$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EtSAZ-Dnh58fOS_HITiNErQT104.roa File: EtSAZ-Dnh58fOS_HITiNErQT104.roa (raw, json) Hash identifier: 9ZDEW2bPLV5VjJ2nH9FYUlnQyD+BRcfj8cJABREKhtI= Subject key identifier: 12:D4:80:67:E0:E7:87:9F:1F:39:2F:C7:21:38:8D:12:B4:13:D7:4E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B85 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EtSAZ-Dnh58fOS_HITiNErQT104.roa Signing time: Tue 01 Apr 2025 01:36:54 +0000 ROA not before: Tue 01 Apr 2025 01:36:54 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2949 (0xb85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:36:54 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=12D48067E0E7879F1F392FC721388D12B413D74E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a5:2b:5c:61:98:80:6e:a4:49:25:f0:54:90: 58:55:1e:ef:ae:69:99:26:46:44:c9:4d:ea:d7:20: 5a:b7:78:c2:6f:64:ca:6a:1a:5c:9e:22:1a:58:0b: 7d:27:29:29:7f:0c:4a:46:70:45:22:7a:e2:1f:87: 5a:cd:b7:9b:19:4a:95:4a:fb:73:af:58:8f:68:f3: 3a:7e:49:cf:e2:69:03:a1:83:de:97:4b:99:d0:d1: c4:e8:62:ec:65:91:99:e7:bd:d2:78:5e:60:c4:0f: 5f:b5:a0:0c:74:58:2a:ff:1f:48:39:f0:31:6b:af: 6a:c3:71:eb:39:fe:8f:ce:ef:41:5c:ec:b1:93:32: 43:73:95:9b:7a:bf:0a:82:68:b8:90:f5:66:90:aa: 48:38:8b:9f:ca:db:81:f3:42:8f:18:01:1e:4e:1d: 70:9e:5f:7f:5a:33:bb:c9:5f:d1:d2:a3:b1:97:6b: 71:56:68:0e:a5:1c:d2:3d:99:2d:c3:20:fa:87:fc: 70:26:47:c5:29:82:e9:1d:e6:9b:82:63:32:c8:88: 57:eb:2b:11:ad:34:b8:28:2f:78:4b:0a:9a:52:c0: 08:75:eb:f1:2b:03:7d:c2:61:9c:3f:97:94:05:52: 73:90:79:d4:bf:bf:32:37:bd:35:79:1e:cf:53:4f: 3d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D4:80:67:E0:E7:87:9F:1F:39:2F:C7:21:38:8D:12:B4:13:D7:4E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EtSAZ-Dnh58fOS_HITiNErQT104.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.128.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:d8:26:85:b7:6d:ee:ba:47:30:78:32:16:93:19:d1:25:81: 3c:89:91:be:05:73:a1:25:53:63:f1:63:4f:20:fb:0f:9a:3c: 72:c9:eb:93:15:0c:27:c5:16:a4:ce:10:c0:57:6c:7b:cf:36: 9e:d9:ee:9d:28:8d:a3:d9:09:05:b2:38:fa:b1:36:00:24:f9: 8d:86:ef:fc:f6:a7:5e:d8:64:84:55:23:bb:50:ed:73:ce:11: e0:a4:28:02:0e:31:36:53:c2:cf:0e:6f:ce:85:50:f8:09:9d: da:34:d3:d1:71:10:85:8b:fa:f8:0c:75:66:46:02:46:2e:d5: ac:45:8b:b7:44:22:d7:41:8e:ba:24:50:7f:20:c4:2e:2f:59: 7d:d0:a6:97:9a:8c:d6:35:e1:0f:da:06:88:ab:77:3a:24:51: e6:84:52:c3:fc:0a:8d:db:c2:c7:20:cd:8d:c2:58:6e:eb:1c: 1a:64:4a:b1:30:1f:90:7e:63:93:12:f9:0c:35:6a:ae:e6:f1: 3a:30:b0:42:c7:7f:eb:83:08:eb:4a:f8:49:a9:f6:f5:4f:e0: cf:6a:af:68:c7:5e:0c:00:d1:a1:2c:21:c3:7c:2f:d4:ec:27: 24:08:47:13:44:33:6c:82:dc:5b:10:fb:8b:ea:08:2a:1c:b0: b5:fa:65:d6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM2NTRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDEyRDQ4MDY3RTBFNzg3 OUYxRjM5MkZDNzIxMzg4RDEyQjQxM0Q3NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOpStcYZiAbqRJJfBUkFhVHu+uaZkmRkTJTerXIFq3eMJvZMpq GlyeIhpYC30nKSl/DEpGcEUieuIfh1rNt5sZSpVK+3OvWI9o8zp+Sc/iaQOhg96X S5nQ0cToYuxlkZnnvdJ4XmDED1+1oAx0WCr/H0g58DFrr2rDces5/o/O70Fc7LGT MkNzlZt6vwqCaLiQ9WaQqkg4i5/K24HzQo8YAR5OHXCeX39aM7vJX9HSo7GXa3FW aA6lHNI9mS3DIPqH/HAmR8Upgukd5puCYzLIiFfrKxGtNLgoL3hLCppSwAh16/Er A33CYZw/l5QFUnOQedS/vzI3vTV5Hs9TTz2XAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUEtSAZ+Dnh58fOS/HITiNErQT104wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0V0U0FaLURuaDU4Zk9TX0hJVGlORXJRVDEwNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYoAwDQYJKoZIhvcNAQELBQADggEBAErYJoW3be66RzB4MhaTGdElgTyJ kb4Fc6ElU2PxY08g+w+aPHLJ65MVDCfFFqTOEMBXbHvPNp7Z7p0ojaPZCQWyOPqx NgAk+Y2G7/z2p17YZIRVI7tQ7XPOEeCkKAIOMTZTws8Ob86FUPgJndo009FxEIWL +vgMdWZGAkYu1axFi7dEItdBjrokUH8gxC4vWX3QppeajNY14Q/aBoirdzokUeaE UsP8Co3bwscgzY3CWG7rHBpkSrEwH5B+Y5MS+Qw1aq7m8TowsELHf+uDCOtK+Emp 9vVP4M9qr2jHXgwA0aEsIcN8L9TsJyQIRxNEM2yC3FsQ+4vqCCocsLX6ZdY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:17:12 2025 by rpki-client