$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JLH9ASwVMT589eNGgGO5gcCV01I.roa File: JLH9ASwVMT589eNGgGO5gcCV01I.roa (raw, json) Hash identifier: jv574eWdrBfMZ4JHSD/W+zwpLUU7Vdjw/fxSMK02NFc= Subject key identifier: 24:B1:FD:01:2C:15:31:3E:7C:F5:E3:46:80:63:B9:81:C0:95:D3:52 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C8D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JLH9ASwVMT589eNGgGO5gcCV01I.roa Signing time: Tue 01 Apr 2025 02:03:20 +0000 ROA not before: Tue 01 Apr 2025 02:03:20 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:20 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=24B1FD012C15313E7CF5E3468063B981C095D352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:9d:53:59:6a:e6:b7:0a:b0:8e:77:d5:dd: c3:0b:6d:50:c3:38:2a:30:96:34:cf:d8:6a:dd:be: 24:cc:8c:60:5d:fe:9e:f3:32:a8:a9:c6:0d:37:99: 2d:96:4e:a7:1d:ed:bb:c6:2f:37:a2:9c:e6:02:5f: cf:86:11:c9:78:25:ab:bb:16:8a:a7:cb:b6:63:09: 8c:7e:ee:c9:10:55:36:a0:b9:bf:b4:eb:25:b7:bc: 5c:ed:16:2b:ca:56:70:d7:82:fd:73:73:f5:48:d4: 7a:f6:c6:28:bb:27:a1:b4:49:26:84:d0:07:7a:91: ab:36:d7:2b:02:f9:71:60:18:b4:da:58:1b:eb:e9: e0:04:48:c5:cd:28:4a:d7:98:4b:9f:3c:1f:08:83: 17:d7:c0:f1:1c:2d:7b:03:d1:69:b6:e0:31:22:3a: cf:d4:ca:56:0f:86:90:53:96:20:4d:90:35:2c:45: 78:2d:88:bd:85:c6:b0:2b:a0:a7:39:77:3b:53:9b: 6c:3c:c6:38:dc:2d:74:3b:23:33:3e:69:56:26:b8: 8a:a0:17:8e:fc:93:19:0a:02:0a:62:ce:e6:0b:32: ec:a7:d8:40:59:30:66:db:bf:ee:64:60:31:b8:d5: 41:c0:a2:ed:cc:c6:68:f6:d0:7b:8a:24:0f:3e:5d: d6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B1:FD:01:2C:15:31:3E:7C:F5:E3:46:80:63:B9:81:C0:95:D3:52 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JLH9ASwVMT589eNGgGO5gcCV01I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.48.0/21 Signature Algorithm: sha256WithRSAEncryption d7:b1:a7:95:29:a1:5f:98:82:f2:fd:17:40:f4:a4:52:c0:93: 01:ca:28:26:b2:7a:21:b1:76:76:e4:96:44:27:6a:ec:6f:0f: c1:ce:af:18:dc:08:eb:2f:22:f8:21:2f:d6:ee:02:76:58:93: b7:ab:39:e9:5e:46:54:98:7c:c1:62:a7:6c:26:39:fb:b9:34: c6:0c:17:5e:23:c3:f7:f4:97:5d:47:7c:a4:0a:c6:e5:e3:4e: 9c:a6:be:7c:79:c8:d2:6a:f8:22:e2:c2:f0:42:1b:f2:40:80: f4:31:ed:83:ac:bb:20:ed:83:b2:25:24:52:e2:a4:d6:f4:5f: 7d:6d:dc:72:73:ad:79:d0:8f:42:bd:b3:b4:64:3e:39:62:2b: 63:d2:c0:28:9a:53:f8:1d:81:98:cf:93:6f:3d:bc:6d:49:ac: fe:d7:c6:98:57:b0:29:38:9d:aa:c7:85:4c:4f:8b:53:ec:d2: 70:fd:dd:fa:3f:c5:09:bb:59:66:c7:83:14:2a:55:2a:c1:fd: 70:fc:6a:86:1b:d0:60:21:19:72:8c:11:12:75:f3:83:cf:bd: 31:1c:be:ae:17:23:23:6c:4b:78:67:82:59:b9:0e:74:4c:23: 3d:c2:a2:88:e8:62:d8:20:e5:a6:bb:b3:21:be:ce:42:ff:0c: ec:6f:ce:3c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMjBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI0QjFGRDAxMkMxNTMx M0U3Q0Y1RTM0NjgwNjNCOTgxQzA5NUQzNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjSp1TWWrmtwqwjnfV3cMLbVDDOCowljTP2GrdviTMjGBd/p7z Mqipxg03mS2WTqcd7bvGLzeinOYCX8+GEcl4Jau7Foqny7ZjCYx+7skQVTagub+0 6yW3vFztFivKVnDXgv1zc/VI1Hr2xii7J6G0SSaE0Ad6kas21ysC+XFgGLTaWBvr 6eAESMXNKErXmEufPB8IgxfXwPEcLXsD0Wm24DEiOs/UylYPhpBTliBNkDUsRXgt iL2FxrAroKc5dztTm2w8xjjcLXQ7IzM+aVYmuIqgF478kxkKAgpizuYLMuyn2EBZ MGbbv+5kYDG41UHAou3Mxmj20HuKJA8+XdbVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJLH9ASwVMT589eNGgGO5gcCV01IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0pMSDlBU3dWTVQ1ODllTkdnR081Z2NDVjAxSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPc0jAwDQYJKoZIhvcNAQELBQADggEBANexp5UpoV+YgvL9F0D0pFLAkwHK KCayeiGxdnbklkQnauxvD8HOrxjcCOsvIvghL9buAnZYk7erOeleRlSYfMFip2wm Ofu5NMYMF14jw/f0l11HfKQKxuXjTpymvnx5yNJq+CLiwvBCG/JAgPQx7YOsuyDt g7IlJFLipNb0X31t3HJzrXnQj0K9s7RkPjliK2PSwCiaU/gdgZjPk289vG1JrP7X xphXsCk4narHhUxPi1Ps0nD93fo/xQm7WWbHgxQqVSrB/XD8aoYb0GAhGXKMERJ1 84PPvTEcvq4XIyNsS3hnglm5DnRMIz3CoojoYtgg5aa7syG+zkL/DOxvzjw= -----END CERTIFICATE-----Generated at Wed Nov 5 21:59:18 2025 by rpki-client