$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2aLW7EGcjbM0pO7Fu-3c6I6yMR8.roa File: 2aLW7EGcjbM0pO7Fu-3c6I6yMR8.roa (raw, json) Hash identifier: SrtuY4rwX5Xivkk1GzagcGh1Od64Kv3Goukpzcp0od8= Subject key identifier: D9:A2:D6:EC:41:9C:8D:B3:34:A4:EE:C5:BB:ED:DC:E8:8E:B2:31:1F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DAB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2aLW7EGcjbM0pO7Fu-3c6I6yMR8.roa Signing time: Tue 01 Apr 2025 02:24:40 +0000 ROA not before: Tue 01 Apr 2025 02:24:40 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3499 (0xdab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:40 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D9A2D6EC419C8DB334A4EEC5BBEDDCE88EB2311F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:c2:fe:e1:07:c4:bd:65:f9:af:a3:31:94: 27:6c:42:96:6c:64:aa:40:02:d9:c2:91:e9:d7:30: d5:fa:b3:dc:10:e6:09:53:50:7f:87:8b:65:93:0e: ab:a0:59:54:b8:ec:0f:11:d3:17:26:d4:22:58:fa: ae:73:0e:09:94:b5:7b:f9:4f:f3:b5:db:7a:4b:c7: 23:20:e8:c7:2d:e4:38:81:37:e5:e7:6f:7a:cb:bc: 9f:53:8c:d2:85:1d:b3:19:f5:28:7c:f5:c1:b8:6f: d2:54:cf:34:b2:31:30:7c:0a:f5:c7:24:dc:33:bf: 42:5c:6f:2a:13:c9:b6:63:63:55:37:b1:61:a3:77: 6d:29:fd:c6:49:5f:ac:95:7e:7d:e1:35:e3:48:9b: b2:9c:dd:21:ed:99:09:9d:e3:fa:30:77:6d:ba:8c: 60:66:17:20:c2:05:03:44:39:33:ea:b6:96:67:dd: 74:09:66:db:0c:25:3e:1a:d8:e8:22:f7:8c:d6:85: d2:55:a7:92:a4:dd:de:10:70:d8:38:a9:9b:a8:52: ff:3b:f2:d4:68:49:6c:dd:82:5e:87:a3:b4:bb:0f: 6b:57:54:d8:79:46:b5:22:a0:e1:fb:18:d8:13:3f: d6:75:a4:03:f0:c8:04:4d:3b:c7:c1:15:51:1b:0a: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A2:D6:EC:41:9C:8D:B3:34:A4:EE:C5:BB:ED:DC:E8:8E:B2:31:1F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2aLW7EGcjbM0pO7Fu-3c6I6yMR8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.150.0/23 Signature Algorithm: sha256WithRSAEncryption 94:4d:76:47:38:2c:44:46:29:a8:15:8c:e4:40:6b:8c:41:04: 2e:f7:a1:31:1a:45:0d:82:e4:9e:58:f9:7b:d1:a0:cd:75:ea: 53:01:42:c5:1d:ff:30:c1:12:49:00:81:0c:56:78:db:fc:d6: 1e:dc:0e:a0:60:a9:aa:b9:a1:e9:5e:e0:e9:a6:89:fe:1a:14: 8a:9f:bb:53:0e:53:5e:56:a1:25:86:59:40:bd:91:2e:c5:ef: 22:be:b8:31:45:94:a8:8d:06:83:2c:9b:72:53:28:d3:28:44: aa:93:d8:e8:36:2a:ea:a8:88:b1:be:fa:aa:ed:24:65:e2:36: df:dd:b6:4a:a0:1c:7b:a2:d8:4c:84:0c:1e:3e:25:06:18:02: e6:0f:a6:2a:3e:9b:e6:ec:67:06:18:85:1c:a5:a7:5f:d8:5a: 26:4c:cb:42:44:a8:49:43:e3:2d:8f:49:1b:99:a9:65:11:b6: 30:a7:8a:18:0d:f5:45:c2:e9:8f:73:8a:59:99:ec:4f:25:30: ce:b3:39:05:21:0b:d2:e8:d1:54:41:4d:41:f6:c3:3a:cb:66: a4:27:56:97:62:67:97:89:c1:36:24:4d:67:31:e5:32:cc:cb: ae:cd:74:6c:ee:68:61:28:05:7f:c0:6f:b9:9d:8d:0a:33:e2: cb:2c:c9:21 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDaswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0NDBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ5QTJENkVDNDE5QzhE QjMzNEE0RUVDNUJCRUREQ0U4OEVCMjMxMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9McL+4QfEvWX5r6MxlCdsQpZsZKpAAtnCkenXMNX6s9wQ5glT UH+Hi2WTDqugWVS47A8R0xcm1CJY+q5zDgmUtXv5T/O123pLxyMg6Mct5DiBN+Xn b3rLvJ9TjNKFHbMZ9Sh89cG4b9JUzzSyMTB8CvXHJNwzv0JcbyoTybZjY1U3sWGj d20p/cZJX6yVfn3hNeNIm7Kc3SHtmQmd4/owd226jGBmFyDCBQNEOTPqtpZn3XQJ ZtsMJT4a2Ogi94zWhdJVp5Kk3d4QcNg4qZuoUv878tRoSWzdgl6Ho7S7D2tXVNh5 RrUioOH7GNgTP9Z1pAPwyARNO8fBFVEbCktfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2aLW7EGcjbM0pO7Fu+3c6I6yMR8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJhTFc3RUdjamJNMHBPN0Z1LTNjNkk2eU1SOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYpYwDQYJKoZIhvcNAQELBQADggEBAJRNdkc4LERGKagVjORAa4xBBC73 oTEaRQ2C5J5Y+XvRoM116lMBQsUd/zDBEkkAgQxWeNv81h7cDqBgqaq5oele4Omm if4aFIqfu1MOU15WoSWGWUC9kS7F7yK+uDFFlKiNBoMsm3JTKNMoRKqT2Og2Kuqo iLG++qrtJGXiNt/dtkqgHHui2EyEDB4+JQYYAuYPpio+m+bsZwYYhRylp1/YWiZM y0JEqElD4y2PSRuZqWURtjCnihgN9UXC6Y9zilmZ7E8lMM6zOQUhC9Lo0VRBTUH2 wzrLZqQnVpdiZ5eJwTYkTWcx5TLMy67NdGzuaGEoBX/Ab7mdjQoz4sssySE= -----END CERTIFICATE-----Generated at Wed Nov 5 15:53:12 2025 by rpki-client