$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LoRLL-nlq9Iz-65FcoayrctEPX0.roa File: LoRLL-nlq9Iz-65FcoayrctEPX0.roa (raw, json) Hash identifier: cpfJlW1GH8RyACa8zhyQ9bQIHFruN1Q2UaiOdW/qx+Q= Subject key identifier: 2E:84:4B:2F:E9:E5:AB:D2:33:FB:AE:45:72:86:B2:AD:CB:44:3D:7D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E74 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LoRLL-nlq9Iz-65FcoayrctEPX0.roa Signing time: Tue 10 Jun 2025 10:53:33 +0000 ROA not before: Tue 10 Jun 2025 10:53:33 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.105.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3700 (0xe74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:53:33 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=2E844B2FE9E5ABD233FBAE457286B2ADCB443D7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:34:6f:81:97:73:f4:0d:f6:07:e0:08:12: 34:7e:09:25:96:f3:a6:8f:06:cf:d4:d4:45:e4:e5: 7e:25:49:4d:e4:47:b1:ed:95:1f:18:8e:65:af:87: 70:7f:27:4f:63:50:e8:07:d3:04:83:54:22:2a:26: 41:7f:9a:11:37:9f:fb:8c:39:a9:6d:8c:64:65:c6: 5b:9b:0f:92:a1:13:28:6a:d0:18:cd:eb:42:25:03: 37:14:df:92:30:58:db:72:a9:cf:9a:19:c1:7d:4d: 59:6b:7f:cf:83:e4:ab:38:e5:be:68:fa:f7:0b:cb: e6:d6:05:e1:9c:30:35:2d:da:5c:2c:0a:bd:ca:5d: a8:3c:c8:77:c5:3d:f4:d5:a9:7e:4a:fd:bf:a7:3e: fc:4e:cc:90:77:a9:53:45:9c:ef:26:4f:08:65:57: d6:ba:7f:8d:66:d7:5c:7c:0a:5a:26:0e:b3:52:fe: 73:ee:3d:03:5f:02:be:c8:f2:ca:bb:89:8c:7d:a7: 60:ab:34:e0:49:f5:4c:c2:6a:fd:31:1c:ac:ce:24: 45:79:44:33:82:6f:c9:a6:ac:17:ee:83:9c:87:ba: 95:fe:93:db:f3:59:a0:9b:74:90:f1:33:12:2c:dc: 33:a9:9f:b6:dd:a0:ba:2a:32:b2:22:99:e7:25:9e: f6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:84:4B:2F:E9:E5:AB:D2:33:FB:AE:45:72:86:B2:AD:CB:44:3D:7D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LoRLL-nlq9Iz-65FcoayrctEPX0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.78.0/24 Signature Algorithm: sha256WithRSAEncryption 01:2a:d7:03:7f:41:00:53:07:cd:de:d5:cd:2d:9c:85:99:aa: 49:b4:b9:76:68:bc:26:3e:5a:f6:88:ba:de:af:0c:c1:25:0d: e5:1e:14:08:60:12:a2:08:07:3c:1f:49:87:9f:c6:f2:39:d1: 5e:a4:3f:21:bb:91:dc:24:03:96:08:bd:b3:4c:7b:3d:51:d2: 26:c6:af:e2:03:b7:09:02:d6:60:30:2c:27:41:eb:fe:79:2a: e3:c2:65:fe:d8:b3:fd:40:47:b2:f3:f9:b2:f5:7d:fc:88:99: 5f:80:15:bf:9a:5a:f6:6f:36:26:a7:fd:08:33:ed:8b:f1:19: 48:8a:29:ef:61:b3:62:23:f0:3b:54:f5:8e:82:ac:cf:7b:2c: 31:3e:0b:82:cc:57:da:ff:a2:d3:6d:fd:b2:22:d7:8f:09:53: 50:3a:e1:39:eb:fe:81:9e:db:13:78:f1:b5:2b:84:06:9a:22: 3b:8b:e6:74:0e:af:ec:71:68:8c:18:79:7e:cd:ff:c4:82:d3: f8:ff:2d:8f:9a:c4:2a:f6:33:8b:c9:14:8a:97:2d:21:6f:1a: b9:4f:d3:29:0b:08:3d:e9:62:fc:72:14:4e:a1:3e:17:1a:70: d7:2d:89:75:86:96:cf:f4:ee:e0:73:2c:3b:46:0c:49:f3:bd: 89:8b:51:a5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDnQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDUzMzNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDJFODQ0QjJGRTlFNUFC RDIzM0ZCQUU0NTcyODZCMkFEQ0I0NDNEN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJWTRvgZdz9A32B+AIEjR+CSWW86aPBs/U1EXk5X4lSU3kR7Ht lR8YjmWvh3B/J09jUOgH0wSDVCIqJkF/mhE3n/uMOaltjGRlxlubD5KhEyhq0BjN 60IlAzcU35IwWNtyqc+aGcF9TVlrf8+D5Ks45b5o+vcLy+bWBeGcMDUt2lwsCr3K Xag8yHfFPfTVqX5K/b+nPvxOzJB3qVNFnO8mTwhlV9a6f41m11x8ClomDrNS/nPu PQNfAr7I8sq7iYx9p2CrNOBJ9UzCav0xHKzOJEV5RDOCb8mmrBfug5yHupX+k9vz WaCbdJDxMxIs3DOpn7bdoLoqMrIimeclnvYtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULoRLL+nlq9Iz+65FcoayrctEPX0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xvUkxMLW5scTlJei02NUZjb2F5cmN0RVBYMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaU4wDQYJKoZIhvcNAQELBQADggEBAAEq1wN/QQBTB83e1c0tnIWZqkm0 uXZovCY+WvaIut6vDMElDeUeFAhgEqIIBzwfSYefxvI50V6kPyG7kdwkA5YIvbNM ez1R0ibGr+IDtwkC1mAwLCdB6/55KuPCZf7Ys/1AR7Lz+bL1ffyImV+AFb+aWvZv Nian/Qgz7YvxGUiKKe9hs2Ij8DtU9Y6CrM97LDE+C4LMV9r/otNt/bIi148JU1A6 4Tnr/oGe2xN48bUrhAaaIjuL5nQOr+xxaIwYeX7N/8SC0/j/LY+axCr2M4vJFIqX LSFvGrlP0ykLCD3pYvxyFE6hPhcacNctiXWGls/07uBzLDtGDEnzvYmLUaU= -----END CERTIFICATE-----Generated at Wed Nov 5 17:19:33 2025 by rpki-client