$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MmKjk_jAJ-8Im0mKc_A1Qm9Uylo.roa File: MmKjk_jAJ-8Im0mKc_A1Qm9Uylo.roa (raw, json) Hash identifier: gq/MnBPYamAQpvVZkAgTNavPF+GKCpnR09S4YSM8KOA= Subject key identifier: 32:62:A3:93:F8:C0:27:EF:08:9B:49:8A:73:F0:35:42:6F:54:CA:5A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B6B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MmKjk_jAJ-8Im0mKc_A1Qm9Uylo.roa Signing time: Tue 01 Apr 2025 01:33:28 +0000 ROA not before: Tue 01 Apr 2025 01:33:28 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2923 (0xb6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:33:28 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=3262A393F8C027EF089B498A73F035426F54CA5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:f3:5d:fe:69:82:cd:02:ae:b4:ea:d7:17: 2b:ee:f5:c1:45:af:99:18:25:11:4c:c1:aa:a8:de: b3:c1:1a:55:05:97:f0:d3:9e:b4:79:c7:ab:a6:61: 88:bc:e3:7b:c1:d5:05:7a:4f:cc:c8:a2:c6:5c:e4: be:37:50:4a:a0:95:81:ba:67:26:fc:c7:3b:73:71: 9c:09:8a:31:13:86:eb:78:f4:29:c3:da:54:cb:63: 4f:07:ac:14:58:cd:b7:ac:0b:ea:0a:f1:0a:55:c9: 8a:27:28:00:e7:46:02:2f:a9:fa:dc:3f:80:aa:00: 78:61:a8:24:89:49:80:d2:3d:51:3b:ec:92:98:f0: 57:f0:27:75:61:e6:f9:01:2c:da:42:ad:fb:fc:f4: f0:be:8c:0b:bb:99:e2:39:25:15:a5:7a:9f:93:e4: 9f:7f:06:b0:c0:50:15:e6:fc:d1:1f:0f:ef:e0:85: 3e:aa:57:9b:fe:0b:3d:18:ab:74:50:8f:b6:6f:8f: 88:6a:52:98:36:86:a7:cc:f2:66:95:12:c5:f3:de: 76:bd:14:ed:ae:81:ba:42:4e:0a:42:ef:f6:e1:2c: 3c:12:97:cd:51:0f:ee:f3:69:7f:88:8e:bc:95:44: f7:b3:e3:ec:1b:3a:0c:17:8b:7a:c2:e4:0a:fd:2a: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:62:A3:93:F8:C0:27:EF:08:9B:49:8A:73:F0:35:42:6F:54:CA:5A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MmKjk_jAJ-8Im0mKc_A1Qm9Uylo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.114.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:50:c0:60:38:9f:e0:57:b6:ea:fd:89:8e:d6:37:e2:c8:e2: 79:22:dc:ad:18:6e:22:a1:36:58:2d:3b:2c:f7:e1:21:63:a1: 34:51:35:f4:7d:46:6e:e5:65:8a:7e:04:e8:2a:32:6e:15:cd: dc:ba:e9:4b:01:6f:78:d9:da:1f:65:9f:35:52:f1:fe:65:d0: a5:8d:f5:17:f8:df:c4:ab:70:53:fa:9e:c3:0f:a9:7b:26:12: e0:b9:9b:ec:50:8e:07:f0:81:ad:65:68:a4:d4:b2:90:6b:57: 65:e8:a5:48:90:25:60:cd:2c:e3:e7:74:3f:98:05:9f:88:df: 7c:68:ad:46:9c:1b:a8:cb:4a:5a:bc:ab:e9:70:9c:f2:63:50: 21:c9:89:ee:25:7e:af:8b:b9:59:0b:9f:0e:56:96:cc:60:fb: 7c:98:44:60:64:dc:f3:08:f4:96:6e:49:36:cc:ff:c7:76:9f: 6a:6e:eb:a8:62:3e:e2:a1:c1:45:29:e8:63:aa:e2:7e:08:8e: 93:0e:cf:bf:0c:a4:81:49:02:1b:5f:aa:60:c8:25:16:80:3f: b4:31:e9:43:28:fa:a0:8a:23:32:45:69:48:4c:ad:3c:70:bf: 88:39:9f:e0:9a:7f:a5:8d:0c:e8:a2:58:f8:16:ce:0a:69:00: e8:a2:3b:f9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC2swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTMzMjhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMyNjJBMzkzRjhDMDI3 RUYwODlCNDk4QTczRjAzNTQyNkY1NENBNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVhvNd/mmCzQKutOrXFyvu9cFFr5kYJRFMwaqo3rPBGlUFl/DT nrR5x6umYYi843vB1QV6T8zIosZc5L43UEqglYG6Zyb8xztzcZwJijEThut49CnD 2lTLY08HrBRYzbesC+oK8QpVyYonKADnRgIvqfrcP4CqAHhhqCSJSYDSPVE77JKY 8FfwJ3Vh5vkBLNpCrfv89PC+jAu7meI5JRWlep+T5J9/BrDAUBXm/NEfD+/ghT6q V5v+Cz0Yq3RQj7Zvj4hqUpg2hqfM8maVEsXz3na9FO2ugbpCTgpC7/bhLDwSl81R D+7zaX+IjryVRPez4+wbOgwXi3rC5Ar9KoOHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMmKjk/jAJ+8Im0mKc/A1Qm9UylowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L01tS2prX2pBSi04SW0wbUtjX0ExUW05VXlsby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYnIwDQYJKoZIhvcNAQELBQADggEBAG1QwGA4n+BXtur9iY7WN+LI4nki 3K0YbiKhNlgtOyz34SFjoTRRNfR9Rm7lZYp+BOgqMm4Vzdy66UsBb3jZ2h9lnzVS 8f5l0KWN9Rf438SrcFP6nsMPqXsmEuC5m+xQjgfwga1laKTUspBrV2XopUiQJWDN LOPndD+YBZ+I33xorUacG6jLSlq8q+lwnPJjUCHJie4lfq+LuVkLnw5Wlsxg+3yY RGBk3PMI9JZuSTbM/8d2n2pu66hiPuKhwUUp6GOq4n4IjpMOz78MpIFJAhtfqmDI JRaAP7Qx6UMo+qCKIzJFaUhMrTxwv4g5n+Caf6WNDOiiWPgWzgppAOiiO/k= -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:35 2025 by rpki-client