$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y2ZDyz4YU9z8fPx5IQCKg0vw4As.roa File: y2ZDyz4YU9z8fPx5IQCKg0vw4As.roa (raw, json) Hash identifier: My5vUq718Sw9Qw0+gWFa7Ft7i26wpxUa4Q4OHkJruxk= Subject key identifier: CB:66:43:CB:3E:18:53:DC:FC:7C:FC:79:21:00:8A:83:4B:F0:E0:0B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1224 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y2ZDyz4YU9z8fPx5IQCKg0vw4As.roa Signing time: Sun 01 Mar 2026 02:52:22 +0000 ROA not before: Sun 01 Mar 2026 02:52:22 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4644 (0x1224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:52:22 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=CB6643CB3E1853DCFC7CFC7921008A834BF0E00B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:e9:1b:1e:d5:a5:6c:55:4a:fc:58:8e:15: e6:ed:ba:0f:94:08:78:2e:2b:55:2b:7e:36:53:49: f4:bc:97:bf:26:30:01:5b:45:a8:85:34:3f:a9:35: 87:b7:a8:53:5c:ca:28:0d:1c:72:83:60:2c:ae:e6: 11:8d:1c:4e:72:bc:07:b9:11:2d:52:13:b0:b1:5a: 62:04:91:56:4a:99:4e:72:16:bc:1f:89:8e:b8:62: ed:f4:19:d3:df:0f:36:22:38:ef:64:3e:96:d9:16: 4b:c1:2b:cf:46:d8:d0:6e:9c:be:06:8e:e1:29:2a: 06:38:a3:1b:44:20:b6:8e:57:98:74:55:2e:d2:2a: 26:55:ff:8d:85:26:2f:3a:5a:ca:73:8d:47:6d:c9: 04:fb:87:6b:09:20:33:bf:98:29:e3:f3:e6:7c:33: 87:0a:41:c1:af:ec:7f:40:56:e7:3e:c0:ee:31:40: 01:0b:61:e1:db:f2:37:ad:f5:34:94:ca:73:43:24: 5f:c3:6d:ad:6c:19:02:23:01:f2:3a:fa:cf:9a:da: 95:95:8b:b0:18:1f:20:1a:81:73:e0:c7:4e:c1:ee: 95:7d:4c:92:20:ac:d4:9e:49:b5:5b:6d:00:64:b1: 55:26:15:06:e8:67:64:b2:53:db:4c:bd:cf:2d:a7: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:66:43:CB:3E:18:53:DC:FC:7C:FC:79:21:00:8A:83:4B:F0:E0:0B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y2ZDyz4YU9z8fPx5IQCKg0vw4As.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.64.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:64:fe:08:25:63:52:02:32:88:10:e7:05:14:a4:c5:34:0f: e2:e2:74:d3:f8:32:af:4b:43:56:c3:89:e1:80:c1:8f:aa:67: d2:c6:8b:dc:c5:07:f0:5d:96:50:9d:44:d3:08:34:c0:6c:f0: 18:94:9d:75:a3:c5:4b:70:67:19:c3:42:46:9e:d5:dc:2f:2f: 0c:cd:20:fb:45:4c:0b:60:fa:26:b6:e5:b3:78:cf:4f:d7:b8: 60:cd:c6:e3:df:46:9f:0a:55:9e:fc:c1:80:61:6d:80:25:aa: 55:bf:cf:f2:e0:f3:c2:c3:8a:4d:7e:02:fe:0c:b4:c9:45:c6: 69:97:5a:bf:37:bf:29:67:53:7a:17:76:1c:28:32:8b:12:ec: 6d:96:e9:f2:b1:95:bb:3e:89:24:f8:2f:c3:01:73:ad:ad:75: f9:3c:6a:d0:b2:13:8d:78:5b:68:63:46:c2:11:e6:01:5e:94: 54:73:ac:a8:16:2f:ac:ad:81:54:f0:14:7b:ce:08:b8:fb:44: b9:94:0b:c1:b5:d4:ac:2b:fa:98:36:ce:32:cd:11:66:5c:64: 8b:8b:87:0b:73:6e:05:43:9e:ec:bf:22:bc:2b:24:1d:33:83: 1c:d5:17:f2:ad:6a:2f:de:a4:0e:0b:a6:25:3c:21:ee:c3:ca: 18:eb:30:83 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEiQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjUyMjJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENCNjY0M0NCM0UxODUz RENGQzdDRkM3OTIxMDA4QTgzNEJGMEUwMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7Z+kbHtWlbFVK/FiOFebtug+UCHguK1UrfjZTSfS8l78mMAFb RaiFND+pNYe3qFNcyigNHHKDYCyu5hGNHE5yvAe5ES1SE7CxWmIEkVZKmU5yFrwf iY64Yu30GdPfDzYiOO9kPpbZFkvBK89G2NBunL4GjuEpKgY4oxtEILaOV5h0VS7S KiZV/42FJi86WspzjUdtyQT7h2sJIDO/mCnj8+Z8M4cKQcGv7H9AVuc+wO4xQAEL YeHb8jet9TSUynNDJF/Dba1sGQIjAfI6+s+a2pWVi7AYHyAagXPgx07B7pV9TJIg rNSeSbVbbQBksVUmFQboZ2SyU9tMvc8tp4z9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUy2ZDyz4YU9z8fPx5IQCKg0vw4AswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3kyWkR5ejRZVTl6OGZQeDVJUUNLZzB2dzRBcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYkAwDQYJKoZIhvcNAQELBQADggEBAHxk/gglY1ICMogQ5wUUpMU0D+Li dNP4Mq9LQ1bDieGAwY+qZ9LGi9zFB/BdllCdRNMINMBs8BiUnXWjxUtwZxnDQkae 1dwvLwzNIPtFTAtg+ia25bN4z0/XuGDNxuPfRp8KVZ78wYBhbYAlqlW/z/Lg88LD ik1+Av4MtMlFxmmXWr83vylnU3oXdhwoMosS7G2W6fKxlbs+iST4L8MBc62tdfk8 atCyE414W2hjRsIR5gFelFRzrKgWL6ytgVTwFHvOCLj7RLmUC8G11Kwr+pg2zjLN EWZcZIuLhwtzbgVDnuy/IrwrJB0zgxzVF/Ktai/epA4LpiU8Ie7DyhjrMIM= -----END CERTIFICATE-----Generated at Mon Mar 2 03:53:49 2026 by rpki-client