$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/85SrqtUExWZw4JQ3Nk3-Woo1Ork.roa File: 85SrqtUExWZw4JQ3Nk3-Woo1Ork.roa (raw, json) Hash identifier: LbrEF74Y3LKxf7B36fHxGLI4Uln3K4srhu5t+VMX96Y= Subject key identifier: F3:94:AB:AA:D5:04:C5:66:70:E0:94:37:36:4D:FE:5A:8A:35:3A:B9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CBA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/85SrqtUExWZw4JQ3Nk3-Woo1Ork.roa Signing time: Tue 01 Apr 2025 02:05:46 +0000 ROA not before: Tue 01 Apr 2025 02:05:46 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:46 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=F394ABAAD504C56670E09437364DFE5A8A353AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:ea:27:1c:98:f7:f1:d9:a2:c5:32:cb:30: e1:6c:da:38:dd:f8:bf:cd:e8:e0:43:a9:8d:7b:d5: 2f:45:68:4f:dc:5e:9b:d7:3e:96:6e:3a:4f:3a:68: 5b:66:7a:72:8e:d9:55:35:24:73:3b:f3:41:cf:2c: 8f:43:48:f3:c0:8b:b0:54:73:8e:7a:71:a4:03:6e: 1d:53:27:58:39:8b:37:a6:94:04:1b:0d:02:dd:39: 7e:2e:8f:79:2d:ab:4c:07:45:b2:39:3d:3e:1e:cd: 0e:08:9e:93:e1:4a:07:cd:1d:40:15:27:bb:f5:e5: bf:35:79:78:41:2c:5a:61:1e:90:e3:99:31:b8:6d: 38:70:ca:ec:e5:56:74:71:cc:1c:f3:db:f6:04:c2: f2:f9:b4:1d:40:a7:02:b5:b6:04:3f:3f:90:28:22: 08:52:98:07:73:3b:7c:97:fb:94:06:84:c2:a2:96: 80:91:d8:f9:66:7a:82:75:52:d0:ff:d1:ba:55:98: 62:8f:c1:03:e8:84:2f:56:69:8e:39:4e:04:d0:ee: d8:71:d0:9e:a0:8d:b8:cf:86:c2:07:01:3a:10:68: 11:27:7e:47:23:87:d7:e1:0b:e8:90:15:34:a3:39: 13:ef:57:07:16:30:ef:06:c1:38:a5:af:4e:bd:64: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:94:AB:AA:D5:04:C5:66:70:E0:94:37:36:4D:FE:5A:8A:35:3A:B9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/85SrqtUExWZw4JQ3Nk3-Woo1Ork.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.46.0/23 Signature Algorithm: sha256WithRSAEncryption 57:0e:4e:8a:72:06:e7:e9:bf:25:42:ce:bb:9e:95:5a:5b:75: 54:82:58:4c:b2:97:2e:18:62:85:5f:d9:2c:dd:ed:57:3f:94: ca:27:69:4a:9c:af:58:3c:77:6f:d4:73:05:80:be:4d:e8:1b: e2:83:c8:e2:a3:dc:4e:90:7c:b6:c8:3a:6d:1f:82:08:6d:fe: aa:3e:67:10:a8:a7:3c:23:6b:08:62:1c:7d:34:21:20:6a:06: 77:fe:fa:09:72:fa:92:f8:1d:5a:65:37:c4:c8:6c:c0:a1:e2: 1d:be:3d:72:c5:b6:4f:5a:4d:82:7b:7b:35:01:2a:0e:96:da: b8:66:e0:cb:ad:03:4a:2d:f2:35:dd:ff:5e:00:41:32:1c:3a: 8f:5a:d9:a9:c6:84:6a:7f:81:0e:d9:db:12:30:01:02:9b:84: e6:7d:cd:03:50:b5:fd:0a:1d:41:26:ed:00:cb:6e:e3:38:56: 64:81:71:68:00:03:43:88:fb:2c:6d:d4:99:64:98:f9:46:fb: bd:36:2c:86:c7:3c:20:6c:cd:7b:e7:07:cd:c1:bf:22:74:fa: b7:e1:6b:91:a5:98:69:b1:0c:1e:41:ec:d3:1b:9d:a4:d5:c4: ee:7b:bf:66:76:0b:bb:2a:7d:2a:09:05:38:12:83:3f:a0:9e: c8:b3:db:e7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYzOTRBQkFBRDUwNEM1 NjY3MEUwOTQzNzM2NERGRTVBOEEzNTNBQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU5OonHJj38dmixTLLMOFs2jjd+L/N6OBDqY171S9FaE/cXpvX PpZuOk86aFtmenKO2VU1JHM780HPLI9DSPPAi7BUc456caQDbh1TJ1g5izemlAQb DQLdOX4uj3ktq0wHRbI5PT4ezQ4InpPhSgfNHUAVJ7v15b81eXhBLFphHpDjmTG4 bThwyuzlVnRxzBzz2/YEwvL5tB1ApwK1tgQ/P5AoIghSmAdzO3yX+5QGhMKiloCR 2PlmeoJ1UtD/0bpVmGKPwQPohC9WaY45TgTQ7thx0J6gjbjPhsIHAToQaBEnfkcj h9fhC+iQFTSjORPvVwcWMO8GwTilr069ZKiNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU85SrqtUExWZw4JQ3Nk3+Woo1OrkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Lzg1U3JxdFVFeFdadzRKUTNOazMtV29vMU9yay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYC4wDQYJKoZIhvcNAQELBQADggEBAFcOTopyBufpvyVCzruelVpbdVSC WEyyly4YYoVf2Szd7Vc/lMonaUqcr1g8d2/UcwWAvk3oG+KDyOKj3E6QfLbIOm0f gght/qo+ZxCopzwjawhiHH00ISBqBnf++gly+pL4HVplN8TIbMCh4h2+PXLFtk9a TYJ7ezUBKg6W2rhm4MutA0ot8jXd/14AQTIcOo9a2anGhGp/gQ7Z2xIwAQKbhOZ9 zQNQtf0KHUEm7QDLbuM4VmSBcWgAA0OI+yxt1JlkmPlG+702LIbHPCBszXvnB83B vyJ0+rfha5GlmGmxDB5B7NMbnaTVxO57v2Z2C7sqfSoJBTgSgz+gnsiz2+c= -----END CERTIFICATE-----Generated at Wed Nov 5 20:16:23 2025 by rpki-client