$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7M8rb5nplj0qgRhbKa6CbORc3vU.roa File: 7M8rb5nplj0qgRhbKa6CbORc3vU.roa (raw, json) Hash identifier: FcBn7VJoR/8ryAZowQp+MFnmrBZVe9ew/bkakOVG1c0= Subject key identifier: EC:CF:2B:6F:99:E9:96:3D:2A:81:18:5B:29:AE:82:6C:E4:5C:DE:F5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DB8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7M8rb5nplj0qgRhbKa6CbORc3vU.roa Signing time: Tue 01 Apr 2025 02:24:45 +0000 ROA not before: Tue 01 Apr 2025 02:24:45 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3512 (0xdb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:45 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=ECCF2B6F99E9963D2A81185B29AE826CE45CDEF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:4c:69:0c:05:c5:0c:a7:33:f4:ff:76:ca: c5:71:65:17:19:7a:59:85:71:df:eb:16:ce:c6:5a: c5:92:58:f4:e3:e3:3b:9c:bc:2b:85:16:63:8e:cb: 52:81:c9:41:e7:a3:c5:e9:0e:6d:f2:fa:7c:f7:9e: 02:59:fc:ff:a5:a7:d0:85:66:b1:5e:28:cb:59:c0: 62:5c:d4:ec:67:6f:ca:83:d8:2a:27:cb:58:12:61: cb:07:50:79:8e:ec:7b:73:a4:48:d2:1c:48:18:a9: 7f:7e:e8:8c:4c:21:9e:93:b4:f8:49:dc:21:2d:4e: 69:1c:d9:d4:d1:db:db:5a:f5:cd:ea:a8:c7:ea:64: e4:5d:15:13:3d:e5:d2:20:ad:90:43:ee:63:57:4e: e7:05:25:3b:30:70:05:da:b1:76:c1:b6:d9:99:6f: 6a:fa:ab:7d:2c:26:5a:ce:9b:c4:a9:92:ca:eb:fb: e1:c3:b8:3b:ad:37:50:7d:48:cf:0d:1a:32:f5:48: a3:b9:5c:06:b9:5a:96:d8:b7:fe:df:bb:7f:6f:4c: b3:d4:9c:2c:90:3a:3f:fd:ff:99:92:13:c7:f0:18: 19:ff:94:b5:ac:e9:90:1e:22:8c:ef:b4:31:e7:14: 54:e4:be:20:de:fb:ae:73:55:08:fc:de:00:99:9a: 6f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CF:2B:6F:99:E9:96:3D:2A:81:18:5B:29:AE:82:6C:E4:5C:DE:F5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7M8rb5nplj0qgRhbKa6CbORc3vU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.34.0/24 Signature Algorithm: sha256WithRSAEncryption c8:8f:4a:dc:b9:fb:a5:68:f6:4e:3a:59:6a:96:93:91:56:59: fb:ac:0d:27:c4:bc:b0:26:a8:81:07:b5:e5:58:b9:12:ed:f6: d6:f3:b6:f7:5d:a9:ec:64:5e:dc:cb:95:d1:72:0a:68:d9:04: 12:92:a3:2e:60:02:c9:44:dc:97:05:d6:68:e1:db:09:c5:6f: d6:c3:cc:73:21:8a:07:ae:07:2b:3e:af:3b:a5:70:29:b7:31: 25:7c:25:cc:c5:67:2f:0e:38:07:8c:75:a2:84:8b:e1:59:e2: ac:a6:cb:58:a1:fe:ec:8e:63:e1:a0:2f:e8:75:c8:b9:c9:04: 52:93:01:e5:7d:33:04:63:d5:33:0c:32:17:d5:70:c5:bb:42: 84:32:15:ec:16:4e:57:38:72:09:f9:9b:7a:62:05:43:89:1a: db:a3:e1:fa:ee:97:fc:75:4e:2d:e7:ee:ec:80:f9:37:7b:79: 42:53:5a:1f:6f:58:0c:66:76:96:f5:13:d1:7e:9a:c2:ae:62: 6b:2d:05:ca:55:2a:f7:91:f1:13:74:b1:97:de:b4:06:40:45: dc:f5:e3:68:55:f5:ae:51:ba:79:aa:ed:b4:8a:62:e3:8c:9e: e6:0c:8b:8b:89:bf:a2:28:8b:10:1f:91:63:96:14:b5:14:02: 12:21:09:8c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0NDVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVDQ0YyQjZGOTlFOTk2 M0QyQTgxMTg1QjI5QUU4MjZDRTQ1Q0RFRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0t0xpDAXFDKcz9P92ysVxZRcZelmFcd/rFs7GWsWSWPTj4zuc vCuFFmOOy1KByUHno8XpDm3y+nz3ngJZ/P+lp9CFZrFeKMtZwGJc1Oxnb8qD2Con y1gSYcsHUHmO7HtzpEjSHEgYqX9+6IxMIZ6TtPhJ3CEtTmkc2dTR29ta9c3qqMfq ZORdFRM95dIgrZBD7mNXTucFJTswcAXasXbBttmZb2r6q30sJlrOm8Spksrr++HD uDutN1B9SM8NGjL1SKO5XAa5WpbYt/7fu39vTLPUnCyQOj/9/5mSE8fwGBn/lLWs 6ZAeIozvtDHnFFTkviDe+65zVQj83gCZmm8pAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7M8rb5nplj0qgRhbKa6CbORc3vUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzdNOHJiNW5wbGowcWdSaGJLYTZDYk9SYzN2VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYCIwDQYJKoZIhvcNAQELBQADggEBAMiPSty5+6Vo9k46WWqWk5FWWfus DSfEvLAmqIEHteVYuRLt9tbztvddqexkXtzLldFyCmjZBBKSoy5gAslE3JcF1mjh 2wnFb9bDzHMhigeuBys+rzulcCm3MSV8JczFZy8OOAeMdaKEi+FZ4qymy1ih/uyO Y+GgL+h1yLnJBFKTAeV9MwRj1TMMMhfVcMW7QoQyFewWTlc4cgn5m3piBUOJGtuj 4frul/x1Ti3n7uyA+Td7eUJTWh9vWAxmdpb1E9F+msKuYmstBcpVKveR8RN0sZfe tAZARdz142hV9a5Runmq7bSKYuOMnuYMi4uJv6IoixAfkWOWFLUUAhIhCYw= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:31 2025 by rpki-client