$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/za8BwYwivzA1JhCERotuYFW_7RE.roa File: za8BwYwivzA1JhCERotuYFW_7RE.roa (raw, json) Hash identifier: rQXFNwZ0WY3bvnPKVzkXsjOHYnGfN07zaDHrg+j+d7A= Subject key identifier: CD:AF:01:C1:8C:22:BF:30:35:26:10:84:46:8B:6E:60:55:BF:ED:11 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1340 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/za8BwYwivzA1JhCERotuYFW_7RE.roa Signing time: Sun 01 Mar 2026 03:40:36 +0000 ROA not before: Sun 01 Mar 2026 03:40:36 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4928 (0x1340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 03:40:36 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=CDAF01C18C22BF3035261084468B6E6055BFED11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:70:e5:b4:c4:a5:96:2c:de:4e:cc:c9:7d:7e: 43:bb:a1:ad:1e:ad:3b:66:bb:d6:90:28:cd:b1:32: cc:2c:4e:dd:ff:93:6a:8e:ea:fd:3d:b7:8b:d5:69: 37:74:7c:ef:d6:aa:64:42:ad:90:36:fd:f2:72:df: cb:eb:f0:98:d8:cb:ec:46:cd:c2:6a:76:0e:13:99: 62:e0:23:ce:c5:5d:24:1a:d4:c9:f1:33:9a:f6:e6: 8f:6f:cc:a0:f8:00:46:51:b5:53:83:cb:68:b7:29: de:41:c4:47:8b:45:65:df:bc:e2:4a:42:17:13:b8: 73:7f:4b:b4:59:e4:43:68:66:69:62:b5:fc:47:a5: 52:bb:93:4b:30:fe:0d:9d:9a:3f:da:4e:e4:f1:b6: 2d:0c:20:6d:d0:66:06:08:41:33:fa:4e:c7:23:1b: 12:97:81:d9:e3:cb:d4:ac:59:db:bb:eb:52:f6:62: c8:c2:14:dc:dd:69:23:8a:62:84:73:dc:6f:1f:20: 33:22:1b:e0:38:43:7e:40:d4:e6:6b:0d:40:99:bd: 29:cb:9a:c3:d0:b7:ee:0b:38:6c:98:10:cc:a0:47: 3e:9b:1a:46:78:f7:80:cf:6e:36:6d:8a:83:bb:76: 1f:c1:28:87:76:61:e6:40:87:d2:f7:66:cb:28:90: e3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AF:01:C1:8C:22:BF:30:35:26:10:84:46:8B:6E:60:55:BF:ED:11 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/za8BwYwivzA1JhCERotuYFW_7RE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.4.0/22 Signature Algorithm: sha256WithRSAEncryption 77:f1:06:8d:e3:eb:84:d6:aa:62:53:8d:f8:39:9e:ea:b1:8c: ec:ad:5e:1a:e1:b5:d9:27:6f:a2:fc:0a:b2:98:77:b9:69:42: 90:99:e6:ee:5f:c3:12:85:f9:75:43:23:be:26:e9:09:eb:fe: 85:27:d1:1f:6f:4b:e1:d5:ed:4c:0e:10:13:6a:19:94:4a:a8: 12:1c:d1:33:78:06:5b:3e:1a:88:e2:7f:f5:08:9b:31:fc:1f: 71:4e:a3:6d:0c:ab:d1:04:17:8e:ad:14:55:00:6a:7b:1b:09: ee:71:04:0c:6f:b8:55:81:fa:b9:3f:77:38:dd:4c:3a:1e:0f: 03:40:56:f4:72:ff:e0:97:a6:dc:8e:3b:ae:84:8c:92:aa:15: c7:d8:47:f5:2f:0d:f6:2a:9e:a8:fe:22:c0:c8:16:4d:b2:88: e4:5e:7a:85:3b:b0:7b:d9:19:ed:5f:12:33:97:92:c5:35:c3: 8a:e1:3c:c7:57:bf:0c:c0:1f:8b:c6:44:9a:c5:29:ca:d5:68: 1a:4e:95:b9:27:d8:3d:1c:ac:5b:92:10:fc:ae:15:22:b0:a1: ea:20:c0:d0:c0:d0:53:f3:17:84:76:c3:df:d9:b0:b5:c8:fa: d4:77:30:05:a1:3b:32:b9:5f:d1:93:a5:98:16:1d:78:3f:ad: 83:7e:4a:44 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICE0AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MzQwMzZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENEQUYwMUMxOEMyMkJG MzAzNTI2MTA4NDQ2OEI2RTYwNTVCRkVEMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHcOW0xKWWLN5OzMl9fkO7oa0erTtmu9aQKM2xMswsTt3/k2qO 6v09t4vVaTd0fO/WqmRCrZA2/fJy38vr8JjYy+xGzcJqdg4TmWLgI87FXSQa1Mnx M5r25o9vzKD4AEZRtVODy2i3Kd5BxEeLRWXfvOJKQhcTuHN/S7RZ5ENoZmlitfxH pVK7k0sw/g2dmj/aTuTxti0MIG3QZgYIQTP6TscjGxKXgdnjy9SsWdu761L2YsjC FNzdaSOKYoRz3G8fIDMiG+A4Q35A1OZrDUCZvSnLmsPQt+4LOGyYEMygRz6bGkZ4 94DPbjZtioO7dh/BKId2YeZAh9L3ZssokONXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUza8BwYwivzA1JhCERotuYFW/7REwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3phOEJ3WXdpdnpBMUpoQ0VSb3R1WUZXXzdSRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYAQwDQYJKoZIhvcNAQELBQADggEBAHfxBo3j64TWqmJTjfg5nuqxjOyt Xhrhtdknb6L8CrKYd7lpQpCZ5u5fwxKF+XVDI74m6Qnr/oUn0R9vS+HV7UwOEBNq GZRKqBIc0TN4Bls+Gojif/UImzH8H3FOo20Mq9EEF46tFFUAansbCe5xBAxvuFWB +rk/dzjdTDoeDwNAVvRy/+CXptyOO66EjJKqFcfYR/UvDfYqnqj+IsDIFk2yiORe eoU7sHvZGe1fEjOXksU1w4rhPMdXvwzAH4vGRJrFKcrVaBpOlbkn2D0crFuSEPyu FSKwoeogwNDA0FPzF4R2w9/ZsLXI+tR3MAWhOzK5X9GTpZgWHXg/rYN+SkQ= -----END CERTIFICATE-----Generated at Mon Mar 2 18:39:27 2026 by rpki-client