$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pYU_qcGzz3SW6ukCegiYa6ZR1AQ.roa File: pYU_qcGzz3SW6ukCegiYa6ZR1AQ.roa (raw, json) Hash identifier: EUS9Wxxf/J9anV0JlCP41LtMj8PGVPE5TtMNzuzhW/A= Subject key identifier: A5:85:3F:A9:C1:B3:CF:74:96:EA:E9:02:7A:08:98:6B:A6:51:D4:04 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 126E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pYU_qcGzz3SW6ukCegiYa6ZR1AQ.roa Signing time: Sun 01 Mar 2026 03:04:32 +0000 ROA not before: Sun 01 Mar 2026 03:04:32 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4718 (0x126e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:04:32 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=A5853FA9C1B3CF7496EAE9027A08986BA651D404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:e6:0d:04:99:46:0e:09:74:11:9c:fb:ab: 36:c1:4a:d6:98:86:ae:8e:33:a5:8b:bb:68:a5:9b: 4b:1c:15:d9:3e:04:59:19:0d:ff:bb:bb:53:0f:89: 64:72:99:29:89:b6:cc:cb:0b:6a:30:5a:31:6e:53: 6b:75:fc:e4:59:ad:9e:40:aa:31:46:71:25:30:2f: 42:09:1f:7f:be:af:34:74:8d:7a:df:51:eb:3a:da: c6:d9:cc:e8:8a:2e:9b:6a:78:99:aa:11:4d:33:3a: 4f:28:00:2c:d1:c8:b4:ea:b9:2d:ee:c0:1c:f8:a7: 31:c6:80:a6:3a:59:15:5d:b7:29:91:fc:26:fb:78: d2:b3:9c:36:d5:ad:e8:1f:96:31:37:b9:11:d2:51: 1a:8e:78:22:45:fd:d0:d5:09:2a:87:52:22:be:d6: 6e:b7:70:bd:c5:db:e4:3f:86:d9:34:de:2b:d2:8e: a8:06:88:a7:a5:4f:17:f9:72:0c:ab:05:f0:79:6c: 4b:d0:15:7c:38:a9:f4:5d:49:4e:b8:3b:4d:b8:5e: 2d:f7:d2:a1:53:fa:61:fe:62:25:bb:74:c3:1a:c2: 47:51:65:e9:40:58:54:30:60:21:28:04:02:f9:e1: 33:78:7b:c5:e4:96:28:60:4f:cb:df:71:b6:36:71: 12:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:85:3F:A9:C1:B3:CF:74:96:EA:E9:02:7A:08:98:6B:A6:51:D4:04 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pYU_qcGzz3SW6ukCegiYa6ZR1AQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.200.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:c5:99:29:b0:36:4f:db:13:03:2b:9a:aa:ff:6a:7e:11:e8: 79:2f:a8:5a:89:2e:cf:ac:b1:9d:9b:4d:34:92:db:27:82:20: 3d:41:52:2b:4e:80:b1:6a:10:05:cf:2a:83:f0:5e:d7:70:b6: f3:24:8e:dc:09:db:a1:9f:cb:3c:8f:35:f1:6d:6f:0d:f7:39: 8e:03:dc:7a:d6:bf:92:14:a5:27:b9:2f:15:69:6c:ab:13:c2: a2:16:1d:35:2b:d5:71:c8:0b:db:a0:d1:f2:fa:f0:62:5e:9d: a2:9e:06:b4:6d:37:20:a1:6a:f0:4d:12:0d:4b:0b:49:c0:39: bb:f8:8a:f0:5b:d8:51:b7:f5:a1:ab:b4:48:7e:3c:27:27:cc: 23:b3:0f:d1:c9:23:18:44:96:5c:28:d7:e1:79:87:ae:95:33: 5d:25:2a:0e:50:c5:de:da:29:c1:65:74:75:af:2a:8d:6e:ab: 25:d8:86:da:34:c6:12:9e:14:bd:e4:b1:e1:31:c4:b6:77:20: 8f:47:13:2a:56:34:29:c4:18:28:e1:d8:c9:f8:4d:88:af:12: ae:b0:8e:52:9d:d7:0d:b5:3d:14:50:79:c3:92:e0:94:46:7d: a9:fd:30:0e:bc:fe:7e:12:9b:53:d2:71:4e:54:52:a8:e8:a1: 5f:ff:f2:ff -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzA0MzJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE1ODUzRkE5QzFCM0NG NzQ5NkVBRTkwMjdBMDg5ODZCQTY1MUQ0MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzJuYNBJlGDgl0EZz7qzbBStaYhq6OM6WLu2ilm0scFdk+BFkZ Df+7u1MPiWRymSmJtszLC2owWjFuU2t1/ORZrZ5AqjFGcSUwL0IJH3++rzR0jXrf Ues62sbZzOiKLptqeJmqEU0zOk8oACzRyLTquS3uwBz4pzHGgKY6WRVdtymR/Cb7 eNKznDbVregfljE3uRHSURqOeCJF/dDVCSqHUiK+1m63cL3F2+Q/htk03ivSjqgG iKelTxf5cgyrBfB5bEvQFXw4qfRdSU64O024Xi330qFT+mH+YiW7dMMawkdRZelA WFQwYCEoBAL54TN4e8XklihgT8vfcbY2cRLXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUpYU/qcGzz3SW6ukCegiYa6ZR1AQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3BZVV9xY0d6ejNTVzZ1a0NlZ2lZYTZaUjFBUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYsgwDQYJKoZIhvcNAQELBQADggEBAGvFmSmwNk/bEwMrmqr/an4R6Hkv qFqJLs+ssZ2bTTSS2yeCID1BUitOgLFqEAXPKoPwXtdwtvMkjtwJ26GfyzyPNfFt bw33OY4D3HrWv5IUpSe5LxVpbKsTwqIWHTUr1XHIC9ug0fL68GJenaKeBrRtNyCh avBNEg1LC0nAObv4ivBb2FG39aGrtEh+PCcnzCOzD9HJIxhEllwo1+F5h66VM10l Kg5Qxd7aKcFldHWvKo1uqyXYhto0xhKeFL3kseExxLZ3II9HEypWNCnEGCjh2Mn4 TYivEq6wjlKd1w21PRRQecOS4JRGfan9MA68/n4Sm1PScU5UUqjooV//8v8= -----END CERTIFICATE-----Generated at Mon Mar 2 06:55:34 2026 by rpki-client