$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5iomjYSpPsveeMh1eHAvA82gOPI.roa File: 5iomjYSpPsveeMh1eHAvA82gOPI.roa (raw, json) Hash identifier: +GPZ+Ew0HhnzCK3b+tppHcZaPGenvN9UQ309AXzqX/k= Subject key identifier: E6:2A:26:8D:84:A9:3E:CB:DE:78:C8:75:78:70:2F:03:CD:A0:38:F2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D60 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5iomjYSpPsveeMh1eHAvA82gOPI.roa Signing time: Tue 01 Apr 2025 02:19:16 +0000 ROA not before: Tue 01 Apr 2025 02:19:16 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3424 (0xd60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:16 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E62A268D84A93ECBDE78C87578702F03CDA038F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:62:37:60:7f:ad:f6:c6:4a:66:eb:5f:6c: 6d:3b:12:5e:99:cd:f5:7a:b2:8c:c8:9f:54:c6:07: 5b:7d:78:5a:98:bc:d2:77:4a:07:44:af:42:cb:0c: 92:1e:c2:eb:41:18:c8:c0:45:21:ae:f9:8c:97:33: a9:a3:0d:02:84:bc:28:d8:10:e4:1a:27:a7:e2:a5: 25:90:64:6a:77:7e:68:6c:3c:a9:9d:c5:22:2f:19: 57:20:e4:e3:2d:ee:c3:b3:26:28:89:52:3f:98:0a: 73:9c:00:da:9f:b1:4f:cd:05:c4:63:33:28:e2:ce: 98:03:21:9b:2c:4d:73:9c:a0:9d:5b:12:03:75:4f: 5e:e7:2a:33:5f:f7:8e:db:ee:76:69:dc:78:ca:d1: e5:7c:34:14:bf:71:1e:8b:34:bf:e8:06:01:aa:71: aa:78:82:67:d3:78:92:5c:f9:26:8d:e7:f7:a5:f0: 8b:3d:7a:0a:dc:0b:00:8c:e8:5a:a5:dd:47:55:a6: 62:74:f0:c5:7e:a6:b8:22:fb:72:cc:c3:34:71:6f: c4:6a:44:f8:29:25:5b:c2:75:76:d2:75:69:a5:ee: db:c7:c7:b6:96:e9:45:15:6a:54:84:4c:40:83:21: b3:a6:ac:ca:46:e4:16:7e:f1:55:46:15:25:4a:a8: 39:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2A:26:8D:84:A9:3E:CB:DE:78:C8:75:78:70:2F:03:CD:A0:38:F2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5iomjYSpPsveeMh1eHAvA82gOPI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.126.0/23 Signature Algorithm: sha256WithRSAEncryption 94:a5:10:5c:48:cd:8f:6c:15:48:7a:3a:59:1a:f7:1d:16:0c: e4:d6:57:53:6e:46:e5:97:28:28:8c:3d:27:a9:da:df:d0:1e: 1b:61:05:94:d8:32:f8:7e:30:84:74:7c:f2:10:53:1b:5b:f2: 98:6c:6c:4d:9c:66:78:5c:94:dd:a9:49:67:e8:4f:09:c1:b9: 4d:f3:89:81:aa:70:a9:f0:10:5d:a3:77:46:77:9e:60:bb:31: 9c:77:04:48:f5:54:0e:52:43:1f:50:19:a8:32:6d:93:bd:ea: 26:52:ce:79:8d:45:5b:e3:be:d3:4f:f2:60:8b:80:34:d2:0e: de:21:17:d9:ec:34:63:93:d8:49:60:4f:88:3a:19:42:3b:54: 03:21:9c:49:a4:b0:a3:1e:82:9b:f5:e6:ba:75:e8:b5:aa:df: 09:0e:16:3d:27:5c:9c:40:d2:43:64:35:8d:a9:45:93:d3:fd: b5:a9:2e:57:16:07:b2:0e:87:17:62:12:8c:6d:81:58:17:ab: a2:80:73:f2:f5:fb:a7:d8:b8:f6:90:07:a4:ee:9e:84:fe:20: 80:2a:3d:0a:f2:fb:78:69:11:55:84:de:16:f1:a8:fb:d6:9b: 5a:5c:74:db:12:cc:65:5f:17:73:db:54:c0:96:e7:44:c0:3d: 36:c4:7d:75 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MTZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU2MkEyNjhEODRBOTNF Q0JERTc4Qzg3NTc4NzAyRjAzQ0RBMDM4RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCop2I3YH+t9sZKZutfbG07El6ZzfV6sozIn1TGB1t9eFqYvNJ3 SgdEr0LLDJIewutBGMjARSGu+YyXM6mjDQKEvCjYEOQaJ6fipSWQZGp3fmhsPKmd xSIvGVcg5OMt7sOzJiiJUj+YCnOcANqfsU/NBcRjMyjizpgDIZssTXOcoJ1bEgN1 T17nKjNf947b7nZp3HjK0eV8NBS/cR6LNL/oBgGqcap4gmfTeJJc+SaN5/el8Is9 egrcCwCM6Fql3UdVpmJ08MV+prgi+3LMwzRxb8RqRPgpJVvCdXbSdWml7tvHx7aW 6UUValSETECDIbOmrMpG5BZ+8VVGFSVKqDk5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU5iomjYSpPsveeMh1eHAvA82gOPIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzVpb21qWVNwUHN2ZWVNaDFlSEF2QTgyZ09QSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYn4wDQYJKoZIhvcNAQELBQADggEBAJSlEFxIzY9sFUh6Olka9x0WDOTW V1NuRuWXKCiMPSep2t/QHhthBZTYMvh+MIR0fPIQUxtb8phsbE2cZnhclN2pSWfo TwnBuU3ziYGqcKnwEF2jd0Z3nmC7MZx3BEj1VA5SQx9QGagybZO96iZSznmNRVvj vtNP8mCLgDTSDt4hF9nsNGOT2ElgT4g6GUI7VAMhnEmksKMegpv15rp16LWq3wkO Fj0nXJxA0kNkNY2pRZPT/bWpLlcWB7IOhxdiEoxtgVgXq6KAc/L1+6fYuPaQB6Tu noT+IIAqPQry+3hpEVWE3hbxqPvWm1pcdNsSzGVfF3PbVMCW50TAPTbEfXU= -----END CERTIFICATE-----Generated at Wed Nov 5 20:26:03 2025 by rpki-client