$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rfo9pvnL6PvDpqYXuhXmQRXygas.roa File: rfo9pvnL6PvDpqYXuhXmQRXygas.roa (raw, json) Hash identifier: 5sS5EafDwp71sIwJWjfAtrMsHJIbZ49gSo6fOMDw+5Q= Subject key identifier: AD:FA:3D:A6:F9:CB:E8:FB:C3:A6:A6:17:BA:15:E6:41:15:F2:81:AB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1079 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rfo9pvnL6PvDpqYXuhXmQRXygas.roa Signing time: Sun 01 Mar 2026 01:39:52 +0000 ROA not before: Sun 01 Mar 2026 01:39:52 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.97.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4217 (0x1079) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:39:52 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=ADFA3DA6F9CBE8FBC3A6A617BA15E64115F281AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:28:07:f2:70:84:ee:be:f6:63:e1:d3:66: c5:4a:73:b4:ae:b5:be:e2:fe:4a:02:13:7e:b6:24: c0:09:38:23:8e:bb:51:75:f8:fa:ec:b4:4d:e9:aa: 44:b3:64:4d:a7:94:3f:58:bf:49:57:b9:4b:53:9d: 64:e2:36:a3:5d:e2:24:75:71:b6:37:d1:b1:3d:e4: ed:06:c9:76:be:8c:71:65:7f:f0:c9:27:58:6e:f8: 24:3a:ae:0d:07:72:55:71:42:fa:d6:79:70:a6:c2: 04:52:58:23:e4:0d:0b:af:9e:20:0e:4c:1f:62:c3: 78:f6:35:9a:ca:4b:23:30:a4:c8:97:70:8a:09:86: c6:fa:d9:01:0b:68:d9:79:a6:1c:6a:de:a4:88:bf: f7:1c:97:f1:0e:22:4a:02:70:d3:47:25:a6:5b:f7: 24:20:e0:60:bb:2e:b7:21:76:e7:d7:f7:38:e4:a5: 88:4c:f8:79:7f:1b:a3:68:0f:8b:cd:5c:9a:b1:07: 46:96:e9:36:5a:4c:7b:d4:0e:3b:a3:13:a7:2c:e2: 58:a1:57:3a:46:ea:24:ae:95:b4:7c:62:6c:09:e2: 66:24:c3:1a:1d:82:1c:e3:c5:b6:99:36:11:eb:ec: a7:03:74:29:6e:7f:94:f0:da:8e:b4:4b:48:c8:b9: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FA:3D:A6:F9:CB:E8:FB:C3:A6:A6:17:BA:15:E6:41:15:F2:81:AB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rfo9pvnL6PvDpqYXuhXmQRXygas.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.38.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:a2:79:75:25:27:f0:17:3c:89:1e:0d:4c:c5:07:dd:56:6e: f8:d6:83:5a:9b:2b:00:b3:1c:30:79:c0:26:b9:a8:2d:d4:df: c5:1f:e7:ab:fc:d7:db:27:03:2d:83:98:c0:1a:b9:6b:e2:49: 3e:c0:f7:19:6d:b6:2b:3e:8b:7b:b2:c5:df:54:8b:1c:b6:2a: 2b:bc:df:cc:d2:d0:4b:0c:e6:b9:52:99:03:42:f5:f3:44:97: 5f:9c:90:2d:16:67:ca:5a:9c:4e:d0:a1:05:82:89:c2:2c:79: 2b:9d:f6:40:cf:c7:68:d0:17:27:4d:05:c0:15:8d:38:cc:bd: 14:65:f7:54:9a:49:e1:b5:83:a0:d3:c9:3e:dd:94:d5:48:d1: f6:5d:bc:1c:a5:3d:46:72:43:81:f7:50:b8:0b:8b:4a:03:86: 7b:de:4e:c5:e7:0d:09:58:28:c0:92:45:f6:ea:f8:86:58:01: 2c:27:98:db:05:13:5a:be:72:30:93:ee:f3:03:df:47:0a:10: aa:9e:40:f5:60:c6:b6:78:2b:77:d3:70:4b:fb:79:4b:c9:63: 15:42:eb:02:a1:a8:32:cb:c3:0b:f2:4c:46:ae:5a:92:e8:f3: 5d:28:06:28:b6:0e:4b:d0:81:36:e8:2c:44:33:5b:24:23:34: e8:e7:1d:a0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTM5NTJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFERkEzREE2RjlDQkU4 RkJDM0E2QTYxN0JBMTVFNjQxMTVGMjgxQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD0SgH8nCE7r72Y+HTZsVKc7Sutb7i/koCE362JMAJOCOOu1F1 +PrstE3pqkSzZE2nlD9Yv0lXuUtTnWTiNqNd4iR1cbY30bE95O0GyXa+jHFlf/DJ J1hu+CQ6rg0HclVxQvrWeXCmwgRSWCPkDQuvniAOTB9iw3j2NZrKSyMwpMiXcIoJ hsb62QELaNl5phxq3qSIv/ccl/EOIkoCcNNHJaZb9yQg4GC7LrchdufX9zjkpYhM +Hl/G6NoD4vNXJqxB0aW6TZaTHvUDjujE6cs4lihVzpG6iSulbR8YmwJ4mYkwxod ghzjxbaZNhHr7KcDdCluf5Tw2o60S0jIuTODAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrfo9pvnL6PvDpqYXuhXmQRXygaswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3Jmbzlwdm5MNlB2RHBxWVh1aFhtUVJYeWdhcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYSYwDQYJKoZIhvcNAQELBQADggEBAAqieXUlJ/AXPIkeDUzFB91WbvjW g1qbKwCzHDB5wCa5qC3U38Uf56v819snAy2DmMAauWviST7A9xlttis+i3uyxd9U ixy2Kiu838zS0EsM5rlSmQNC9fNEl1+ckC0WZ8panE7QoQWCicIseSud9kDPx2jQ FydNBcAVjTjMvRRl91SaSeG1g6DTyT7dlNVI0fZdvBylPUZyQ4H3ULgLi0oDhnve TsXnDQlYKMCSRfbq+IZYASwnmNsFE1q+cjCT7vMD30cKEKqeQPVgxrZ4K3fTcEv7 eUvJYxVC6wKhqDLLwwvyTEauWpLo810oBii2DkvQgTboLEQzWyQjNOjnHaA= -----END CERTIFICATE-----Generated at Mon Mar 2 18:39:07 2026 by rpki-client