$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y_UN2ghnhbAp3ggos_LHfDqVP4k.roa File: y_UN2ghnhbAp3ggos_LHfDqVP4k.roa (raw, json) Hash identifier: 9qFPePzsCcl55TgjIqZij6EYgSLz+28lxuRn+ET5asI= Subject key identifier: CB:F5:0D:DA:08:67:85:B0:29:DE:08:28:B3:F2:C7:7C:3A:95:3F:89 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1089 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y_UN2ghnhbAp3ggos_LHfDqVP4k.roa Signing time: Sun 01 Mar 2026 01:40:04 +0000 ROA not before: Sun 01 Mar 2026 01:40:04 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4233 (0x1089) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 01:40:04 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=CBF50DDA086785B029DE0828B3F2C77C3A953F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:26:03:bb:77:f3:37:3e:7b:bb:98:b7:13: 9c:c4:c4:8e:44:87:83:52:79:78:63:eb:27:de:da: 17:38:bc:58:a1:62:ef:f5:d6:94:8e:0f:8e:a1:d1: da:19:f2:60:7c:d1:fa:f6:7d:2c:db:ce:4c:8f:8c: 0f:8c:51:10:15:1f:75:9a:fe:97:c8:1b:10:33:9e: 53:34:d0:10:83:eb:ee:42:3f:5f:1a:10:64:4c:06: 98:1e:c6:14:78:03:e6:8b:b0:15:46:a9:57:e1:21: 46:26:2f:f7:d5:da:bd:65:ee:88:20:c7:2f:af:cf: e6:fc:46:59:21:6e:51:a0:1a:05:cf:f3:87:b5:9c: 2f:65:13:5d:ca:df:1a:ae:6c:3f:da:e2:ef:3c:6b: 91:62:ec:74:a1:9a:17:bd:5f:1d:c4:f7:60:b4:c2: 2a:dc:db:c9:ac:e4:80:53:78:6b:8a:a8:05:49:d2: 1e:d2:07:eb:41:01:9f:49:c0:f9:f0:ca:22:16:2f: bf:92:fd:28:b6:82:38:b0:b6:35:57:94:1e:b0:b4: ec:e7:7b:81:00:17:fe:80:70:51:a2:37:e4:02:83: f8:f8:02:47:c9:82:25:e4:d5:b9:9d:a0:51:6a:99: 19:f2:b5:aa:a3:68:7f:a7:12:aa:69:34:23:13:b6: a4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F5:0D:DA:08:67:85:B0:29:DE:08:28:B3:F2:C7:7C:3A:95:3F:89 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y_UN2ghnhbAp3ggos_LHfDqVP4k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.17.0/24 Signature Algorithm: sha256WithRSAEncryption 25:37:de:a2:7d:a2:b5:09:61:31:3c:88:74:ac:54:d2:88:05: 70:39:b3:fd:ec:90:72:da:33:3e:c6:5b:ca:d9:cb:a3:9b:8a: 73:28:d0:ac:60:7d:8d:88:b8:5d:eb:a3:ab:ac:77:a3:25:90: 34:a9:d4:b5:67:ec:de:da:89:5f:14:9c:2f:73:f1:ed:11:2f: 81:d5:2b:a7:54:b5:c2:76:e2:be:42:7b:78:4f:c7:3b:ee:6d: cc:a8:b4:1d:b1:7f:73:2d:e6:11:b5:3e:fd:00:64:c3:50:b9: c6:c9:9c:aa:be:ac:8a:43:31:83:6c:58:18:9d:80:93:f0:1d: f8:69:02:ff:e3:7b:b4:f2:f3:92:75:95:7a:db:b8:56:1e:14: 1c:5f:e3:f0:f7:82:c5:89:56:ab:22:44:f6:8a:2a:28:41:53: 44:d2:29:14:5e:d1:71:90:17:a8:50:81:2b:a7:fc:d5:3e:58: 49:83:20:63:16:35:e9:c8:fc:d1:ca:15:f6:c0:3e:8f:f6:32: 00:7d:d0:db:ba:52:53:ac:7f:a0:a7:e2:42:47:9e:9e:87:ea: a7:d1:3b:1a:0f:41:a5:21:3b:e8:a8:10:c0:6c:73:9b:a4:91: 47:ad:9e:36:81:c1:43:04:d5:0d:72:ef:b5:58:eb:5e:91:2a: dd:35:18:ee -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MTQwMDRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENCRjUwRERBMDg2Nzg1 QjAyOURFMDgyOEIzRjJDNzdDM0E5NTNGODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoeSYDu3fzNz57u5i3E5zExI5Eh4NSeXhj6yfe2hc4vFihYu/1 1pSOD46h0doZ8mB80fr2fSzbzkyPjA+MURAVH3Wa/pfIGxAznlM00BCD6+5CP18a EGRMBpgexhR4A+aLsBVGqVfhIUYmL/fV2r1l7oggxy+vz+b8RlkhblGgGgXP84e1 nC9lE13K3xqubD/a4u88a5Fi7HShmhe9Xx3E92C0wirc28ms5IBTeGuKqAVJ0h7S B+tBAZ9JwPnwyiIWL7+S/Si2gjiwtjVXlB6wtOzne4EAF/6AcFGiN+QCg/j4AkfJ giXk1bmdoFFqmRnytaqjaH+nEqppNCMTtqRLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUy/UN2ghnhbAp3ggos/LHfDqVP4kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3lfVU4yZ2huaGJBcDNnZ29zX0xIZkRxVlA0ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYBEwDQYJKoZIhvcNAQELBQADggEBACU33qJ9orUJYTE8iHSsVNKIBXA5 s/3skHLaMz7GW8rZy6ObinMo0KxgfY2IuF3ro6usd6MlkDSp1LVn7N7aiV8UnC9z 8e0RL4HVK6dUtcJ24r5Ce3hPxzvubcyotB2xf3Mt5hG1Pv0AZMNQucbJnKq+rIpD MYNsWBidgJPwHfhpAv/je7Ty85J1lXrbuFYeFBxf4/D3gsWJVqsiRPaKKihBU0TS KRRe0XGQF6hQgSun/NU+WEmDIGMWNenI/NHKFfbAPo/2MgB90Nu6UlOsf6Cn4kJH np6H6qfROxoPQaUhO+ioEMBsc5ukkUetnjaBwUME1Q1y77VY616RKt01GO4= -----END CERTIFICATE-----Generated at Mon Mar 2 10:04:39 2026 by rpki-client