$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BGD2oE0H2UJz-dpFOb4B3Wuq_9E.roa File: BGD2oE0H2UJz-dpFOb4B3Wuq_9E.roa (raw, json) Hash identifier: pT5EAVw6Z+P1xh3H0MMO56QI8HZJasmYsiE0wBbL50Q= Subject key identifier: 04:60:F6:A0:4D:07:D9:42:73:F9:DA:45:39:BE:01:DD:6B:AA:FF:D1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C08 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BGD2oE0H2UJz-dpFOb4B3Wuq_9E.roa Signing time: Tue 01 Apr 2025 01:51:32 +0000 ROA not before: Tue 01 Apr 2025 01:51:32 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3080 (0xc08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:32 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=0460F6A04D07D94273F9DA4539BE01DD6BAAFFD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0d:d6:60:4a:09:d7:0b:46:6e:d5:31:90:af: 15:bc:45:d3:2e:c9:42:f0:d5:15:e6:32:f3:e0:e7: ab:0e:bb:2b:ec:1a:4f:80:58:76:a1:31:c2:02:6f: 1b:f6:e0:44:5e:12:9d:53:cc:34:2b:38:db:35:da: d6:a8:81:4b:01:46:73:82:d2:75:3a:82:e4:ee:42: ce:fd:20:0e:c6:ec:12:30:69:df:85:96:0a:9c:18: e1:d0:42:d8:c6:82:50:28:c2:19:d7:d9:42:48:a6: 08:a3:55:70:5d:ec:92:2d:4a:4c:78:92:e3:72:f7: a4:89:e6:3c:4b:ad:7d:48:b9:03:48:1d:58:ed:8c: c7:cc:ed:50:f4:57:a3:55:4d:68:02:b6:c2:0c:0d: cd:f4:1c:ab:36:d2:05:2e:3d:84:61:70:92:ab:1b: f5:71:53:23:50:59:9e:5d:20:67:41:e2:24:55:a1: c8:a8:65:43:4e:a8:7a:b2:96:6e:2a:90:cd:00:7b: 5c:38:c6:8c:95:98:18:6d:c6:fe:22:9e:d0:0c:55: 52:23:b1:20:d1:bc:48:75:f5:11:46:95:7a:6a:d4: 89:10:9e:8b:6d:49:1a:02:aa:ea:ce:6e:13:ae:15: f9:58:a3:c7:e1:b8:35:a4:bb:49:f2:8a:3d:1c:eb: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:60:F6:A0:4D:07:D9:42:73:F9:DA:45:39:BE:01:DD:6B:AA:FF:D1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BGD2oE0H2UJz-dpFOb4B3Wuq_9E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.29.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:09:b3:17:da:d4:a7:ab:fe:10:c9:dd:d6:c6:2a:b3:a1:8e: 43:12:9d:85:b0:5d:f6:e5:10:6f:a2:b8:b2:17:69:9d:78:e4: ee:cd:1b:52:3f:b5:41:cf:26:8c:69:d3:50:6a:83:75:48:ee: 22:4c:b9:af:61:d4:f9:f8:85:4f:9e:71:18:25:5a:b1:8f:0a: de:5e:71:bf:22:0a:c7:0f:ce:bf:ce:8c:b8:f6:41:6c:19:db: 7f:89:01:c6:35:4f:16:76:02:b4:0c:ec:30:21:93:80:b2:36: 44:89:67:2f:b0:56:61:a1:4b:9f:e8:1e:8c:7c:6e:79:da:6b: d5:14:70:3d:d7:35:63:0e:21:4d:ca:c5:94:66:24:75:a0:70: b9:ff:9f:4e:79:c9:72:96:f6:d6:ed:a9:1b:43:f9:b3:8f:2d: 48:9d:f8:5f:ab:40:5f:e4:50:ec:bc:61:db:fe:3d:50:ad:85: bb:86:3a:2b:31:65:a3:58:bc:49:0e:80:73:3a:8e:d8:b9:16: 44:0c:98:32:22:f9:77:77:61:2c:5f:32:c8:1c:ba:a3:d3:86: 61:fe:6f:4a:0f:e2:9e:aa:22:de:7a:83:7c:be:10:77:87:c5: 8e:7e:aa:90:ab:e4:0f:b5:35:0d:19:51:d3:48:10:7f:11:1e: 24:b8:f3:78 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMzJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA0NjBGNkEwNEQwN0Q5 NDI3M0Y5REE0NTM5QkUwMURENkJBQUZGRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxDdZgSgnXC0Zu1TGQrxW8RdMuyULw1RXmMvPg56sOuyvsGk+A WHahMcICbxv24EReEp1TzDQrONs12taogUsBRnOC0nU6guTuQs79IA7G7BIwad+F lgqcGOHQQtjGglAowhnX2UJIpgijVXBd7JItSkx4kuNy96SJ5jxLrX1IuQNIHVjt jMfM7VD0V6NVTWgCtsIMDc30HKs20gUuPYRhcJKrG/VxUyNQWZ5dIGdB4iRVocio ZUNOqHqylm4qkM0Ae1w4xoyVmBhtxv4intAMVVIjsSDRvEh19RFGlXpq1IkQnott SRoCqurObhOuFflYo8fhuDWku0nyij0c6wn9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBGD2oE0H2UJz+dpFOb4B3Wuq/9EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0JHRDJvRTBIMlVKei1kcEZPYjRCM1d1cV85RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYB0wDQYJKoZIhvcNAQELBQADggEBAA0Jsxfa1Ker/hDJ3dbGKrOhjkMS nYWwXfblEG+iuLIXaZ145O7NG1I/tUHPJoxp01Bqg3VI7iJMua9h1Pn4hU+ecRgl WrGPCt5ecb8iCscPzr/OjLj2QWwZ23+JAcY1TxZ2ArQM7DAhk4CyNkSJZy+wVmGh S5/oHox8bnnaa9UUcD3XNWMOIU3KxZRmJHWgcLn/n055yXKW9tbtqRtD+bOPLUid +F+rQF/kUOy8Ydv+PVCthbuGOisxZaNYvEkOgHM6jti5FkQMmDIi+Xd3YSxfMsgc uqPThmH+b0oP4p6qIt56g3y+EHeHxY5+qpCr5A+1NQ0ZUdNIEH8RHiS483g= -----END CERTIFICATE-----Generated at Wed Nov 5 20:19:05 2025 by rpki-client