$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PbaMltNCh_jKz442PAdgDk9PDK4.roa File: PbaMltNCh_jKz442PAdgDk9PDK4.roa (raw, json) Hash identifier: Ov5SmECzwOxobOHzPYEPprmnnSleMnkVoUEmJpGaxu4= Subject key identifier: 3D:B6:8C:96:D3:42:87:F8:CA:CF:8E:36:3C:07:60:0E:4F:4F:0C:AE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B2B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PbaMltNCh_jKz442PAdgDk9PDK4.roa Signing time: Fri 31 Jan 2025 01:38:03 +0000 ROA not before: Fri 31 Jan 2025 01:38:03 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2859 (0xb2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:38:03 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=3DB68C96D34287F8CACF8E363C07600E4F4F0CAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:e6:c7:c5:f3:a9:c5:55:d4:62:81:15:0a: e7:9f:91:c8:bf:6b:91:5b:a9:6c:b8:2a:d6:74:f1: bf:a4:ec:d0:df:3b:28:90:4b:aa:b4:d4:54:06:22: 01:bd:06:74:1f:c3:45:1e:14:e8:23:c6:30:57:fd: 69:30:8a:44:95:87:9a:f7:b2:b3:60:eb:4b:ae:bd: 18:22:04:14:5f:1b:e0:47:25:91:65:76:bc:a6:71: ac:38:98:c3:9b:98:14:88:dc:26:14:8b:76:58:68: a8:02:95:a2:78:c9:a8:bb:de:c3:00:bc:79:20:e7: 5b:63:48:55:65:f8:1a:25:78:99:24:a2:6b:f7:4c: 19:1d:c6:30:15:e7:d3:7e:7c:c7:e5:e2:98:8a:68: 68:67:92:e2:39:82:38:f0:1a:c3:a9:88:52:d5:9c: e9:f0:15:6b:74:8e:d7:5c:c5:54:fd:be:77:45:0b: a9:a4:04:e4:52:6e:e1:de:43:61:69:a0:36:eb:3a: c9:2a:27:da:3b:52:65:30:56:b0:db:da:41:75:3c: ed:51:23:12:90:25:91:43:30:41:be:d0:82:c5:20: 90:68:35:6e:52:88:e2:95:06:6d:50:93:10:38:ff: 33:c2:fb:8c:5e:cd:2a:4c:ea:68:85:a6:95:60:a5: 73:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B6:8C:96:D3:42:87:F8:CA:CF:8E:36:3C:07:60:0E:4F:4F:0C:AE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PbaMltNCh_jKz442PAdgDk9PDK4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.107.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:df:46:5a:39:68:85:50:66:1e:06:39:db:9b:6a:fb:1f:76: ac:5f:c7:de:99:e4:2a:f8:e1:db:86:46:2d:8f:a7:10:00:62: fd:2d:79:ba:e6:87:97:49:1e:40:15:c4:da:d9:00:c2:0e:12: f9:5f:95:ab:82:a6:9d:c2:43:b7:1b:65:d7:81:6b:a9:69:0b: da:43:70:95:8d:7f:5e:83:f1:ba:c9:45:38:8c:b0:18:e9:e5: 83:db:de:5b:53:f3:d4:1e:9d:a3:94:00:22:af:9b:55:96:74: 2b:ac:c4:c6:3b:21:b9:2d:d6:64:23:a2:8f:e3:0d:20:d3:8f: db:fc:f8:ad:1b:87:02:0c:2c:5a:85:c2:8a:63:f5:21:79:a8: 15:2a:9b:ef:c5:ca:fc:e1:bb:88:d4:66:2d:e3:95:a8:26:f6: d6:5d:16:d3:25:9f:7a:6e:90:22:54:ff:df:fa:be:02:bc:65: c7:f8:34:60:0c:82:bb:d0:78:63:04:9a:6a:17:e7:39:55:90: 14:76:1f:1b:b4:7a:ea:17:9f:4c:a0:df:d9:dc:95:89:15:51: 36:38:b7:53:72:8b:2d:3d:74:09:bd:99:7b:4a:14:9a:c4:46: 60:95:0a:d4:85:00:79:6e:4f:5c:37:ee:6b:f4:dc:c4:f9:30: 19:fc:e5:72 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCyswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM4MDNaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNEQjY4Qzk2RDM0Mjg3 RjhDQUNGOEUzNjNDMDc2MDBFNEY0RjBDQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa9ebHxfOpxVXUYoEVCuefkci/a5FbqWy4KtZ08b+k7NDfOyiQ S6q01FQGIgG9BnQfw0UeFOgjxjBX/WkwikSVh5r3srNg60uuvRgiBBRfG+BHJZFl drymcaw4mMObmBSI3CYUi3ZYaKgClaJ4yai73sMAvHkg51tjSFVl+BoleJkkomv3 TBkdxjAV59N+fMfl4piKaGhnkuI5gjjwGsOpiFLVnOnwFWt0jtdcxVT9vndFC6mk BORSbuHeQ2FpoDbrOskqJ9o7UmUwVrDb2kF1PO1RIxKQJZFDMEG+0ILFIJBoNW5S iOKVBm1QkxA4/zPC+4xezSpM6miFppVgpXPJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPbaMltNCh/jKz442PAdgDk9PDK4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BiYU1sdE5DaF9qS3o0NDJQQWRnRGs5UERLNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYWswDQYJKoZIhvcNAQELBQADggEBAC7fRlo5aIVQZh4GOdubavsfdqxf x96Z5Cr44duGRi2PpxAAYv0tebrmh5dJHkAVxNrZAMIOEvlflauCpp3CQ7cbZdeB a6lpC9pDcJWNf16D8brJRTiMsBjp5YPb3ltT89QenaOUACKvm1WWdCusxMY7Ibkt 1mQjoo/jDSDTj9v8+K0bhwIMLFqFwopj9SF5qBUqm+/Fyvzhu4jUZi3jlagm9tZd FtMln3pukCJU/9/6vgK8Zcf4NGAMgrvQeGMEmmoX5zlVkBR2Hxu0euoXn0yg39nc lYkVUTY4t1Nyiy09dAm9mXtKFJrERmCVCtSFAHluT1w37mv03MT5MBn85XI= -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:00 2025 by rpki-client