$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4cle2rSCRNvYcQ_HF46IFPEHBIo.roa File: 4cle2rSCRNvYcQ_HF46IFPEHBIo.roa (raw, json) Hash identifier: Nd4RYGz0+fTX0P67NX7L5typK/KThUuqwvx8HoD2b5U= Subject key identifier: E1:C9:5E:DA:B4:82:44:DB:D8:71:0F:C7:17:8E:88:14:F1:07:04:8A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CE1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4cle2rSCRNvYcQ_HF46IFPEHBIo.roa Signing time: Tue 01 Apr 2025 02:09:20 +0000 ROA not before: Tue 01 Apr 2025 02:09:20 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:20 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E1C95EDAB48244DBD8710FC7178E8814F107048A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b1:24:ad:b7:98:bd:4d:43:24:3e:db:5d:8c: 80:0d:06:b1:5e:7b:eb:0a:39:c8:06:eb:a9:b5:3f: 86:58:b9:79:0a:f6:08:34:ea:8f:e6:4c:8f:1a:4f: ce:6c:49:6b:d0:e7:14:c8:00:64:1c:f1:7b:b0:ac: 2d:7e:a3:71:c7:90:3a:c1:94:e0:77:6c:b1:96:73: 25:e2:32:cd:3c:1b:80:2a:a4:0c:29:bc:1c:13:2d: 02:fe:84:20:a1:43:00:fb:8c:34:c7:cf:08:f5:88: 93:44:35:07:7c:b9:4e:fe:a8:26:e4:e9:39:b0:6b: 34:17:6e:70:26:83:09:93:e1:ea:42:04:05:07:45: f9:92:3a:41:07:18:39:b1:1b:77:2a:96:25:e1:57: 01:4a:c5:84:08:12:0e:c8:c3:3f:62:6a:39:73:1a: 50:01:e0:ae:5a:c5:d9:29:1c:57:8c:41:22:54:5c: 58:c1:44:32:1c:d5:b0:c2:b4:91:5f:51:03:5a:38: a5:1b:77:63:30:bd:68:f3:e4:54:fd:d0:b8:5d:58: a5:a5:c4:74:1d:57:8a:97:e8:b8:05:0e:7b:df:bf: b3:d8:46:fc:1f:20:ff:5e:3c:cc:8f:15:46:51:60: ae:f8:e5:2c:6f:8b:d5:df:b3:85:81:fd:5c:d0:89: 39:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C9:5E:DA:B4:82:44:DB:D8:71:0F:C7:17:8E:88:14:F1:07:04:8A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4cle2rSCRNvYcQ_HF46IFPEHBIo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.192.0/19 Signature Algorithm: sha256WithRSAEncryption c9:59:40:65:73:52:bc:68:25:8d:6e:04:45:bd:48:e4:a8:18: 54:8a:71:81:32:22:77:25:25:14:cb:bb:39:73:e6:e5:fb:98: 8d:d3:b6:60:25:b4:ae:08:16:cb:69:32:ab:de:9a:a3:a1:28: a6:8a:a4:00:4b:d9:b3:23:ab:08:db:51:f9:ee:9c:10:cc:ee: 98:3c:c9:f7:fa:d0:4b:c5:ca:25:7a:de:03:d9:61:96:94:13: 2b:9c:c6:95:f6:46:5e:b7:74:93:11:8a:b6:7f:95:51:87:85: 5d:61:8f:e9:e4:42:cb:5c:ee:0b:f0:aa:3b:d2:43:89:c4:49: b8:26:54:a9:23:dc:48:09:4f:d7:5f:e7:db:9f:df:0d:3d:c3: d4:b9:0c:a1:75:15:17:b0:d7:2e:b4:05:90:9e:9d:3d:e1:a0: 0f:77:10:7a:15:9a:14:8c:6d:5f:b2:f0:6f:6a:31:a4:58:b7: 12:01:99:25:c7:f8:81:09:f2:41:46:d9:f3:db:8b:2b:79:30: 02:b5:69:26:e2:8b:51:52:3e:58:df:3c:8c:15:8f:a9:1f:60: e3:9b:48:11:38:bb:26:be:3d:c2:28:58:15:8f:b4:11:75:b6: 02:97:f6:75:2a:45:60:f3:d8:40:88:01:e9:c3:60:58:3e:fa: c4:81:96:e7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MjBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUxQzk1RURBQjQ4MjQ0 REJEODcxMEZDNzE3OEU4ODE0RjEwNzA0OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDosSStt5i9TUMkPttdjIANBrFee+sKOcgG66m1P4ZYuXkK9gg0 6o/mTI8aT85sSWvQ5xTIAGQc8XuwrC1+o3HHkDrBlOB3bLGWcyXiMs08G4AqpAwp vBwTLQL+hCChQwD7jDTHzwj1iJNENQd8uU7+qCbk6TmwazQXbnAmgwmT4epCBAUH RfmSOkEHGDmxG3cqliXhVwFKxYQIEg7Iwz9iajlzGlAB4K5axdkpHFeMQSJUXFjB RDIc1bDCtJFfUQNaOKUbd2MwvWjz5FT90LhdWKWlxHQdV4qX6LgFDnvfv7PYRvwf IP9ePMyPFUZRYK745Sxvi9Xfs4WB/VzQiTlLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4cle2rSCRNvYcQ/HF46IFPEHBIowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzRjbGUyclNDUk52WWNRX0hGNDZJRlBFSEJJby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUxaMAwDQYJKoZIhvcNAQELBQADggEBAMlZQGVzUrxoJY1uBEW9SOSoGFSK cYEyInclJRTLuzlz5uX7mI3TtmAltK4IFstpMqvemqOhKKaKpABL2bMjqwjbUfnu nBDM7pg8yff60EvFyiV63gPZYZaUEyucxpX2Rl63dJMRirZ/lVGHhV1hj+nkQstc 7gvwqjvSQ4nESbgmVKkj3EgJT9df59uf3w09w9S5DKF1FRew1y60BZCenT3hoA93 EHoVmhSMbV+y8G9qMaRYtxIBmSXH+IEJ8kFG2fPbiyt5MAK1aSbii1FSPljfPIwV j6kfYOObSBE4uya+PcIoWBWPtBF1tgKX9nUqRWDz2ECIAenDYFg++sSBluc= -----END CERTIFICATE-----Generated at Wed Nov 5 21:44:03 2025 by rpki-client