$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hw2ADy8aC-IKeJHkgsB4GILRGtw.roa File: Hw2ADy8aC-IKeJHkgsB4GILRGtw.roa (raw, json) Hash identifier: 97GR7L6PvRQLrmjmFxV9cckoySYv21MPW8lb2ynAZ/I= Subject key identifier: 1F:0D:80:0F:2F:1A:0B:E2:0A:78:91:E4:82:C0:78:18:82:D1:1A:DC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AD5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hw2ADy8aC-IKeJHkgsB4GILRGtw.roa Signing time: Fri 24 Jan 2025 04:53:06 +0000 ROA not before: Fri 24 Jan 2025 04:53:06 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.102.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2773 (0xad5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 24 04:53:06 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=1F0D800F2F1A0BE20A7891E482C0781882D11ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:0b:d4:59:2b:95:26:3e:96:69:45:5f:7c: 33:c5:e4:3c:58:0a:17:02:b2:ce:6d:23:e8:e8:7c: 6b:c1:91:3c:80:66:da:c4:2d:e7:16:a8:0b:d3:b9: 5a:55:ec:a1:5e:d3:9e:f3:6a:69:6d:be:58:94:e0: b2:80:e9:cb:99:78:af:32:92:68:32:c8:c4:52:37: 83:aa:61:b3:07:27:1c:f2:9f:91:d1:39:15:18:06: d0:0f:9a:c0:99:1e:b5:c5:6a:ee:f8:a0:fe:7d:a8: c5:85:db:58:f0:43:07:80:e6:f8:07:6a:61:84:e8: 15:8c:4d:06:dc:5b:9f:c7:21:86:7f:dd:dc:51:2a: c9:b3:8a:31:a9:d0:ff:a6:1b:a4:a7:5c:80:34:81: 01:e8:a6:63:50:f3:34:35:c2:b7:0e:cb:61:65:bb: 3c:5a:dc:fc:52:b4:18:3f:91:39:16:ba:b0:aa:db: 28:62:8f:e8:4f:ba:98:3d:71:1c:16:3a:ea:54:62: 10:25:b9:6e:f1:57:6d:eb:ac:ca:65:c9:79:64:67: e2:fc:4d:f6:19:19:bd:6a:a2:9d:85:c3:be:71:11: 30:e5:2e:90:e2:b3:5d:fb:fa:3d:d1:3b:c7:28:76: 9f:78:00:28:25:28:52:08:77:c7:63:c0:ae:83:c2: 6d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0D:80:0F:2F:1A:0B:E2:0A:78:91:E4:82:C0:78:18:82:D1:1A:DC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hw2ADy8aC-IKeJHkgsB4GILRGtw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.134.0/24 Signature Algorithm: sha256WithRSAEncryption e2:8a:25:41:12:35:ea:08:f6:09:ea:28:64:6a:bf:83:18:2e: 46:97:af:93:e4:fc:8c:d8:94:50:b8:9a:fd:cf:c1:f0:06:32: 8c:60:8a:a8:9d:89:97:31:ef:63:c0:b6:17:86:9f:71:22:c9: 44:18:cd:87:9a:09:e9:f9:45:db:a4:84:75:c4:cb:22:b3:08: 69:ed:9a:1d:72:60:b5:84:c8:81:9c:5f:1b:62:6e:4d:f1:f5: c0:a9:8e:4d:5a:49:77:91:8c:81:98:b2:38:65:30:e2:36:ad: b4:da:9a:42:f2:5a:73:14:de:61:d3:c3:5f:95:87:a5:13:19: 1e:5f:08:70:64:97:f9:32:f5:34:c3:83:97:85:d0:98:79:77: 3f:5c:b7:06:ea:0d:79:d5:9f:43:6a:c5:5e:90:2c:d4:de:62: 89:9d:0c:53:49:56:90:92:b7:9a:62:57:6f:4e:e5:51:4c:2c: 5b:69:60:51:78:dc:e2:59:ef:10:6c:f6:63:95:51:85:eb:fe: d7:b9:33:0f:3c:82:75:90:c9:3a:96:2b:64:ae:d2:17:f1:70: 27:ec:ed:f6:85:b5:5b:bf:b2:33:ed:4b:f5:69:f0:f0:e6:ae: 19:16:20:9a:17:85:82:3c:43:63:4f:a1:e2:18:eb:3f:09:b3: 84:47:3c:9a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCtUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMjQw NDUzMDZaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFGMEQ4MDBGMkYxQTBC RTIwQTc4OTFFNDgyQzA3ODE4ODJEMTFBREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0qwvUWSuVJj6WaUVffDPF5DxYChcCss5tI+jofGvBkTyAZtrE LecWqAvTuVpV7KFe057zamltvliU4LKA6cuZeK8ykmgyyMRSN4OqYbMHJxzyn5HR ORUYBtAPmsCZHrXFau74oP59qMWF21jwQweA5vgHamGE6BWMTQbcW5/HIYZ/3dxR KsmzijGp0P+mG6SnXIA0gQHopmNQ8zQ1wrcOy2Fluzxa3PxStBg/kTkWurCq2yhi j+hPupg9cRwWOupUYhAluW7xV23rrMplyXlkZ+L8TfYZGb1qop2Fw75xETDlLpDi s137+j3RO8codp94ACglKFIId8djwK6Dwm29AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHw2ADy8aC+IKeJHkgsB4GILRGtwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0h3MkFEeThhQy1JS2VKSGtnc0I0R0lMUkd0dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxZoYwDQYJKoZIhvcNAQELBQADggEBAOKKJUESNeoI9gnqKGRqv4MYLkaX r5Pk/IzYlFC4mv3PwfAGMoxgiqidiZcx72PAtheGn3EiyUQYzYeaCen5RdukhHXE yyKzCGntmh1yYLWEyIGcXxtibk3x9cCpjk1aSXeRjIGYsjhlMOI2rbTamkLyWnMU 3mHTw1+Vh6UTGR5fCHBkl/ky9TTDg5eF0Jh5dz9ctwbqDXnVn0NqxV6QLNTeYomd DFNJVpCSt5piV29O5VFMLFtpYFF43OJZ7xBs9mOVUYXr/te5Mw88gnWQyTqWK2Su 0hfxcCfs7faFtVu/sjPtS/Vp8PDmrhkWIJoXhYI8Q2NPoeIY6z8Js4RHPJo= -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:54 2025 by rpki-client