$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BXl9ptaHWgajSvn98QOVTVs55bM.roa File: BXl9ptaHWgajSvn98QOVTVs55bM.roa (raw, json) Hash identifier: r0Rm1HJPWV2HlzZTGph+AaLvYWhG/sN+A1QkWEa7u2c= Subject key identifier: 05:79:7D:A6:D6:87:5A:06:A3:4A:F9:FD:F1:03:95:4D:5B:39:E5:B3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CC4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BXl9ptaHWgajSvn98QOVTVs55bM.roa Signing time: Tue 01 Apr 2025 02:05:50 +0000 ROA not before: Tue 01 Apr 2025 02:05:50 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3268 (0xcc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:50 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=05797DA6D6875A06A34AF9FDF103954D5B39E5B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:3d:a6:22:8c:93:39:97:61:16:a3:15:52: 28:93:db:3e:e3:af:07:0d:16:bf:50:36:13:36:35: 45:8e:be:b1:6f:40:c6:01:2d:52:fa:e9:d9:03:6a: a0:3b:34:8d:f4:28:7f:3c:2e:cf:df:ea:9c:3e:28: 15:2a:94:b9:90:cb:ca:17:39:65:b9:86:fa:62:4c: 69:5b:59:a2:80:a9:cf:2d:30:c2:89:79:e5:9a:4c: 3b:78:bc:4f:f8:94:f5:42:a8:8f:7d:72:01:b4:13: 30:d1:4b:e0:b4:b8:96:9d:f8:45:ae:fb:6c:14:b9: 9b:27:dc:ba:ce:de:12:90:80:c8:6d:45:6a:f2:77: 97:27:a8:11:44:59:27:5c:7c:59:08:e8:ef:42:02: 86:2e:79:16:ff:03:b8:8a:ca:d6:08:fe:ff:26:f6: ca:f7:1e:8a:f4:40:8e:c3:93:33:f1:ac:b4:4c:2a: a7:e3:57:cf:1e:d3:63:86:c3:d1:76:b6:95:c6:e3: e1:fe:c4:50:0b:d2:0d:ba:eb:1d:41:14:9f:58:e8: d4:a1:98:15:67:d2:32:3c:46:6e:4e:ef:7c:74:25: 76:af:0e:61:70:e5:ca:ea:51:07:de:b3:72:4f:f8: 5b:13:2d:a6:4d:bf:17:dc:9e:9e:5e:db:bc:bd:e4: 50:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:79:7D:A6:D6:87:5A:06:A3:4A:F9:FD:F1:03:95:4D:5B:39:E5:B3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BXl9ptaHWgajSvn98QOVTVs55bM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.222.0/23 Signature Algorithm: sha256WithRSAEncryption 42:46:ab:e7:45:89:cc:03:d3:19:2c:8b:e1:2f:57:c3:c0:66: fd:a0:6a:37:b3:c0:e4:aa:f3:d3:d1:98:ab:f4:8d:7d:cb:5d: 69:ea:5e:fe:36:c3:75:ff:42:e7:3d:97:b0:42:b7:5e:b1:88: da:f5:18:dd:d9:68:0f:ed:86:fa:57:ca:3a:2b:c9:55:28:74: 11:d9:6c:19:cf:0a:3c:b0:be:0f:8e:d1:b5:36:29:91:b7:e9: 30:41:86:5e:35:47:0b:e0:13:c0:f8:8a:ec:2d:c3:fe:d4:ec: d4:5e:8c:0e:96:44:59:32:db:0a:49:dd:b5:3d:5f:28:7c:68: 16:c4:87:c2:a2:5d:7e:27:58:bf:36:00:2f:20:15:c8:8e:54: 95:25:56:06:9b:6d:78:24:0f:44:55:45:fb:b5:ef:a8:85:35: e0:84:01:fa:8a:60:42:a2:61:2c:32:50:40:34:d3:9b:60:ee: 9c:59:42:d8:98:10:f8:48:7c:88:86:5b:fe:96:43:01:32:69: 59:5a:d9:d8:1e:c3:ef:0f:61:31:c8:e7:ad:f3:2d:d8:6c:32: b8:cb:5d:dd:47:07:da:af:85:11:c1:9e:23:7f:b1:f5:7c:fc: 4a:a7:a9:de:8a:2d:57:52:36:f1:92:71:bc:f9:a5:9e:6a:2e: 6e:16:08:26 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NTBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA1Nzk3REE2RDY4NzVB MDZBMzRBRjlGREYxMDM5NTRENUIzOUU1QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7iD2mIoyTOZdhFqMVUiiT2z7jrwcNFr9QNhM2NUWOvrFvQMYB LVL66dkDaqA7NI30KH88Ls/f6pw+KBUqlLmQy8oXOWW5hvpiTGlbWaKAqc8tMMKJ eeWaTDt4vE/4lPVCqI99cgG0EzDRS+C0uJad+EWu+2wUuZsn3LrO3hKQgMhtRWry d5cnqBFEWSdcfFkI6O9CAoYueRb/A7iKytYI/v8m9sr3Hor0QI7DkzPxrLRMKqfj V88e02OGw9F2tpXG4+H+xFAL0g266x1BFJ9Y6NShmBVn0jI8Rm5O73x0JXavDmFw 5crqUQfes3JP+FsTLaZNvxfcnp5e27y95FANAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBXl9ptaHWgajSvn98QOVTVs55bMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0JYbDlwdGFIV2dhalN2bjk4UU9WVFZzNTViTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExat4wDQYJKoZIhvcNAQELBQADggEBAEJGq+dFicwD0xksi+EvV8PAZv2g ajezwOSq89PRmKv0jX3LXWnqXv42w3X/Quc9l7BCt16xiNr1GN3ZaA/thvpXyjor yVUodBHZbBnPCjywvg+O0bU2KZG36TBBhl41RwvgE8D4iuwtw/7U7NRejA6WRFky 2wpJ3bU9Xyh8aBbEh8KiXX4nWL82AC8gFciOVJUlVgabbXgkD0RVRfu176iFNeCE AfqKYEKiYSwyUEA005tg7pxZQtiYEPhIfIiGW/6WQwEyaVla2dgew+8PYTHI563z LdhsMrjLXd1HB9qvhRHBniN/sfV8/Eqnqd6KLVdSNvGScbz5pZ5qLm4WCCY= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:31 2025 by rpki-client