$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/q41EJTvXtSre8QK3O6hiK-DSHBE.roa File: q41EJTvXtSre8QK3O6hiK-DSHBE.roa (raw, json) Hash identifier: 8Zil277e5oLbl7Knmwaz1GiWdeW0wP8/Oj7jEkwxRWc= Subject key identifier: AB:8D:44:25:3B:D7:B5:2A:DE:F1:02:B7:3B:A8:62:2B:E0:D2:1C:11 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 123D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q41EJTvXtSre8QK3O6hiK-DSHBE.roa Signing time: Sun 01 Mar 2026 02:56:30 +0000 ROA not before: Sun 01 Mar 2026 02:56:30 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 1.73.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4669 (0x123d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:56:30 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=AB8D44253BD7B52ADEF102B73BA8622BE0D21C11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:e2:8d:c6:16:5f:e8:9d:19:d2:d2:0a:9e: 9d:bd:81:66:96:3e:e8:f5:8f:8b:b9:38:f1:b6:c5: 4d:5c:a9:73:e4:4b:dd:10:08:10:db:2a:c0:c3:df: a2:aa:ac:1c:de:75:e2:d1:0f:85:e4:8e:de:94:9d: ab:84:f6:bf:af:b7:b2:2f:ea:10:87:06:2c:55:a6: 68:33:80:50:1f:75:13:3e:29:a7:7d:c9:52:9c:eb: 31:b9:13:22:36:00:2f:6c:95:64:75:8e:ff:5f:23: cb:f6:0a:f3:c8:30:1a:d2:5c:ea:11:35:96:e7:1e: 89:4f:d7:c8:0c:9c:92:ca:73:b6:a6:9f:29:f9:3a: 4b:ad:5f:98:f7:30:69:2b:da:3e:9a:a6:71:b2:34: 2a:cf:60:a5:0c:49:7b:54:1c:c9:f8:df:e0:26:99: c0:c6:b0:6f:6f:39:66:0d:59:93:2e:10:1f:fc:ea: d1:5a:7b:69:32:b2:2b:30:69:dc:52:f1:5b:0f:d2: 4d:55:d6:d3:b7:b8:56:a2:2e:bb:dd:a6:ff:26:91: 68:47:1c:48:4c:a5:07:8f:ed:27:7e:2d:56:2e:45: 1a:6f:15:76:c8:3b:37:17:8c:b2:ec:5f:98:a6:e0: fd:39:3f:26:9f:6c:62:cc:c2:71:2f:37:c4:99:46: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8D:44:25:3B:D7:B5:2A:DE:F1:02:B7:3B:A8:62:2B:E0:D2:1C:11 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q41EJTvXtSre8QK3O6hiK-DSHBE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.238.0/24 Signature Algorithm: sha256WithRSAEncryption df:19:91:58:c5:2a:bd:15:f8:65:69:ef:ca:af:b5:d7:ac:a3: c9:5b:29:eb:3b:0a:d6:c5:4b:c8:3e:08:59:37:8b:c2:37:13: e0:85:44:79:2b:08:23:eb:ac:64:d4:05:a5:09:d2:2f:88:68: 2b:ce:70:54:b0:19:72:b7:f7:be:5b:ea:ba:2d:40:12:ba:c2: 03:4c:9c:b6:8c:23:7b:fa:4b:fd:bd:9c:18:be:52:0d:fa:66: b9:ad:dd:cb:03:e0:bb:09:71:40:95:25:4c:60:2c:97:a9:8a: cd:98:33:b0:a1:80:02:12:aa:5d:23:ff:c2:90:28:77:36:7d: 6d:f3:b7:76:e2:fc:b0:9c:3e:0e:56:ec:94:e4:de:bb:c5:1d: e0:60:c7:80:3f:1e:c6:67:74:ae:73:60:68:11:91:df:60:08: 13:32:e7:67:d4:1f:d3:8d:94:77:66:c1:ef:73:61:62:8a:4d: f3:20:26:6e:a0:42:b3:20:de:d2:75:41:fa:5f:07:46:7d:cd: e1:a7:4c:d7:3b:d2:b7:44:c8:4f:44:50:b9:8f:02:2b:51:3e: f1:05:44:f5:4b:8d:f2:16:73:d6:28:b4:b7:e1:10:95:76:88: d6:fc:82:43:2d:1c:6a:c8:b4:d0:9b:c8:99:61:75:c8:91:e7: 39:6b:e0:95 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEj0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjU2MzBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFCOEQ0NDI1M0JEN0I1 MkFERUYxMDJCNzNCQTg2MjJCRTBEMjFDMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBcuKNxhZf6J0Z0tIKnp29gWaWPuj1j4u5OPG2xU1cqXPkS90Q CBDbKsDD36KqrBzedeLRD4Xkjt6UnauE9r+vt7Iv6hCHBixVpmgzgFAfdRM+Kad9 yVKc6zG5EyI2AC9slWR1jv9fI8v2CvPIMBrSXOoRNZbnHolP18gMnJLKc7amnyn5 OkutX5j3MGkr2j6apnGyNCrPYKUMSXtUHMn43+AmmcDGsG9vOWYNWZMuEB/86tFa e2kysiswadxS8VsP0k1V1tO3uFaiLrvdpv8mkWhHHEhMpQeP7Sd+LVYuRRpvFXbI OzcXjLLsX5im4P05PyafbGLMwnEvN8SZRkKDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUq41EJTvXtSre8QK3O6hiK+DSHBEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3E0MUVKVHZYdFNyZThRSzNPNmhpSy1EU0hCRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSe4wDQYJKoZIhvcNAQELBQADggEBAN8ZkVjFKr0V+GVp78qvtdeso8lb Kes7CtbFS8g+CFk3i8I3E+CFRHkrCCPrrGTUBaUJ0i+IaCvOcFSwGXK3975b6rot QBK6wgNMnLaMI3v6S/29nBi+Ug36Zrmt3csD4LsJcUCVJUxgLJepis2YM7ChgAIS ql0j/8KQKHc2fW3zt3bi/LCcPg5W7JTk3rvFHeBgx4A/HsZndK5zYGgRkd9gCBMy 52fUH9ONlHdmwe9zYWKKTfMgJm6gQrMg3tJ1QfpfB0Z9zeGnTNc70rdEyE9EULmP AitRPvEFRPVLjfIWc9YotLfhEJV2iNb8gkMtHGrItNCbyJlhdciR5zlr4JU= -----END CERTIFICATE-----Generated at Mon Mar 2 06:34:43 2026 by rpki-client