$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JSDUpyIRYa0xhga8ODgwokg2VX8.roa File: JSDUpyIRYa0xhga8ODgwokg2VX8.roa (raw, json) Hash identifier: zpWvo6dm9kkAkeeInruEM0JsOmBV1YSrtQhjTCqF0m8= Subject key identifier: 25:20:D4:A7:22:11:61:AD:31:86:06:BC:38:38:30:A2:48:36:55:7F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CB0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JSDUpyIRYa0xhga8ODgwokg2VX8.roa Signing time: Tue 01 Apr 2025 02:05:42 +0000 ROA not before: Tue 01 Apr 2025 02:05:42 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3248 (0xcb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:42 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=2520D4A7221161AD318606BC383830A24836557F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:98:0d:92:19:e5:1b:e4:cb:fc:49:57:72:bb: fb:0f:f8:e1:0e:02:94:5e:01:b1:bb:f0:39:55:00: f3:9d:18:d0:5e:fc:0a:c4:23:c3:28:f7:d4:5a:8a: 3d:59:b0:57:a8:78:94:a0:42:93:fc:0d:99:04:5d: c9:92:cd:d1:e1:b7:4b:e6:e8:8c:92:87:5d:52:fb: 67:4a:a5:e0:34:2c:fa:e1:8e:4f:67:e9:5b:aa:89: 3c:f5:ab:11:2e:2b:54:2b:14:91:da:48:9d:9a:30: 90:82:72:1d:c3:f3:98:0a:72:74:c8:9e:b4:81:82: 61:a1:d6:ff:a8:89:2b:91:d7:85:26:6b:57:09:2e: 65:05:dc:76:45:a0:98:13:67:00:90:d2:08:05:1e: d2:8b:37:5d:05:f5:4b:df:b0:9f:dd:6c:8a:6c:1e: 90:dc:ea:48:e5:be:3f:ec:70:bc:ec:93:31:d8:40: 5d:dd:1b:06:19:c4:d9:37:70:d1:e2:bd:0d:b0:d2: ce:b1:6c:cd:33:8b:4b:42:c6:0e:44:55:c1:9a:15: 58:b4:43:a8:1a:5a:73:20:26:b7:0e:45:8e:dc:1f: 15:23:de:84:dd:1a:52:4b:52:b9:8a:29:7e:bf:e3: ce:f1:f4:4c:11:c3:24:a2:c2:54:94:f1:65:1d:c2: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:20:D4:A7:22:11:61:AD:31:86:06:BC:38:38:30:A2:48:36:55:7F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JSDUpyIRYa0xhga8ODgwokg2VX8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.10.0/23 Signature Algorithm: sha256WithRSAEncryption 89:54:d6:fb:e7:e3:99:5b:4d:df:b1:4e:d2:e2:54:2d:42:d9: eb:9b:d0:6e:10:21:40:c1:23:76:96:63:4a:38:40:72:d3:57: 6a:97:8e:3c:d6:5c:05:4d:aa:cd:7d:57:f3:aa:69:75:d8:3e: f0:bd:9f:b3:56:30:42:4b:93:ad:65:3f:d8:ed:22:9f:cc:34: b3:7b:87:b2:1a:6d:77:8a:e8:62:62:9d:4d:a9:06:05:d6:4b: 41:5d:9a:c3:ba:44:ed:db:d2:b4:fc:00:ec:53:a9:69:ab:a1: 52:e4:ff:d1:e6:89:f8:22:bc:d9:a9:b6:10:b3:4c:97:85:fe: 59:f8:dc:49:95:1e:0a:16:a2:a8:ef:94:8b:4b:8e:d8:7b:b2: a3:c6:16:af:d8:b7:dc:5a:cb:1e:2a:01:52:7f:51:34:6b:6c: 89:3e:82:d3:f5:d6:34:b2:16:6c:94:1a:a0:09:f7:a8:1c:67: 4f:33:57:b1:54:44:59:b3:f1:a8:d5:e7:92:8f:72:5d:b6:9b: 27:5e:d4:27:5a:1b:9a:17:81:e4:06:73:c8:f1:ee:17:bf:5d: 33:76:a4:02:6b:0c:37:e0:bb:d4:03:d5:19:41:00:b0:75:27: b2:bd:aa:f6:0a:fa:cf:3f:a6:22:2a:8e:84:b8:51:fc:ba:8b: 81:7b:a2:af -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDLAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI1MjBENEE3MjIxMTYx QUQzMTg2MDZCQzM4MzgzMEEyNDgzNjU1N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDemA2SGeUb5Mv8SVdyu/sP+OEOApReAbG78DlVAPOdGNBe/ArE I8Mo99Raij1ZsFeoeJSgQpP8DZkEXcmSzdHht0vm6IySh11S+2dKpeA0LPrhjk9n 6VuqiTz1qxEuK1QrFJHaSJ2aMJCCch3D85gKcnTInrSBgmGh1v+oiSuR14Uma1cJ LmUF3HZFoJgTZwCQ0ggFHtKLN10F9UvfsJ/dbIpsHpDc6kjlvj/scLzskzHYQF3d GwYZxNk3cNHivQ2w0s6xbM0zi0tCxg5EVcGaFVi0Q6gaWnMgJrcORY7cHxUj3oTd GlJLUrmKKX6/487x9EwRwySiwlSU8WUdwj/vAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJSDUpyIRYa0xhga8ODgwokg2VX8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0pTRFVweUlSWWEweGhnYThPRGd3b2tnMlZYOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaAowDQYJKoZIhvcNAQELBQADggEBAIlU1vvn45lbTd+xTtLiVC1C2eub 0G4QIUDBI3aWY0o4QHLTV2qXjjzWXAVNqs19V/OqaXXYPvC9n7NWMEJLk61lP9jt Ip/MNLN7h7IabXeK6GJinU2pBgXWS0FdmsO6RO3b0rT8AOxTqWmroVLk/9Hmifgi vNmpthCzTJeF/ln43EmVHgoWoqjvlItLjth7sqPGFq/Yt9xayx4qAVJ/UTRrbIk+ gtP11jSyFmyUGqAJ96gcZ08zV7FURFmz8ajV55KPcl22myde1CdaG5oXgeQGc8jx 7he/XTN2pAJrDDfgu9QD1RlBALB1J7K9qvYK+s8/piIqjoS4Ufy6i4F7oq8= -----END CERTIFICATE-----Generated at Wed Nov 5 13:54:11 2025 by rpki-client