$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zzBLR249OyAJ6GxmNCBKPqQNSlI.roa File: zzBLR249OyAJ6GxmNCBKPqQNSlI.roa (raw, json) Hash identifier: /Gd3IM3LnWqKAuVLYmFDjIxMh+zBJm7CwDwEATeqFFQ= Subject key identifier: CF:30:4B:47:6E:3D:3B:20:09:E8:6C:66:34:20:4A:3E:A4:0D:4A:52 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 11CA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zzBLR249OyAJ6GxmNCBKPqQNSlI.roa Signing time: Sun 01 Mar 2026 02:40:33 +0000 ROA not before: Sun 01 Mar 2026 02:40:33 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4554 (0x11ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:40:33 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=CF304B476E3D3B2009E86C6634204A3EA40D4A52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fa:26:c8:7b:06:f2:64:0a:8a:60:41:5b:bc: b7:5c:7f:49:ff:53:fa:24:be:6b:61:80:56:69:34: ff:45:45:ce:20:49:70:ec:54:f7:20:fe:da:f8:07: 9f:56:43:56:6d:a7:f8:df:6e:d9:1b:cd:09:ef:c1: 39:77:3e:8d:54:c8:33:fe:79:02:ac:9f:d4:9d:43: 99:8a:1d:e9:3f:d1:4f:39:8b:75:ff:53:e0:d0:c5: 0e:07:3f:5f:cb:da:45:e4:f7:32:d9:d1:2f:16:d8: 5c:83:fb:31:07:f4:43:f9:21:5c:08:3c:21:c2:18: 30:ec:82:b5:25:74:eb:52:7e:a9:4b:40:ba:b2:0e: 17:6d:0b:e4:1d:c7:f3:d3:42:cb:72:ea:a6:8f:8e: dc:e8:9d:2b:ac:76:9e:df:c0:e7:25:23:3d:87:af: 21:da:a5:e2:9a:3e:2b:3a:26:42:6d:78:62:67:1b: 37:63:26:fa:cf:c4:a9:66:e8:d7:59:d0:7b:84:22: ff:bf:08:5f:0f:53:05:e9:3a:30:f7:a2:ff:d3:ed: a8:c5:75:cf:e5:c4:fa:34:54:2a:ef:74:57:6c:57: f4:a3:4b:f5:bc:7b:93:fa:c3:f3:df:ef:c6:8b:42: 47:5f:51:47:e2:ac:ab:94:7c:c0:d6:06:71:62:d7: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:30:4B:47:6E:3D:3B:20:09:E8:6C:66:34:20:4A:3E:A4:0D:4A:52 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zzBLR249OyAJ6GxmNCBKPqQNSlI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.50.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:1a:10:89:b1:1a:2d:58:3b:ad:56:14:21:fe:f6:c5:84:25: 47:75:1f:82:b0:e4:7b:94:3b:37:af:aa:e0:5a:ec:7d:30:0c: 55:c6:ac:63:34:45:05:a8:c6:d3:e0:30:88:42:d3:35:e6:54: c8:7b:5c:0b:aa:ec:4e:29:82:72:2e:ff:55:6e:b1:75:dd:51: 20:5d:28:84:af:78:3a:ac:aa:85:cd:52:76:95:58:c1:77:93: ec:be:68:13:8f:0f:fa:87:59:1b:3e:0f:b1:a0:03:71:89:04: 48:75:0e:5a:7a:4b:14:ed:40:81:ac:d6:9a:ed:8a:4e:77:4f: 71:8d:91:bb:b8:c5:02:2b:f5:e5:d4:46:8f:7e:90:06:a4:be: 05:1e:74:24:74:e3:81:44:27:6d:7c:cb:0f:f7:6b:a5:38:80: c8:2d:71:2a:d6:49:48:77:f4:d2:39:59:3c:b0:91:0d:6b:7f: 00:b1:de:da:38:f7:26:e1:58:83:d1:3a:de:e4:47:34:f5:e0: 62:9a:a6:2a:01:b7:f7:df:d7:18:a9:c5:49:f9:d5:cd:70:65: 34:f3:18:03:ba:ba:a9:da:65:07:f3:ee:ce:02:5c:16:f0:3c: 97:da:44:51:27:64:ea:d3:e2:3b:4c:70:ca:e1:e3:b1:bb:34: 79:29:c5:3f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICEcowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjQwMzNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENGMzA0QjQ3NkUzRDNC MjAwOUU4NkM2NjM0MjA0QTNFQTQwRDRBNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDr+ibIewbyZAqKYEFbvLdcf0n/U/okvmthgFZpNP9FRc4gSXDs VPcg/tr4B59WQ1Ztp/jfbtkbzQnvwTl3Po1UyDP+eQKsn9SdQ5mKHek/0U85i3X/ U+DQxQ4HP1/L2kXk9zLZ0S8W2FyD+zEH9EP5IVwIPCHCGDDsgrUldOtSfqlLQLqy DhdtC+Qdx/PTQsty6qaPjtzonSusdp7fwOclIz2HryHapeKaPis6JkJteGJnGzdj JvrPxKlm6NdZ0HuEIv+/CF8PUwXpOjD3ov/T7ajFdc/lxPo0VCrvdFdsV/SjS/W8 e5P6w/Pf78aLQkdfUUfirKuUfMDWBnFi12PrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUzzBLR249OyAJ6GxmNCBKPqQNSlIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3p6QkxSMjQ5T3lBSjZHeG1OQ0JLUHFRTlNsSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYDIwDQYJKoZIhvcNAQELBQADggEBAE0aEImxGi1YO61WFCH+9sWEJUd1 H4Kw5HuUOzevquBa7H0wDFXGrGM0RQWoxtPgMIhC0zXmVMh7XAuq7E4pgnIu/1Vu sXXdUSBdKISveDqsqoXNUnaVWMF3k+y+aBOPD/qHWRs+D7GgA3GJBEh1Dlp6SxTt QIGs1prtik53T3GNkbu4xQIr9eXURo9+kAakvgUedCR044FEJ218yw/3a6U4gMgt cSrWSUh39NI5WTywkQ1rfwCx3to49ybhWIPROt7kRzT14GKapioBt/ff1xipxUn5 1c1wZTTzGAO6uqnaZQfz7s4CXBbwPJfaRFEnZOrT4jtMcMrh47G7NHkpxT8= -----END CERTIFICATE-----Generated at Mon Mar 2 06:34:48 2026 by rpki-client