$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/P-OHnRdyLTnV-EQMGnpzsUyMWSc.roa File: P-OHnRdyLTnV-EQMGnpzsUyMWSc.roa (raw, json) Hash identifier: I5cJ5KWF6s15EtU9O4HXn3Biqy30RURD5XNdfO+ft+E= Subject key identifier: 3F:E3:87:9D:17:72:2D:39:D5:F8:44:0C:1A:7A:73:B1:4C:8C:59:27 Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Certificate serial: 8C Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/P-OHnRdyLTnV-EQMGnpzsUyMWSc.roa Signing time: Sun 01 Feb 2026 01:29:22 +0000 ROA not before: Sun 01 Feb 2026 01:29:22 +0000 ROA not after: Fri 15 Jan 2027 01:30:02 +0000 asID: 10019 IP address blocks: 219.100.20.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Validity Not Before: Feb 1 01:29:22 2026 GMT Not After : Jan 15 01:30:02 2027 GMT Subject: CN=3FE3879D17722D39D5F8440C1A7A73B14C8C5927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b7:19:cf:19:63:07:a5:bb:e0:0c:8e:52:0f: 90:51:9f:fc:2c:64:e5:0e:1d:c1:4f:8d:56:c6:0f: c5:61:bc:95:5a:08:b0:80:a3:7a:a5:cb:36:68:19: 14:c4:ab:33:74:29:81:bd:28:fa:de:c9:52:84:53: 0c:fa:1d:32:23:96:32:9d:30:14:78:be:cd:cc:69: 2a:cb:ee:34:47:be:48:93:e3:91:4e:20:e8:41:68: 94:f4:85:7d:4a:93:a9:05:30:17:9c:c3:3e:65:4a: ba:a7:cd:c7:37:4b:56:f6:3c:c2:11:bf:78:96:41: c6:b4:a3:39:21:43:ab:b2:2a:7f:e7:a0:17:79:a5: 55:0b:09:0c:14:ca:ef:fa:99:cc:2e:94:b2:03:cc: 38:b3:a0:40:64:d2:b4:08:bb:65:eb:28:75:0a:91: ef:4e:dd:e9:2e:6c:15:53:9a:82:37:97:f5:f7:dc: 5e:3b:e5:44:88:f0:4d:e0:54:58:8f:10:39:ed:2d: b2:3d:e9:b5:1e:bd:45:d8:c3:1e:84:03:9a:70:b6: 65:1b:67:78:d4:28:2d:0d:1a:d4:ff:a0:98:43:95: aa:cb:e4:c9:16:e4:15:e2:0f:75:69:5d:af:8a:84: b7:d8:1e:a9:87:b8:3f:72:46:fd:09:d8:dd:93:5a: 78:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E3:87:9D:17:72:2D:39:D5:F8:44:0C:1A:7A:73:B1:4C:8C:59:27 X509v3 Authority Key Identifier: keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/P-OHnRdyLTnV-EQMGnpzsUyMWSc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.20.0/22 Signature Algorithm: sha256WithRSAEncryption 49:83:a3:6b:a6:d5:3e:db:ce:67:56:70:7c:3f:45:f4:70:c9: bb:37:7c:f1:45:6e:b7:a9:89:1b:29:c2:6e:0e:dd:27:6e:c4: ed:bc:f2:a6:ca:ea:59:b1:2d:7d:a9:18:3d:09:27:f7:21:14: 05:a6:26:15:58:2f:5e:cc:66:52:95:be:03:1d:ae:78:83:42: 02:fc:f5:a0:65:1d:0e:1b:21:b7:da:d7:e6:80:2c:40:40:d8: 9a:76:09:eb:b9:22:82:ae:62:b2:f5:bd:5c:79:30:f0:7c:22: fa:23:b1:08:47:09:2a:f3:8a:79:b6:1e:ec:2b:2c:1c:a2:2c: 30:78:ee:2f:8b:41:e3:f0:15:14:ca:53:92:4a:0f:75:bc:e7: b1:44:65:75:92:4e:a9:0b:47:e7:4b:97:9f:6b:36:5b:a3:ce: 54:bf:6b:de:15:04:ce:c0:d0:6a:04:e8:c8:ed:9d:07:b6:41: 9b:48:63:f2:16:e0:cd:ef:2c:df:99:25:31:45:18:6f:50:fb: f3:32:07:ce:3f:f8:09:13:a3:5c:fb:15:91:91:88:02:11:c8: 6d:11:e6:90:99:9a:f8:b0:48:93:8a:43:52:e0:fb:11:bc:65: 0b:c8:04:7d:11:09:95:55:1e:d4:79:2a:6c:f3:7f:88:9a:5b: c3:c8:5e:cd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDM5 MTdCMjMwNzQ1MjRFOUU2RUE4RTQwRkE0QTA2NzJDOTYyMDMxODAeFw0yNjAyMDEw MTI5MjJaFw0yNzAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNGRTM4NzlEMTc3MjJE MzlENUY4NDQwQzFBN0E3M0IxNEM4QzU5MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKtxnPGWMHpbvgDI5SD5BRn/wsZOUOHcFPjVbGD8VhvJVaCLCA o3qlyzZoGRTEqzN0KYG9KPreyVKEUwz6HTIjljKdMBR4vs3MaSrL7jRHvkiT45FO IOhBaJT0hX1Kk6kFMBecwz5lSrqnzcc3S1b2PMIRv3iWQca0ozkhQ6uyKn/noBd5 pVULCQwUyu/6mcwulLIDzDizoEBk0rQIu2XrKHUKke9O3ekubBVTmoI3l/X33F47 5USI8E3gVFiPEDntLbI96bUevUXYwx6EA5pwtmUbZ3jUKC0NGtT/oJhDlarL5MkW 5BXiD3VpXa+KhLfYHqmHuD9yRv0J2N2TWnjxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUP+OHnRdyLTnV+EQMGnpzsUyMWScwHwYDVR0jBBgwFoAUQ5F7IwdFJOnm6o5A +koGcsliAxgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2Mi9RNUY3SXdkRkpPbm02bzVBLWtvR2NzbGlBeGcuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RNUY3SXdkRkpPbm02bzVBLWtvR2Nz bGlBeGcuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDYyL1AtT0huUmR5TFRuVi1FUU1HbnB6c1V5TVdTYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbZBQwDQYJKoZIhvcNAQELBQADggEBAEmDo2um1T7bzmdWcHw/RfRwybs3 fPFFbrepiRspwm4O3SduxO288qbK6lmxLX2pGD0JJ/chFAWmJhVYL17MZlKVvgMd rniDQgL89aBlHQ4bIbfa1+aALEBA2Jp2Ceu5IoKuYrL1vVx5MPB8IvojsQhHCSrz inm2HuwrLByiLDB47i+LQePwFRTKU5JKD3W857FEZXWSTqkLR+dLl59rNlujzlS/ a94VBM7A0GoE6MjtnQe2QZtIY/IW4M3vLN+ZJTFFGG9Q+/MyB84/+AkTo1z7FZGR iAIRyG0R5pCZmviwSJOKQ1Lg+xG8ZQvIBH0RCZVVHtR5Kmzzf4iaW8PIXs0= -----END CERTIFICATE-----Generated at Mon Mar 2 08:57:02 2026 by rpki-client