f:da:61:e4:b0:7f:94:fd: c8:f2:b8:64 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICENUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTU0NDhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEwMjUyRTA5NzQ5QTk2 NEZBRkM0RTVBMTE4QkU3Rjk5RDFFREIwRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQAUl1vnm8xD/HRA80ShyLea1zSeTRnnVRxkvI0wM6nXmBsU3x XNlESdd2zKrNSHzWp05sShvgwf2CYM6zoNDVSK12set6CThxDN+gQRIv1XJpnpHp d563CmOzg3ipNmZmgvMLioWKG4UZmQ13xcoiE/baEU2Y/+XWdw+tONw5gprBvKEK VyPRv5SOfrO2YPrBYp+nSYv3hSkjuJ8n1PksRdNhcxf50vKk+iIEkPmgR+RzblzS ijafQ7QLsNFc72Mfa6tA+o59EUq3QoMddoL7U1xytsm73gtByRnIg8yOJz0lbxg/ 0oh6WZpV7vjtdlOXeb4+JNDNTB8Z1zc9+Xo7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoCUuCXSalk+vxOWhGL5/mdHtsNcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L29DVXVDWFNhbGstdnhPV2hHTDVfbWRIdHNOYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYsAwDQYJKoZIhvcNAQELBQADggEBABHCXYUmmuvePwt1fULhk5CEHjyu C2y7R2U306XKWyynXbvVWynaqIOccyvitPelJVmRN+h9MTYNntqzPqd9OaqWX6jS fTiodFmiMya3hkoAoS002Bmgb1ffWk4Fl4NNoxqncsEhwIrB6z6cyflBrBK8mSr/ u5WEj8srWELFDzwupY9VfpD4CNusnL0kcFdBnYROis99HpnGM8ZrWwLM+7l+ybDO dgdEIvdwZjVWzmIWnVQFsSnJ2WW57Mo63MG54Mj3BQ0MmrzFBVQZ1rx3pRt2E636 XFgnbDij7yKKfFY0dJKmxwVQpr/J/guRYw1/DvooVM0f2mHksH+U/cjyuGQ= -----END CERTIFICATE-----Generated at Mon Mar 2 09:57:44 2026 by rpki-client