$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rBWMxQqudO-8KCOLK8vFn5hf_7c.roa File: rBWMxQqudO-8KCOLK8vFn5hf_7c.roa (raw, json) Hash identifier: baBi3Dy9TdGKk/6ZR8Kol+fiWpT0/5RR2+j2ZQekxeQ= Subject key identifier: AC:15:8C:C5:0A:AE:74:EF:BC:28:23:8B:2B:CB:C5:9F:98:5F:FF:B7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 10CE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rBWMxQqudO-8KCOLK8vFn5hf_7c.roa Signing time: Sun 01 Mar 2026 01:54:45 +0000 ROA not before: Sun 01 Mar 2026 01:54:45 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 220.210.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4302 (0x10ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:54:45 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=AC158CC50AAE74EFBC28238B2BCBC59F985FFFB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e8:76:0d:50:9d:68:80:78:4f:98:ac:7d:6c: 83:ee:15:ed:3d:80:2c:50:3c:b2:d0:78:4d:f6:57: ac:24:94:22:f5:89:68:fb:24:79:bc:98:d7:05:2a: b2:9d:81:a6:42:93:ea:1b:68:51:b2:2a:f6:35:1c: a4:4e:53:79:61:4f:e6:0b:f7:9f:fc:00:e1:4f:83: 87:ff:5b:56:ea:80:a0:97:21:a1:95:55:f1:2d:99: 4b:f8:a8:68:3a:6f:61:e0:09:a3:dc:03:13:ba:55: 55:06:9e:88:6d:3f:bf:40:7b:fc:0a:40:1b:1b:e5: f2:ed:58:2e:c9:84:f9:4b:0e:e6:be:dd:91:62:1b: 89:75:ab:13:9f:be:47:f5:87:b0:bf:ac:6a:b0:85: 10:d3:69:09:98:7d:39:de:cc:99:70:a0:5e:fb:ec: 58:c6:83:55:3c:80:c7:d5:ec:cf:85:77:e0:ad:73: a8:9c:00:03:b2:b6:79:90:bb:a7:84:e6:4c:fa:19: e4:86:0a:bd:24:14:67:ad:d4:2a:24:69:9b:30:89: 18:54:b9:fb:e5:ec:6c:bb:12:42:21:fd:7d:f0:6a: b8:4d:c5:ab:8a:45:7a:a9:10:f1:87:2d:c6:81:96: f7:4e:83:b4:3a:f8:d3:5e:3d:69:10:92:c9:13:7a: ca:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:15:8C:C5:0A:AE:74:EF:BC:28:23:8B:2B:CB:C5:9F:98:5F:FF:B7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rBWMxQqudO-8KCOLK8vFn5hf_7c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.72.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:af:d6:06:94:b0:89:09:53:59:a4:7b:cf:96:63:70:ce:52: ed:b6:6d:5d:56:eb:c7:74:07:15:ac:f0:06:90:4f:01:df:42: 81:8f:7f:bb:b1:72:d3:72:a5:5c:a3:76:92:a1:da:e5:bb:91: 6c:3b:99:20:44:25:5c:e2:37:ee:52:50:0b:82:54:39:46:ae: 36:b2:1f:a0:20:47:12:d5:16:6e:9a:7e:b8:59:e3:d3:b3:36: 75:ac:80:a3:a3:4d:b8:f5:45:ef:5a:d1:68:fc:b9:05:11:99: d7:f0:9a:84:91:80:12:63:20:ec:6b:2a:cb:2c:ca:a1:3d:d2: b6:bf:bf:f1:b9:d2:89:df:6a:f5:40:f5:a2:f9:1e:8e:70:ce: 45:24:ef:46:ca:ab:55:7c:8e:d7:b1:d8:74:52:ba:a0:cf:53: c7:94:e0:81:a2:f6:e6:c9:2e:c3:26:03:a9:75:ca:77:96:29: 98:70:96:d1:48:82:10:5e:bf:14:c3:dc:64:86:9d:1e:5a:c6: 01:a2:f9:1c:11:07:c3:71:4e:6d:ee:eb:ae:5d:65:4a:f6:79: 12:29:78:a3:39:18:dc:77:a7:e9:16:dc:a9:aa:88:c1:c9:3e: 72:d9:88:02:81:60:da:c2:c3:ed:40:d7:ac:d8:90:57:6d:26: c3:83:ad:ea -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTU0NDVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFDMTU4Q0M1MEFBRTc0 RUZCQzI4MjM4QjJCQ0JDNTlGOTg1RkZGQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC6HYNUJ1ogHhPmKx9bIPuFe09gCxQPLLQeE32V6wklCL1iWj7 JHm8mNcFKrKdgaZCk+obaFGyKvY1HKROU3lhT+YL95/8AOFPg4f/W1bqgKCXIaGV VfEtmUv4qGg6b2HgCaPcAxO6VVUGnohtP79Ae/wKQBsb5fLtWC7JhPlLDua+3ZFi G4l1qxOfvkf1h7C/rGqwhRDTaQmYfTnezJlwoF777FjGg1U8gMfV7M+Fd+Ctc6ic AAOytnmQu6eE5kz6GeSGCr0kFGet1CokaZswiRhUufvl7Gy7EkIh/X3warhNxauK RXqpEPGHLcaBlvdOg7Q6+NNePWkQkskTesr9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrBWMxQqudO+8KCOLK8vFn5hf/7cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3JCV014UXF1ZE8tOEtDT0xLOHZGbjVoZl83Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc0kgwDQYJKoZIhvcNAQELBQADggEBADuv1gaUsIkJU1mke8+WY3DOUu22 bV1W68d0BxWs8AaQTwHfQoGPf7uxctNypVyjdpKh2uW7kWw7mSBEJVziN+5SUAuC VDlGrjayH6AgRxLVFm6afrhZ49OzNnWsgKOjTbj1Re9a0Wj8uQURmdfwmoSRgBJj IOxrKsssyqE90ra/v/G50onfavVA9aL5Ho5wzkUk70bKq1V8jtex2HRSuqDPU8eU 4IGi9ubJLsMmA6l1yneWKZhwltFIghBevxTD3GSGnR5axgGi+RwRB8NxTm3u665d ZUr2eRIpeKM5GNx3p+kW3KmqiMHJPnLZiAKBYNrCw+1A16zYkFdtJsODreo= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:33 2026 by rpki-client