$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7REdI3mMcSzrIMWlsFXUamTd_pw.roa File: 7REdI3mMcSzrIMWlsFXUamTd_pw.roa (raw, json) Hash identifier: eJchydHA+A0ZqSpKa9CyubUk18gnKF1lNd5IWMbIxsk= Subject key identifier: ED:11:1D:23:79:8C:71:2C:EB:20:C5:A5:B0:55:D4:6A:64:DD:FE:9C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CBC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7REdI3mMcSzrIMWlsFXUamTd_pw.roa Signing time: Tue 01 Apr 2025 02:05:47 +0000 ROA not before: Tue 01 Apr 2025 02:05:47 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:47 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=ED111D23798C712CEB20C5A5B055D46A64DDFE9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:e8:ee:82:2e:ab:29:aa:4a:fe:4f:02:c3: 89:f2:1f:cc:ef:27:66:18:e8:f8:a2:5c:26:6d:45: 7e:cc:30:c4:ae:b1:39:69:a9:55:57:18:a6:e8:3f: 5d:7b:f2:4c:01:a8:d0:fb:34:b0:1d:13:51:bd:5b: 70:8c:5a:3a:27:ea:6d:35:19:d7:3f:79:ad:07:79: d0:ed:30:7f:3c:ba:61:3f:5e:11:a3:10:1e:b0:38: 3f:6b:9e:fa:a7:0c:ae:8c:41:ed:4d:cd:c1:7e:09: 47:8b:38:18:90:0c:38:5c:43:71:44:d5:76:03:a0: f2:62:4e:4c:dc:d0:d2:e9:a3:3a:76:12:78:d0:cd: c7:7e:af:c1:3c:1b:ec:54:b8:10:ac:11:ae:b4:8d: 8b:de:cb:a3:a1:63:1b:25:31:70:8d:cf:94:52:18: d2:3f:ee:9c:8e:18:9a:a1:c9:e6:a4:fe:65:38:3a: 62:d5:bf:73:23:9c:2c:82:06:ae:fe:21:81:25:0b: 88:e8:8e:ac:28:22:80:77:3d:75:6a:45:75:81:bc: 71:6b:34:92:d7:24:5e:20:3a:0a:93:64:8e:47:33: d9:81:74:c8:bc:d9:70:a2:7b:0f:32:dd:74:da:bb: ea:15:4a:69:63:23:6d:7a:26:45:2f:67:07:b0:42: ff:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:11:1D:23:79:8C:71:2C:EB:20:C5:A5:B0:55:D4:6A:64:DD:FE:9C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7REdI3mMcSzrIMWlsFXUamTd_pw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.36.0/22 Signature Algorithm: sha256WithRSAEncryption 93:bd:bf:6b:2d:c7:2c:c8:d3:45:35:69:e6:80:41:96:40:50: e1:98:35:a6:3a:2d:7b:e7:1b:e3:30:6d:47:f3:54:9c:2d:ce: 45:af:43:83:e9:76:61:e7:1f:bc:94:a2:be:5f:e1:8e:2b:b1: 43:0a:9e:19:34:ae:2b:41:57:0f:25:c8:a1:07:5a:2f:5d:79: dc:12:2b:0b:45:09:de:94:57:89:95:57:29:60:44:05:a2:fe: f5:78:87:5b:ca:6b:d8:85:7d:04:03:d1:fb:93:d2:0d:a8:b9: 48:f4:bc:9d:5e:86:bd:23:a6:e2:b8:c1:f0:ea:a5:c8:c2:db: bc:2b:89:f4:da:fb:4f:4a:e9:07:d3:21:c5:6c:40:a9:8a:a0: 0d:91:f8:9c:d4:20:15:95:73:6b:ea:d0:18:c7:f5:5b:f6:b9: dc:3c:60:60:b9:bf:67:f6:d5:eb:ea:ed:3e:cb:10:89:c6:33: 11:0a:59:0a:a3:f4:fb:2b:17:25:55:d9:62:0a:44:70:f5:5a: b7:75:fc:b6:29:24:5c:29:ac:55:ab:bc:dc:ec:3e:86:22:a7: a0:90:84:33:09:d4:a9:2a:11:27:3b:d6:b7:dd:86:3c:b0:a1: 8b:eb:19:96:34:d1:c8:0c:ef:e1:12:19:10:1a:65:8b:c4:1d: c9:7f:96:49 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVEMTExRDIzNzk4Qzcx MkNFQjIwQzVBNUIwNTVENDZBNjREREZFOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8Oejugi6rKapK/k8Cw4nyH8zvJ2YY6PiiXCZtRX7MMMSusTlp qVVXGKboP1178kwBqND7NLAdE1G9W3CMWjon6m01Gdc/ea0HedDtMH88umE/XhGj EB6wOD9rnvqnDK6MQe1NzcF+CUeLOBiQDDhcQ3FE1XYDoPJiTkzc0NLpozp2EnjQ zcd+r8E8G+xUuBCsEa60jYvey6OhYxslMXCNz5RSGNI/7pyOGJqhyeak/mU4OmLV v3MjnCyCBq7+IYElC4jojqwoIoB3PXVqRXWBvHFrNJLXJF4gOgqTZI5HM9mBdMi8 2XCiew8y3XTau+oVSmljI216JkUvZwewQv+XAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7REdI3mMcSzrIMWlsFXUamTd/pwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzdSRWRJM21NY1N6cklNV2xzRlhVYW1UZF9wdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYiQwDQYJKoZIhvcNAQELBQADggEBAJO9v2stxyzI00U1aeaAQZZAUOGY NaY6LXvnG+MwbUfzVJwtzkWvQ4PpdmHnH7yUor5f4Y4rsUMKnhk0ritBVw8lyKEH Wi9dedwSKwtFCd6UV4mVVylgRAWi/vV4h1vKa9iFfQQD0fuT0g2ouUj0vJ1ehr0j puK4wfDqpcjC27wrifTa+09K6QfTIcVsQKmKoA2R+JzUIBWVc2vq0BjH9Vv2udw8 YGC5v2f21evq7T7LEInGMxEKWQqj9PsrFyVV2WIKRHD1Wrd1/LYpJFwprFWrvNzs PoYip6CQhDMJ1KkqESc71rfdhjywoYvrGZY00cgM7+ESGRAaZYvEHcl/lkk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:26:51 2025 by rpki-client