$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rIeHZIHiF3unFXJMrMKHqiX-Bf8.roa File: rIeHZIHiF3unFXJMrMKHqiX-Bf8.roa (raw, json) Hash identifier: rYlUD4RLEFnhiagxMK++xdEr9fpiXy1elAYQHMmc0W0= Subject key identifier: AC:87:87:64:81:E2:17:7B:A7:15:72:4C:AC:C2:87:AA:25:FE:05:FF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 10A3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rIeHZIHiF3unFXJMrMKHqiX-Bf8.roa Signing time: Sun 01 Mar 2026 01:44:50 +0000 ROA not before: Sun 01 Mar 2026 01:44:50 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.104.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4259 (0x10a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:44:50 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=AC87876481E2177BA715724CACC287AA25FE05FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:c8:0f:52:5e:af:59:e3:e2:70:96:5d:9f: 8b:f8:36:26:0c:3a:0e:e8:4b:00:13:d5:89:b9:f7: 20:e2:88:36:92:0d:c4:cc:cc:1d:67:00:06:ff:ea: e6:38:72:d2:1b:51:df:8e:c8:d9:ca:31:4c:3f:7c: 87:c4:ec:9d:ed:34:8c:94:01:e4:b8:dc:24:51:bb: 74:40:55:e4:3b:8c:2a:dd:f2:74:cc:8c:01:55:77: ba:98:09:61:ee:ae:22:76:ae:dc:b7:6f:73:57:0d: b9:79:7b:41:ab:e1:a6:1c:81:1a:f2:2d:e1:8f:c6: 7c:d3:3b:cc:c1:48:46:fe:41:14:fe:7d:80:df:45: 54:0b:91:93:39:0d:ef:3e:34:ad:13:8d:cb:eb:a3: 16:04:e5:8a:47:cd:e4:05:b0:99:0b:63:ee:f1:9e: 82:c4:70:e9:05:e0:15:16:a8:0d:4a:c2:f5:81:29: 51:09:5c:93:f6:ea:d5:10:af:2a:41:b6:1d:bd:50: 6f:88:0b:38:fa:55:b9:80:a4:f9:58:41:aa:07:2a: d2:eb:f7:1a:1e:fa:dd:3d:3f:0c:13:e6:b9:aa:3a: 1e:79:2f:e4:b4:41:24:5a:c1:3d:d6:20:cf:2e:a9: c5:41:7a:33:32:b6:39:bd:6c:bd:65:cf:9f:36:0a: 6f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:87:87:64:81:E2:17:7B:A7:15:72:4C:AC:C2:87:AA:25:FE:05:FF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rIeHZIHiF3unFXJMrMKHqiX-Bf8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.0.0/22 Signature Algorithm: sha256WithRSAEncryption 95:88:c2:18:78:6a:9b:92:a4:a8:9e:43:38:06:73:7f:a6:22: e8:5b:4b:a3:2c:01:27:8b:b4:2b:3e:3b:c5:6e:02:9b:73:ed: ca:e4:37:ad:e3:bf:f4:15:7b:cf:bf:2b:f0:1c:22:06:d4:a0: 33:04:e2:13:ce:93:83:c2:d3:8c:33:94:eb:db:4a:c0:9e:4b: e8:42:f1:2d:7c:56:bf:a3:a6:a8:fa:ed:a8:d3:89:6a:68:12: 86:21:db:8c:6e:23:9c:52:67:68:b9:a8:9a:06:6e:dd:f4:a3: ce:4f:6a:0c:38:11:06:81:a1:07:07:75:00:78:90:4c:e4:f2: 43:b1:3d:ba:44:03:27:f3:b5:91:c2:9e:35:63:55:5a:5b:5b: 9e:f7:91:e5:b1:c5:83:5c:86:af:a3:2e:c5:64:cf:34:b0:5b: bb:1b:8b:c2:e7:c4:02:9d:a9:39:28:63:52:6b:c6:2f:90:f7: 44:43:91:13:50:bc:8f:33:99:33:24:b4:23:0f:c8:c6:fa:72: df:2e:32:fe:b9:93:dd:82:41:b9:75:69:23:33:be:61:c9:3d: 66:e9:f6:68:63:83:a6:33:77:43:37:75:0f:1b:a4:4c:ed:a1: eb:98:92:dd:95:21:2e:67:ef:31:2e:13:d2:65:5f:b4:ed:66: 68:9f:97:46 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTQ0NTBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFDODc4NzY0ODFFMjE3 N0JBNzE1NzI0Q0FDQzI4N0FBMjVGRTA1RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFWMgPUl6vWePicJZdn4v4NiYMOg7oSwAT1Ym59yDiiDaSDcTM zB1nAAb/6uY4ctIbUd+OyNnKMUw/fIfE7J3tNIyUAeS43CRRu3RAVeQ7jCrd8nTM jAFVd7qYCWHuriJ2rty3b3NXDbl5e0Gr4aYcgRryLeGPxnzTO8zBSEb+QRT+fYDf RVQLkZM5De8+NK0TjcvroxYE5YpHzeQFsJkLY+7xnoLEcOkF4BUWqA1KwvWBKVEJ XJP26tUQrypBth29UG+ICzj6VbmApPlYQaoHKtLr9xoe+t09PwwT5rmqOh55L+S0 QSRawT3WIM8uqcVBejMytjm9bL1lz582Cm/xAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrIeHZIHiF3unFXJMrMKHqiX+Bf8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3JJZUhaSUhpRjN1bkZYSk1yTUtIcWlYLUJmOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxaAAwDQYJKoZIhvcNAQELBQADggEBAJWIwhh4apuSpKieQzgGc3+mIuhb S6MsASeLtCs+O8VuAptz7crkN63jv/QVe8+/K/AcIgbUoDME4hPOk4PC04wzlOvb SsCeS+hC8S18Vr+jpqj67ajTiWpoEoYh24xuI5xSZ2i5qJoGbt30o85Pagw4EQaB oQcHdQB4kEzk8kOxPbpEAyfztZHCnjVjVVpbW573keWxxYNchq+jLsVkzzSwW7sb i8LnxAKdqTkoY1Jrxi+Q90RDkRNQvI8zmTMktCMPyMb6ct8uMv65k92CQbl1aSMz vmHJPWbp9mhjg6Yzd0M3dQ8bpEztoeuYkt2VIS5n7zEuE9JlX7TtZmifl0Y= -----END CERTIFICATE-----Generated at Mon Mar 2 06:54:16 2026 by rpki-client