$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oiCKtyvYgp098bBmFJ73oshiEH4.roa File: oiCKtyvYgp098bBmFJ73oshiEH4.roa (raw, json) Hash identifier: QEda52a4cbYz8Ipcly8Y8RARc0Oz3NzwyZycxkDGpMM= Subject key identifier: A2:20:8A:B7:2B:D8:82:9D:3D:F1:B0:66:14:9E:F7:A2:C8:62:10:7E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1303 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oiCKtyvYgp098bBmFJ73oshiEH4.roa Signing time: Sun 01 Mar 2026 03:28:02 +0000 ROA not before: Sun 01 Mar 2026 03:28:02 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4867 (0x1303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:28:02 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=A2208AB72BD8829D3DF1B066149EF7A2C862107E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:60:b4:39:b8:95:e7:7f:51:ae:63:4e:11: 29:dc:9b:3a:9d:22:95:44:a0:6a:6b:96:d4:05:99: 61:aa:7a:03:01:63:d7:2a:b9:71:b2:97:8d:62:36: 77:fc:82:68:ce:27:1a:37:96:c1:a4:51:b8:3f:69: ed:cb:9f:06:d5:f5:ca:34:71:0e:89:0c:fd:0f:f6: 81:7f:ed:06:2f:89:61:21:bd:42:d3:78:ba:fe:61: 64:a2:61:e7:ba:fe:fc:4e:44:d6:0e:31:2c:97:d3: c1:f8:d5:5a:66:8e:af:9d:59:c2:f4:9a:c2:8b:3b: d1:89:ac:73:8f:80:e9:05:92:80:12:e2:85:18:0e: 2a:94:f4:2b:0a:36:72:b0:35:05:c6:19:77:96:59: 7b:6a:a7:85:81:f3:81:5d:c6:0c:d2:cc:73:5c:0e: 60:7f:54:07:0c:4c:d8:c3:0e:67:f3:dc:67:0a:9b: ef:3b:cf:80:61:4e:a1:da:dc:0e:ed:d5:ba:6b:3b: 0e:73:cc:a5:af:de:6f:db:a1:23:a0:8a:49:eb:a0: 85:f7:8b:d0:c6:bc:0c:cf:5c:a3:b9:5f:cf:fa:66: 60:bd:03:03:13:f0:21:66:0f:87:f3:52:ef:43:24: c0:6f:fd:2b:d4:8d:ee:5d:60:37:f2:e1:31:fe:f2: b1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:20:8A:B7:2B:D8:82:9D:3D:F1:B0:66:14:9E:F7:A2:C8:62:10:7E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oiCKtyvYgp098bBmFJ73oshiEH4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.56.0/22 Signature Algorithm: sha256WithRSAEncryption d9:8b:d3:88:48:6f:0d:fe:88:a9:dc:88:64:bc:8c:28:fe:f5: eb:f0:60:4a:2c:ca:7c:f1:14:a0:64:0a:6d:5e:d5:ad:1c:05: dd:4e:f2:c2:7e:f8:1f:26:d2:2d:3f:e0:d3:fd:94:1a:29:25: 01:db:ef:37:13:c9:84:39:c6:02:a6:6f:eb:4a:1e:e1:f2:d1: 82:86:1a:48:b8:33:ef:a3:c3:91:0c:48:01:8e:7b:d7:c8:69: 69:8d:a5:dd:44:db:e3:cb:a5:7f:aa:a5:50:c4:69:bd:7c:3d: 27:56:8f:8d:40:6e:fd:57:aa:e9:51:35:a8:a6:8a:1c:3f:29: 2c:13:ab:44:76:a4:88:90:7f:e4:22:a0:f1:7d:3b:f7:c0:78: 2f:22:b1:20:e4:a1:1b:e6:bd:93:ff:ab:2f:d3:5c:d8:20:8f: 6d:31:b1:2b:c3:ec:ff:da:1e:f5:b1:40:86:a8:0c:17:e2:52: 39:0a:60:b9:06:c7:d7:5c:32:a9:f6:63:c5:34:92:e7:d0:11: c0:15:39:4e:7b:cf:8d:ab:2f:32:0a:13:60:d6:9c:fc:62:92: 85:ea:b0:af:01:4f:a1:26:a6:36:96:a3:c2:8f:62:7a:97:9b: 98:71:cf:9b:e5:95:bc:38:6c:9f:28:0e:ae:da:36:8c:a7:1c: c9:7c:3d:d8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzI4MDJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEyMjA4QUI3MkJEODgy OUQzREYxQjA2NjE0OUVGN0EyQzg2MjEwN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCz2C0ObiV539RrmNOESncmzqdIpVEoGprltQFmWGqegMBY9cq uXGyl41iNnf8gmjOJxo3lsGkUbg/ae3LnwbV9co0cQ6JDP0P9oF/7QYviWEhvULT eLr+YWSiYee6/vxORNYOMSyX08H41Vpmjq+dWcL0msKLO9GJrHOPgOkFkoAS4oUY DiqU9CsKNnKwNQXGGXeWWXtqp4WB84FdxgzSzHNcDmB/VAcMTNjDDmfz3GcKm+87 z4BhTqHa3A7t1bprOw5zzKWv3m/boSOgiknroIX3i9DGvAzPXKO5X8/6ZmC9AwMT 8CFmD4fzUu9DJMBv/SvUje5dYDfy4TH+8rHZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoiCKtyvYgp098bBmFJ73oshiEH4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L29pQ0t0eXZZZ3AwOThiQm1GSjczb3NoaUVINC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc0jgwDQYJKoZIhvcNAQELBQADggEBANmL04hIbw3+iKnciGS8jCj+9evw YEosynzxFKBkCm1e1a0cBd1O8sJ++B8m0i0/4NP9lBopJQHb7zcTyYQ5xgKmb+tK HuHy0YKGGki4M++jw5EMSAGOe9fIaWmNpd1E2+PLpX+qpVDEab18PSdWj41Abv1X qulRNaimihw/KSwTq0R2pIiQf+QioPF9O/fAeC8isSDkoRvmvZP/qy/TXNggj20x sSvD7P/aHvWxQIaoDBfiUjkKYLkGx9dcMqn2Y8U0kufQEcAVOU57z42rLzIKE2DW nPxikoXqsK8BT6EmpjaWo8KPYnqXm5hxz5vllbw4bJ8oDq7aNoynHMl8Pdg= -----END CERTIFICATE-----Generated at Mon Mar 2 08:22:38 2026 by rpki-client