$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1eHPGB6pT1EbH0jMNSDyXdvKzz4.roa File: 1eHPGB6pT1EbH0jMNSDyXdvKzz4.roa (raw, json) Hash identifier: TtFb+w2qUFUJ6ab0Z17XL7ipR6q/qCgtDrpVkkjnSLs= Subject key identifier: D5:E1:CF:18:1E:A9:4F:51:1B:1F:48:CC:35:20:F2:5D:DB:CA:CF:3E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D23 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1eHPGB6pT1EbH0jMNSDyXdvKzz4.roa Signing time: Tue 01 Apr 2025 02:13:48 +0000 ROA not before: Tue 01 Apr 2025 02:13:48 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:13:48 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D5E1CF181EA94F511B1F48CC3520F25DDBCACF3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ba:f4:eb:ac:f2:f8:e7:2b:7a:1e:95:d2:12: 69:ed:b5:22:98:fb:8c:a2:46:8b:ac:0c:0a:a9:64: a5:b7:7e:0e:66:00:e0:cb:6a:78:8e:dd:b9:e2:f1: bd:3c:2d:26:fa:db:1a:4e:96:32:88:7d:20:ad:60: 89:0c:13:06:05:6a:b1:4c:e4:69:b6:f2:d6:41:b2: 23:cd:a3:78:9b:0d:02:a3:da:50:3e:8c:a4:02:86: 08:8d:c2:ae:b9:04:a6:d4:5b:79:39:74:97:df:57: fb:31:f2:b5:35:24:21:84:89:f1:d6:32:4a:41:77: 21:91:30:8b:ec:15:d5:e8:ce:98:c7:9f:74:4f:ff: c8:bc:58:e7:fb:b1:ad:a0:62:5d:35:a4:a6:04:4f: 04:46:fd:d8:91:a2:3e:02:e7:80:72:e6:42:53:da: ff:bf:cf:68:dd:6f:c8:b1:ec:ae:cc:40:5c:71:a6: 03:9d:a3:90:7b:4c:5e:24:1f:22:07:34:56:31:d6: d0:2e:d4:54:9f:2b:d8:68:84:ff:94:d2:2b:64:19: f4:e3:fc:d7:b2:92:51:73:e3:fb:24:15:3e:9d:26: 81:dc:84:83:1e:ab:5b:10:ab:c9:41:9f:6c:29:96: 71:79:61:5c:3d:bd:70:8d:1b:f9:1f:26:32:d1:5e: 8f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E1:CF:18:1E:A9:4F:51:1B:1F:48:CC:35:20:F2:5D:DB:CA:CF:3E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1eHPGB6pT1EbH0jMNSDyXdvKzz4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.76.0/23 Signature Algorithm: sha256WithRSAEncryption 66:64:3d:72:59:14:b6:e7:9d:ea:6d:4b:22:3e:51:85:07:56: 9e:50:6e:b9:eb:f8:de:e4:b5:ca:d1:22:07:1b:7b:67:16:8c: f7:35:b7:10:79:10:6f:79:2e:ac:f2:c1:a8:b9:59:66:cb:93: 95:f1:b7:41:9f:21:46:88:54:f9:bc:c1:0f:68:24:98:61:14: fa:ea:85:de:ff:be:e9:d3:8d:61:42:47:80:56:c5:9d:db:5b: be:fc:48:50:8d:99:cd:34:ba:59:30:d9:56:8e:11:b0:b2:d4: fe:2d:22:c8:4a:cb:d6:a3:1c:6d:4c:c5:cf:39:2f:4e:52:ca: 0c:51:d1:8b:ad:a5:10:2d:39:94:a0:0e:93:62:66:61:ce:d8: bc:26:4e:71:a7:84:81:74:5b:38:38:14:fd:b7:da:6f:82:39: 56:f7:60:ee:9d:24:7c:62:d1:4c:74:b6:f7:ba:56:26:1b:15: 4d:1f:65:c5:4a:e2:6a:36:8b:f0:6a:9d:51:fc:05:91:2e:e6: 85:27:21:b8:04:0c:99:cb:c0:f6:13:ca:c8:e1:fd:b0:29:a7: 50:f4:6a:f6:0d:7e:6a:56:37:31:11:af:fc:67:41:06:97:aa: d1:1d:38:68:00:02:15:eb:f6:da:01:57:77:5e:e4:38:be:db: 54:ef:6b:8b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjEzNDhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ1RTFDRjE4MUVBOTRG NTExQjFGNDhDQzM1MjBGMjVEREJDQUNGM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxuvTrrPL45yt6HpXSEmnttSKY+4yiRousDAqpZKW3fg5mAODL aniO3bni8b08LSb62xpOljKIfSCtYIkMEwYFarFM5Gm28tZBsiPNo3ibDQKj2lA+ jKQChgiNwq65BKbUW3k5dJffV/sx8rU1JCGEifHWMkpBdyGRMIvsFdXozpjHn3RP /8i8WOf7sa2gYl01pKYETwRG/diRoj4C54By5kJT2v+/z2jdb8ix7K7MQFxxpgOd o5B7TF4kHyIHNFYx1tAu1FSfK9hohP+U0itkGfTj/NeyklFz4/skFT6dJoHchIMe q1sQq8lBn2wplnF5YVw9vXCNG/kfJjLRXo8JAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1eHPGB6pT1EbH0jMNSDyXdvKzz4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzFlSFBHQjZwVDFFYkgwak1OU0R5WGR2S3p6NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYkwwDQYJKoZIhvcNAQELBQADggEBAGZkPXJZFLbnneptSyI+UYUHVp5Q brnr+N7ktcrRIgcbe2cWjPc1txB5EG95Lqzywai5WWbLk5Xxt0GfIUaIVPm8wQ9o JJhhFPrqhd7/vunTjWFCR4BWxZ3bW778SFCNmc00ulkw2VaOEbCy1P4tIshKy9aj HG1Mxc85L05SygxR0YutpRAtOZSgDpNiZmHO2LwmTnGnhIF0Wzg4FP232m+COVb3 YO6dJHxi0Ux0tve6ViYbFU0fZcVK4mo2i/BqnVH8BZEu5oUnIbgEDJnLwPYTysjh /bApp1D0avYNfmpWNzERr/xnQQaXqtEdOGgAAhXr9toBV3de5Di+21Tva4s= -----END CERTIFICATE-----Generated at Wed Nov 5 17:24:44 2025 by rpki-client