$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rkvJy6kYLSYXAKcF382pU3SyBOo.roa File: rkvJy6kYLSYXAKcF382pU3SyBOo.roa (raw, json) Hash identifier: 6Pr4reknGLi/hrRWMI+mkwHcn6FVeCTRNxXt1j6y9Gk= Subject key identifier: AE:4B:C9:CB:A9:18:2D:26:17:00:A7:05:DF:CD:A9:53:74:B2:04:EA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 127C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rkvJy6kYLSYXAKcF382pU3SyBOo.roa Signing time: Sun 01 Mar 2026 03:04:40 +0000 ROA not before: Sun 01 Mar 2026 03:04:40 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4732 (0x127c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:04:40 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=AE4BC9CBA9182D261700A705DFCDA95374B204EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:c6:6c:e5:8c:ff:31:1a:5b:7e:0e:79:e8: 02:a0:cf:db:c0:7a:bc:75:07:3f:6f:34:90:ce:26: 39:70:59:50:1c:9f:33:a0:5b:61:7e:51:7b:49:37: 9b:32:84:18:24:f2:34:a1:e6:12:59:d0:08:d1:cf: 35:d7:fd:12:78:a1:f9:ba:88:72:a7:78:b9:0d:78: ab:0a:53:4f:85:79:aa:a3:e0:c1:18:dd:52:08:22: 36:a7:be:78:24:ee:e9:cd:25:83:ff:04:5f:63:93: c0:7c:da:ed:e2:c0:4d:ab:b4:76:f6:97:f3:01:3a: 31:ea:8a:0c:4a:d4:ea:82:ef:28:f3:d5:6d:9b:e8: c4:da:8e:1d:06:4f:b8:7b:64:05:79:68:7b:09:f7: 50:78:d1:8a:48:83:5a:8d:a4:c5:1c:09:36:db:08: 44:a8:9a:85:0a:f1:86:0d:dd:53:d0:f5:61:94:92: e0:7d:ef:2d:4c:39:ae:42:bc:56:43:55:10:44:5f: e1:c5:91:9e:13:76:04:a2:c7:85:6c:b1:87:1b:a1: 88:5e:9b:c6:56:43:64:70:1c:2c:e9:c6:9d:cc:85: a4:1d:b5:31:66:7f:3e:f5:2c:e3:cd:03:c6:f7:a9: 37:69:bd:20:8a:fa:ab:7b:64:e4:e9:04:39:d6:63: c3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4B:C9:CB:A9:18:2D:26:17:00:A7:05:DF:CD:A9:53:74:B2:04:EA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rkvJy6kYLSYXAKcF382pU3SyBOo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.6.0/23 Signature Algorithm: sha256WithRSAEncryption d5:ec:58:83:9a:f8:df:a6:db:2e:00:ab:0e:5c:1f:34:e7:b1: 53:b3:e2:d4:1f:a8:0d:76:45:3f:d9:56:3e:1f:4e:37:81:be: f8:e5:9b:df:b8:2f:07:30:3a:4c:ca:db:94:12:45:80:85:70: 24:a2:11:aa:b7:6a:7c:2d:50:99:f3:9c:3d:5e:38:5e:39:49: 57:21:34:9e:b2:2e:95:a6:84:b6:5d:cf:3a:42:44:d3:49:91: 50:57:09:8d:bd:a3:9f:02:9c:5b:76:0b:c7:ee:20:09:96:e1: 0f:2e:32:20:ee:55:98:67:21:42:68:83:7c:7d:56:a3:fb:1b: 4f:07:6e:21:86:66:a1:44:5f:a6:f0:00:83:81:6c:72:e4:93: 5d:fc:26:dd:ed:f0:46:9d:c4:bc:ce:72:f3:34:0b:07:6a:66: 10:10:1e:b5:dd:23:41:96:99:cd:05:27:cd:00:3f:b8:23:8f: 22:c1:34:7c:2e:6f:26:05:80:7b:c0:53:01:55:ff:3b:af:68: 80:82:1b:8d:71:16:07:11:15:92:24:a9:e8:99:69:3e:73:96: 88:33:24:14:db:fb:4a:5a:73:a2:00:24:c3:3f:2f:e3:fe:35: 31:7b:3a:4f:23:b4:cd:c5:9c:2b:6f:7e:c7:15:d8:45:50:b1: c8:0e:2d:1c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzA0NDBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFFNEJDOUNCQTkxODJE MjYxNzAwQTcwNURGQ0RBOTUzNzRCMjA0RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvosZs5Yz/MRpbfg556AKgz9vAerx1Bz9vNJDOJjlwWVAcnzOg W2F+UXtJN5syhBgk8jSh5hJZ0AjRzzXX/RJ4ofm6iHKneLkNeKsKU0+Feaqj4MEY 3VIIIjanvngk7unNJYP/BF9jk8B82u3iwE2rtHb2l/MBOjHqigxK1OqC7yjz1W2b 6MTajh0GT7h7ZAV5aHsJ91B40YpIg1qNpMUcCTbbCESomoUK8YYN3VPQ9WGUkuB9 7y1MOa5CvFZDVRBEX+HFkZ4TdgSix4VssYcboYhem8ZWQ2RwHCzpxp3MhaQdtTFm fz71LOPNA8b3qTdpvSCK+qt7ZOTpBDnWY8MLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrkvJy6kYLSYXAKcF382pU3SyBOowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3Jrdkp5NmtZTFNZWEFLY0YzODJwVTNTeUJPby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYAYwDQYJKoZIhvcNAQELBQADggEBANXsWIOa+N+m2y4Aqw5cHzTnsVOz 4tQfqA12RT/ZVj4fTjeBvvjlm9+4LwcwOkzK25QSRYCFcCSiEaq3anwtUJnznD1e OF45SVchNJ6yLpWmhLZdzzpCRNNJkVBXCY29o58CnFt2C8fuIAmW4Q8uMiDuVZhn IUJog3x9VqP7G08HbiGGZqFEX6bwAIOBbHLkk138Jt3t8EadxLzOcvM0CwdqZhAQ HrXdI0GWmc0FJ80AP7gjjyLBNHwubyYFgHvAUwFV/zuvaICCG41xFgcRFZIkqeiZ aT5zlogzJBTb+0pac6IAJMM/L+P+NTF7Ok8jtM3FnCtvfscV2EVQscgOLRw= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:31 2026 by rpki-client