$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NYD4D80UGXPPUWAPxfszp4tkkuA.roa File: NYD4D80UGXPPUWAPxfszp4tkkuA.roa (raw, json) Hash identifier: 2ZIi5td/wVI65dP/hdptYtJrYFKrZSVL7Hb7DbjPObY= Subject key identifier: 35:80:F8:0F:CD:14:19:73:CF:51:60:0F:C5:FB:33:A7:8B:64:92:E0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C60 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NYD4D80UGXPPUWAPxfszp4tkkuA.roa Signing time: Tue 01 Apr 2025 02:00:27 +0000 ROA not before: Tue 01 Apr 2025 02:00:27 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.105.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:00:27 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=3580F80FCD141973CF51600FC5FB33A78B6492E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a9:27:f4:e5:1b:d1:08:af:07:11:78:2f:08: 05:b6:af:d8:2a:59:2c:9a:b0:4b:59:18:46:47:5a: f9:0a:e4:a9:4c:7c:0d:ec:c1:05:3d:73:1f:bd:f2: 6c:e5:27:d9:b4:7d:7b:b9:2d:ac:43:6e:0d:a7:00: 1c:82:78:ac:11:20:a6:cc:c7:16:6f:1a:e2:16:d2: f6:56:a9:62:3a:8a:e0:b0:79:0a:e9:bb:33:44:0a: e4:60:0c:69:aa:0b:74:f3:4f:48:72:b7:e7:38:d9: 18:fb:1a:f2:d9:dd:41:e3:5c:23:b5:a0:a3:67:32: 42:73:6a:b5:cc:49:21:56:cc:f8:83:13:8a:1b:47: ba:0e:d4:70:d5:35:6e:56:3a:78:93:46:8f:c6:50: dc:42:e1:af:25:72:0c:33:ff:6f:1b:f6:ab:a1:ac: ff:31:4f:e3:37:d0:40:49:72:5e:b8:9a:b7:e1:57: c2:8a:66:71:63:83:7e:64:4f:0e:5d:4f:6b:c9:17: 65:51:49:84:3b:97:88:89:5f:51:30:85:44:68:49: 46:42:f9:b2:00:1f:1d:fc:3f:17:76:1b:76:16:00: 94:6a:8d:13:f7:cf:c2:75:b7:77:e1:b1:10:3e:44: 3e:ae:b8:63:4b:f3:45:4c:f2:fa:a6:c1:de:8c:60: 4d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:80:F8:0F:CD:14:19:73:CF:51:60:0F:C5:FB:33:A7:8B:64:92:E0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NYD4D80UGXPPUWAPxfszp4tkkuA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.114.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:a8:55:27:7e:0a:7b:64:b1:db:47:9f:4d:91:6e:34:f6:bc: 9c:5f:91:e0:de:65:61:63:94:f2:e3:0d:d8:7d:b3:21:18:0a: 9a:02:cd:ee:e8:1b:06:f9:ce:8a:99:75:f8:ad:1b:e1:0e:6a: cd:c1:29:2b:c1:57:85:67:6e:3d:79:03:49:b1:4c:e0:f2:1c: 42:11:2e:bd:54:01:4e:65:bb:b8:e0:98:cc:32:5a:85:7d:1a: f7:e4:0e:56:60:4d:d6:fe:7a:51:a0:19:bd:b7:22:c9:f3:90: e2:b1:9c:8c:9f:89:90:e9:6a:12:6d:f6:dd:be:61:f3:cd:31: 29:d9:23:05:bb:94:42:49:cc:57:76:21:e8:03:78:d2:c0:6a: 99:30:2a:5a:1d:3c:ae:10:53:e9:98:c7:52:90:ff:57:a1:61: 24:90:ba:25:96:00:c0:66:ec:54:3e:35:96:c0:16:07:3c:74: 4c:7f:f7:d2:9a:11:c2:79:fa:5d:7b:cf:99:e2:ca:11:48:4c: 0b:dc:34:19:37:1f:3d:8b:2c:93:09:48:41:83:be:25:83:84: 68:68:6a:85:db:85:73:14:65:66:7e:20:f7:ef:00:27:a5:b8: f8:ff:e1:65:c5:8a:95:1b:ae:1c:89:d9:b7:68:a5:d6:b4:e4: 86:92:2f:dc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAwMjdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM1ODBGODBGQ0QxNDE5 NzNDRjUxNjAwRkM1RkIzM0E3OEI2NDkyRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqqSf05RvRCK8HEXgvCAW2r9gqWSyasEtZGEZHWvkK5KlMfA3s wQU9cx+98mzlJ9m0fXu5LaxDbg2nAByCeKwRIKbMxxZvGuIW0vZWqWI6iuCweQrp uzNECuRgDGmqC3TzT0hyt+c42Rj7GvLZ3UHjXCO1oKNnMkJzarXMSSFWzPiDE4ob R7oO1HDVNW5WOniTRo/GUNxC4a8lcgwz/28b9quhrP8xT+M30EBJcl64mrfhV8KK ZnFjg35kTw5dT2vJF2VRSYQ7l4iJX1EwhURoSUZC+bIAHx38Pxd2G3YWAJRqjRP3 z8J1t3fhsRA+RD6uuGNL80VM8vqmwd6MYE39AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNYD4D80UGXPPUWAPxfszp4tkkuAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L05ZRDREODBVR1hQUFVXQVB4ZnN6cDR0a2t1QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaXIwDQYJKoZIhvcNAQELBQADggEBAJ6oVSd+CntksdtHn02RbjT2vJxf keDeZWFjlPLjDdh9syEYCpoCze7oGwb5zoqZdfitG+EOas3BKSvBV4Vnbj15A0mx TODyHEIRLr1UAU5lu7jgmMwyWoV9GvfkDlZgTdb+elGgGb23IsnzkOKxnIyfiZDp ahJt9t2+YfPNMSnZIwW7lEJJzFd2IegDeNLAapkwKlodPK4QU+mYx1KQ/1ehYSSQ uiWWAMBm7FQ+NZbAFgc8dEx/99KaEcJ5+l17z5niyhFITAvcNBk3Hz2LLJMJSEGD viWDhGhoaoXbhXMUZWZ+IPfvACeluPj/4WXFipUbrhyJ2bdopda05IaSL9w= -----END CERTIFICATE-----Generated at Wed Nov 5 13:54:00 2025 by rpki-client