$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oJpKP_mWaSmkxHjir8qwCA5Z2NY.roa File: oJpKP_mWaSmkxHjir8qwCA5Z2NY.roa (raw, json) Hash identifier: ZNTenflB5tF64GbC3MqWqZEdZSpZbpY+4kBfTdXdOpc= Subject key identifier: A0:9A:4A:3F:F9:96:69:29:A4:C4:78:E2:AF:CA:B0:08:0E:59:D8:D6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 12B2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oJpKP_mWaSmkxHjir8qwCA5Z2NY.roa Signing time: Sun 01 Mar 2026 03:12:34 +0000 ROA not before: Sun 01 Mar 2026 03:12:34 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4786 (0x12b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:12:34 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=A09A4A3FF9966929A4C478E2AFCAB0080E59D8D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:bc:b4:a6:65:2d:1d:f7:d2:58:97:d8:d0: 09:90:c4:d0:dc:ca:f5:9e:1e:87:b6:3a:17:ee:c6: 6e:e5:86:5f:70:e0:a9:49:d8:0d:dd:0b:19:87:fd: 05:89:d3:c9:03:b4:c7:64:22:5e:be:36:7a:46:33: 77:4e:f6:93:c0:fe:42:9d:8f:9a:3b:d2:ac:0f:b3: c0:24:7d:ac:6e:cf:2c:09:b0:e1:65:4f:74:d3:a2: be:90:bd:60:76:c1:f1:ed:6e:e8:fc:fb:92:b0:22: 69:31:7d:0c:db:7c:63:69:0e:24:42:11:01:c6:18: 03:a6:40:26:0d:63:fa:bf:af:4b:ee:81:73:ce:a9: b0:86:f3:96:61:2b:f9:d2:e0:2e:12:ed:20:df:6b: 7e:ce:10:42:13:3a:2d:b5:78:6e:82:93:a0:04:39: d3:66:68:2a:69:90:92:2c:a8:ef:af:ec:59:11:b9: 76:eb:22:f5:36:91:2e:60:6a:53:3d:4d:0e:33:c7: fe:7c:99:e2:aa:43:09:e7:6b:6f:84:03:ab:d6:ee: b4:11:93:97:cf:f9:1d:f7:08:e0:a3:69:92:d6:b8: 5b:ad:a4:1d:70:01:a7:83:22:92:bb:cc:a4:3b:a5: 17:e1:99:a3:ef:ce:52:a2:b0:8d:ae:0b:09:e1:66: 77:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9A:4A:3F:F9:96:69:29:A4:C4:78:E2:AF:CA:B0:08:0E:59:D8:D6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oJpKP_mWaSmkxHjir8qwCA5Z2NY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.9.0/24 Signature Algorithm: sha256WithRSAEncryption 10:f2:d9:dc:68:94:ff:04:61:e2:e2:43:cf:4c:99:9f:c7:40: f8:b4:8e:3f:28:12:47:81:ae:78:aa:18:19:80:80:c6:b2:70: 40:54:94:86:35:19:ac:1b:02:c3:0b:66:1e:12:62:7a:6d:04: c2:e7:17:51:01:2c:fc:ab:e6:bc:ea:c5:96:7f:13:c1:02:ec: 7d:84:9b:98:f6:97:9f:09:71:96:f2:8a:01:59:e6:70:b7:68: 43:60:dc:fb:67:f8:a4:2a:8e:7d:c2:df:67:08:a5:e6:44:6e: 65:d4:fc:45:e5:ad:11:be:d7:65:81:55:0f:e3:5a:fc:47:54: 2a:cd:9f:4e:7b:f9:8a:14:ea:82:e8:dc:62:ea:79:41:0e:69: 93:5b:e0:6b:50:1b:82:50:8a:a8:61:9f:20:98:89:7f:98:39: 4a:8b:d3:81:5d:81:21:01:d3:1e:51:48:22:94:0d:40:e7:4b: 57:c0:90:cc:5e:51:7c:ea:4b:5b:8a:34:e5:10:7a:f8:2a:ec: 80:00:ee:2c:87:74:8c:7d:c8:b3:31:16:f9:0d:10:4e:48:9e: ae:1d:d8:9d:42:37:20:98:3d:0d:66:b5:9e:9f:c0:5d:cd:5f: 28:d9:4e:d4:f9:d6:7b:15:26:6c:38:ad:47:78:43:37:04:9b: ff:07:f1:90 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICErIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzEyMzRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEwOUE0QTNGRjk5NjY5 MjlBNEM0NzhFMkFGQ0FCMDA4MEU1OUQ4RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0U7y0pmUtHffSWJfY0AmQxNDcyvWeHoe2Ohfuxm7lhl9w4KlJ 2A3dCxmH/QWJ08kDtMdkIl6+NnpGM3dO9pPA/kKdj5o70qwPs8AkfaxuzywJsOFl T3TTor6QvWB2wfHtbuj8+5KwImkxfQzbfGNpDiRCEQHGGAOmQCYNY/q/r0vugXPO qbCG85ZhK/nS4C4S7SDfa37OEEITOi21eG6Ck6AEOdNmaCppkJIsqO+v7FkRuXbr IvU2kS5galM9TQ4zx/58meKqQwnna2+EA6vW7rQRk5fP+R33COCjaZLWuFutpB1w AaeDIpK7zKQ7pRfhmaPvzlKisI2uCwnhZnelAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoJpKP/mWaSmkxHjir8qwCA5Z2NYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L29KcEtQX21XYVNta3hIamlyOHF3Q0E1WjJOWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaAkwDQYJKoZIhvcNAQELBQADggEBABDy2dxolP8EYeLiQ89MmZ/HQPi0 jj8oEkeBrniqGBmAgMaycEBUlIY1GawbAsMLZh4SYnptBMLnF1EBLPyr5rzqxZZ/ E8EC7H2Em5j2l58JcZbyigFZ5nC3aENg3Ptn+KQqjn3C32cIpeZEbmXU/EXlrRG+ 12WBVQ/jWvxHVCrNn057+YoU6oLo3GLqeUEOaZNb4GtQG4JQiqhhnyCYiX+YOUqL 04FdgSEB0x5RSCKUDUDnS1fAkMxeUXzqS1uKNOUQevgq7IAA7iyHdIx9yLMxFvkN EE5Inq4d2J1CNyCYPQ1mtZ6fwF3NXyjZTtT51nsVJmw4rUd4QzcEm/8H8ZA= -----END CERTIFICATE-----Generated at Mon Mar 2 03:53:39 2026 by rpki-client