$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/ahIH11-aidRiCGopMY4hlYgskB4.roa File: ahIH11-aidRiCGopMY4hlYgskB4.roa (raw, json) Hash identifier: W4MROaNttK+Dnlt15zfMWfnVQxNyPP7MtEHxsWXsBXM= Subject key identifier: 6A:12:07:D7:5F:9A:89:D4:62:08:6A:29:31:8E:21:95:88:2C:90:1E Certificate issuer: /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC Certificate serial: 33 Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/ahIH11-aidRiCGopMY4hlYgskB4.roa Signing time: Sun 01 Mar 2026 01:32:33 +0000 ROA not before: Sun 01 Mar 2026 01:32:33 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 18283 IP address blocks: 218.223.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC Validity Not Before: Mar 1 01:32:33 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=6A1207D75F9A89D462086A29318E2195882C901E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:e2:8d:da:bd:0f:6d:36:35:8c:c8:70:bc: 98:d4:86:5c:fa:9b:91:c1:6f:2b:4c:fa:52:fe:d0: 28:1f:2c:9d:e5:58:74:b3:b9:32:20:3c:f5:e6:64: 13:52:a5:b3:89:22:a1:86:39:ce:14:68:31:b5:c9: 50:a0:4b:dc:44:71:97:19:9f:f5:48:90:0a:91:f2: bf:d2:3a:a0:57:61:17:2b:c1:ec:05:7f:29:52:2d: 4a:b0:80:69:18:07:cd:20:d6:4e:f9:12:2e:d9:81: fb:5a:70:0b:0c:1f:56:8b:39:a3:72:86:29:56:cd: 17:43:c4:0e:50:14:f6:20:cb:ae:a9:e7:8f:31:8a: 23:2a:f3:71:2e:da:1c:d7:f0:80:ee:e4:9f:4a:41: c5:99:8e:d7:b8:39:fe:79:28:28:1c:0e:9b:46:51: f0:83:ae:93:a6:ea:79:ac:ab:bd:e0:c1:45:54:4c: 2c:fb:8c:e1:d1:70:de:f8:3d:d7:d0:19:94:e6:2c: f8:92:6b:aa:17:40:57:c7:59:14:cc:7a:b5:e5:70: 84:85:f2:18:5c:ff:63:61:bd:04:0f:1b:cd:19:f3: e2:e6:19:eb:44:6f:32:16:e8:e7:5f:4c:1b:32:d1: 9e:22:11:3d:42:b6:51:39:3a:cc:ce:fb:e9:62:5b: b0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:12:07:D7:5F:9A:89:D4:62:08:6A:29:31:8E:21:95:88:2C:90:1E X509v3 Authority Key Identifier: keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/ahIH11-aidRiCGopMY4hlYgskB4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.223.224.0/24 Signature Algorithm: sha256WithRSAEncryption 80:a2:94:e0:ee:a1:19:22:f1:e5:8d:01:14:46:65:af:24:e3: 7d:7f:cc:0c:9e:c6:9f:e9:21:8b:03:12:c4:e0:3c:3b:bb:09: 1b:d5:06:28:e5:33:df:aa:32:91:ab:2f:27:3c:50:0e:7c:e2: c7:52:d7:c4:a7:71:80:e9:70:bc:34:8f:9e:90:4a:5d:53:45: ce:71:93:8e:43:4f:e5:f8:3e:0a:dc:70:90:bf:1d:73:8a:b1: d5:de:85:32:a3:a7:62:48:44:86:cd:1a:2e:d9:ff:db:49:7f: 90:f2:34:63:15:b9:b0:60:0c:fd:61:60:63:b7:58:a6:93:61: b1:a4:f9:70:84:7f:05:fb:e5:42:73:89:c8:fa:44:b6:11:47: 24:27:e9:e2:a5:4a:dc:e9:d1:d9:ea:b2:53:cd:5b:f6:1f:48: 01:ea:7f:93:4d:0c:59:41:e7:e0:74:4d:ee:75:40:9c:b1:60: e9:95:76:bd:fc:23:13:94:98:18:d1:45:97:33:99:d8:01:84: 67:55:18:df:a2:80:c8:f2:56:f7:83:43:dd:1d:3f:8c:c0:c1: 08:35:01:0d:5d:16:8c:bd:8e:65:16:75:8f:91:c6:3b:cc:25: 5f:0d:00:44:d3:78:0b:6d:c3:d9:c8:23:f3:10:2d:bf:99:df: 6a:66:a2:f1 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NDlC QjhENUFFMTE0OTZFNzRBNTk1QUIzRDlGOEY0MDFDNEI1OENDMB4XDTI2MDMwMTAx MzIzM1oXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoNkExMjA3RDc1RjlBODlE NDYyMDg2QTI5MzE4RTIxOTU4ODJDOTAxRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL444o3avQ9tNjWMyHC8mNSGXPqbkcFvK0z6Uv7QKB8sneVYdLO5 MiA89eZkE1Kls4kioYY5zhRoMbXJUKBL3ERxlxmf9UiQCpHyv9I6oFdhFyvB7AV/ KVItSrCAaRgHzSDWTvkSLtmB+1pwCwwfVos5o3KGKVbNF0PEDlAU9iDLrqnnjzGK IyrzcS7aHNfwgO7kn0pBxZmO17g5/nkoKBwOm0ZR8IOuk6bqeayrveDBRVRMLPuM 4dFw3vg919AZlOYs+JJrqhdAV8dZFMx6teVwhIXyGFz/Y2G9BA8bzRnz4uYZ60Rv Mhbo519MGzLRniIRPUK2UTk6zM776WJbsFMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRqEgfXX5qJ1GIIaikxjiGViCyQHjAfBgNVHSMEGDAWgBSEm7jVrhFJbnSllas9 n49AHEtYzDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODA3L2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4TFdNdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4 TFdNdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84MDcvYWhJSDExLWFpZFJpQ0dvcE1ZNGhsWWdza0I0LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANrf4DANBgkqhkiG9w0BAQsFAAOCAQEAgKKU4O6hGSLx5Y0BFEZlryTjfX/M DJ7Gn+khiwMSxOA8O7sJG9UGKOUz36oykasvJzxQDnzix1LXxKdxgOlwvDSPnpBK XVNFznGTjkNP5fg+CtxwkL8dc4qx1d6FMqOnYkhEhs0aLtn/20l/kPI0YxW5sGAM /WFgY7dYppNhsaT5cIR/BfvlQnOJyPpEthFHJCfp4qVK3OnR2eqyU81b9h9IAep/ k00MWUHn4HRN7nVAnLFg6ZV2vfwjE5SYGNFFlzOZ2AGEZ1UY36KAyPJW94ND3R0/ jMDBCDUBDV0WjL2OZRZ1j5HGO8wlXw0ARNN4C23D2cgj8xAtv5nfamai8Q== -----END CERTIFICATE-----Generated at Mon Mar 2 22:44:27 2026 by rpki-client