$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OFm3nQ03ax3kowz61MbY6ylE0Pg.roa File: OFm3nQ03ax3kowz61MbY6ylE0Pg.roa (raw, json) Hash identifier: iIy8sjGZnKxvxDlJKLjjhxSdJH9YiGtn41MDSseLfhs= Subject key identifier: 38:59:B7:9D:0D:37:6B:1D:E4:A3:0C:FA:D4:C6:D8:EB:29:44:D0:F8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CE3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OFm3nQ03ax3kowz61MbY6ylE0Pg.roa Signing time: Tue 01 Apr 2025 02:09:20 +0000 ROA not before: Tue 01 Apr 2025 02:09:20 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3299 (0xce3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:20 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=3859B79D0D376B1DE4A30CFAD4C6D8EB2944D0F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:4b:d6:71:03:76:fc:b8:67:ce:5e:de:86: 0b:ec:b3:19:a3:72:ee:0d:93:6a:c0:fa:1b:85:71: b9:e2:ca:c7:27:f2:c2:da:01:03:3f:f0:d4:59:89: b2:54:82:1c:76:8a:8b:fd:bb:c0:ba:f3:7c:bf:bc: 87:2c:3a:f1:a2:62:34:3c:9c:c1:ef:6a:d9:c7:f8: 04:88:c9:8d:4b:c0:32:64:49:90:1a:12:1d:0a:b6: 47:9b:d0:ba:4c:09:5d:72:da:e7:01:66:6c:8d:24: 8b:df:76:b8:19:43:58:95:54:66:b4:db:cf:aa:c5: e8:4c:46:13:49:50:93:42:7e:ba:cc:45:f4:4f:3d: c4:43:52:e6:e9:af:4f:5d:87:22:ab:89:91:89:02: c5:03:43:cf:70:3b:24:8d:d3:f2:46:01:fc:e4:67: 37:5b:b6:01:f3:17:ea:40:9c:41:59:09:e8:76:f4: 96:19:24:00:49:37:31:50:c8:50:fc:d0:2f:89:5d: 5b:9e:33:0c:4b:fd:be:94:bd:5e:ae:92:c5:ad:8a: 4a:aa:17:a3:67:42:ce:d7:07:cd:d2:8e:60:d0:ac: d6:87:22:ba:31:7b:4d:62:b9:31:67:5f:02:93:a7: 71:6f:55:d4:d0:89:fb:4e:af:e6:89:0d:e0:a0:cd: 72:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:59:B7:9D:0D:37:6B:1D:E4:A3:0C:FA:D4:C6:D8:EB:29:44:D0:F8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OFm3nQ03ax3kowz61MbY6ylE0Pg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.32.0/23 Signature Algorithm: sha256WithRSAEncryption bd:44:14:55:f0:f0:bb:ac:f8:bd:97:ee:6f:b8:8b:91:ce:8e: 8b:a2:2b:90:70:21:c0:8e:3a:ca:7d:96:6d:e8:7b:be:c4:1c: ef:24:a8:7e:35:56:de:f0:a6:e7:ae:a5:d1:1d:00:24:2d:28: 40:f3:01:af:ee:ad:66:40:a8:88:eb:d8:09:7b:a9:ba:c3:b2: 17:3b:a3:45:7d:0c:6f:8b:c3:d6:fe:30:1b:3a:ab:43:79:d6: a5:76:f5:6d:5d:4f:bd:de:0a:04:f0:bf:52:ef:14:fb:63:79: b1:07:42:ef:d0:9c:1d:4a:6b:31:16:56:c9:d8:43:99:d7:e4: c6:49:7a:6d:d6:86:c2:42:f5:d2:0b:52:15:86:d0:3e:35:21: da:db:4a:7f:a8:73:d2:17:b9:f2:ed:2c:4d:c2:b8:5d:e5:e3: 82:40:75:e2:28:67:d2:a0:af:69:b3:c3:f7:89:57:fc:7c:5b: 6f:63:2e:01:ae:ee:7d:67:1b:44:42:c2:e3:9a:a1:b9:55:49: 9b:ae:e3:f4:fa:0e:62:b9:1d:b6:6e:f3:8f:72:f0:59:56:03: 7a:04:10:8c:4b:4b:0b:30:12:d6:94:4f:d6:3f:63:b2:39:8b: a2:8a:63:e0:40:c3:2d:37:9b:e8:96:2b:20:ab:46:09:8e:42: 98:c3:4b:b3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MjBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM4NTlCNzlEMEQzNzZC MURFNEEzMENGQUQ0QzZEOEVCMjk0NEQwRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFm0vWcQN2/Lhnzl7ehgvssxmjcu4Nk2rA+huFcbniyscn8sLa AQM/8NRZibJUghx2iov9u8C683y/vIcsOvGiYjQ8nMHvatnH+ASIyY1LwDJkSZAa Eh0Ktkeb0LpMCV1y2ucBZmyNJIvfdrgZQ1iVVGa028+qxehMRhNJUJNCfrrMRfRP PcRDUubpr09dhyKriZGJAsUDQ89wOySN0/JGAfzkZzdbtgHzF+pAnEFZCeh29JYZ JABJNzFQyFD80C+JXVueMwxL/b6UvV6uksWtikqqF6NnQs7XB83SjmDQrNaHIrox e01iuTFnXwKTp3FvVdTQiftOr+aJDeCgzXJ5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOFm3nQ03ax3kowz61MbY6ylE0PgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09GbTNuUTAzYXgza293ejYxTWJZNnlsRTBQZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYiAwDQYJKoZIhvcNAQELBQADggEBAL1EFFXw8Lus+L2X7m+4i5HOjoui K5BwIcCOOsp9lm3oe77EHO8kqH41Vt7wpueupdEdACQtKEDzAa/urWZAqIjr2Al7 qbrDshc7o0V9DG+Lw9b+MBs6q0N51qV29W1dT73eCgTwv1LvFPtjebEHQu/QnB1K azEWVsnYQ5nX5MZJem3WhsJC9dILUhWG0D41IdrbSn+oc9IXufLtLE3CuF3l44JA deIoZ9Kgr2mzw/eJV/x8W29jLgGu7n1nG0RCwuOaoblVSZuu4/T6DmK5HbZu849y 8FlWA3oEEIxLSwswEtaUT9Y/Y7I5i6KKY+BAwy03m+iWKyCrRgmOQpjDS7M= -----END CERTIFICATE-----Generated at Wed Nov 5 13:54:01 2025 by rpki-client