$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RkzfV78HlmXou5RlqXPU3c0N270.roa File: RkzfV78HlmXou5RlqXPU3c0N270.roa (raw, json) Hash identifier: gunXeHhnqUDbNqJIih4aCcb3gl1ptwiLr/JHrqtj/Bo= Subject key identifier: 46:4C:DF:57:BF:07:96:65:E8:BB:94:65:A9:73:D4:DD:CD:0D:DB:BD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C01 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RkzfV78HlmXou5RlqXPU3c0N270.roa Signing time: Tue 01 Apr 2025 01:51:29 +0000 ROA not before: Tue 01 Apr 2025 01:51:29 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3073 (0xc01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:29 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=464CDF57BF079665E8BB9465A973D4DDCD0DDBBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:d7:89:ad:6b:d4:d3:6f:d5:c6:98:99:4f: 13:ac:0c:69:0f:d6:b3:1d:69:34:dd:cd:83:bc:c8: d8:64:5f:6a:32:ad:51:dc:39:af:bb:93:08:65:79: 3f:ac:66:a7:34:fa:ff:28:21:df:65:61:35:2f:f4: 41:b6:3b:e9:1f:af:df:88:bb:64:52:d1:ed:63:9b: 62:94:1c:e4:5e:57:2a:98:c5:af:66:e3:6f:8f:3a: e8:c4:35:ca:4e:c6:51:66:fa:37:4b:61:86:74:bf: 92:d7:12:37:c1:51:c4:f3:32:45:70:1a:16:bb:8f: 54:e1:9d:0a:b8:43:9c:53:e9:16:ea:6a:3a:b5:de: d8:bd:41:db:07:a3:87:72:d0:0f:96:a3:d9:30:dc: e1:ab:77:6f:07:20:63:59:65:41:45:31:23:b2:3a: 3c:51:4e:63:5d:60:41:09:a6:c1:ef:a8:af:7f:d0: f5:3f:5b:23:3c:9e:bf:73:1c:06:fe:4d:2e:95:4a: 71:1d:28:18:87:5a:32:b6:5e:f6:0b:c3:8f:e3:2b: de:89:76:a3:aa:be:58:40:e0:66:59:0b:00:9f:f7: 28:9c:46:9e:97:b0:90:28:19:61:f2:b0:06:5a:6d: e0:64:4e:e3:7f:bf:3e:6f:16:15:77:fe:05:67:fc: ac:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4C:DF:57:BF:07:96:65:E8:BB:94:65:A9:73:D4:DD:CD:0D:DB:BD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RkzfV78HlmXou5RlqXPU3c0N270.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.16.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:7e:c4:8a:27:73:61:88:d3:8c:c3:48:64:77:f2:cf:e0:0f: 4e:b3:7c:dd:9b:31:86:6c:a1:f9:18:99:4e:46:73:41:54:3d: 0b:6f:fa:3e:3b:9d:bc:6d:a6:d2:f7:02:28:e3:2d:4f:7b:60: 79:de:6c:57:c7:ca:08:90:8a:58:20:e2:fe:cc:94:57:82:33: 31:4b:51:8d:fb:98:37:70:48:6b:3b:12:0f:60:6c:7f:03:6b: d8:e8:9b:7e:15:3a:1f:40:d2:94:68:ae:66:8e:a4:52:bf:cb: 1e:ce:45:a7:ef:ae:49:ff:c1:62:c1:0d:d9:f4:af:d8:74:c6: 6e:b1:51:5c:a8:3a:39:b2:39:73:b6:cd:87:20:aa:cd:22:b3: 72:41:86:b9:c1:cf:f8:02:ac:c1:d8:74:cb:f0:68:78:f0:be: a5:0f:2f:88:db:c8:5e:4b:96:6e:03:38:04:b4:f7:78:51:c9: 8f:a1:96:fe:fb:02:9e:ef:71:cb:3c:ed:a7:83:2d:f3:cc:1e: df:df:1b:fb:77:1a:52:c9:c8:da:f9:3d:7e:db:22:be:34:be: 49:f6:bd:28:64:8c:c1:53:fe:8e:24:33:10:b4:02:c0:73:e6: c4:c0:10:2e:5f:42:bf:19:69:f9:71:26:31:08:fa:89:40:da: c8:75:4b:08 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDAEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMjlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ2NENERjU3QkYwNzk2 NjVFOEJCOTQ2NUE5NzNENEREQ0QwRERCQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGw9eJrWvU02/VxpiZTxOsDGkP1rMdaTTdzYO8yNhkX2oyrVHc Oa+7kwhleT+sZqc0+v8oId9lYTUv9EG2O+kfr9+Iu2RS0e1jm2KUHOReVyqYxa9m 42+POujENcpOxlFm+jdLYYZ0v5LXEjfBUcTzMkVwGha7j1ThnQq4Q5xT6Rbqajq1 3ti9QdsHo4dy0A+Wo9kw3OGrd28HIGNZZUFFMSOyOjxRTmNdYEEJpsHvqK9/0PU/ WyM8nr9zHAb+TS6VSnEdKBiHWjK2XvYLw4/jK96JdqOqvlhA4GZZCwCf9yicRp6X sJAoGWHysAZabeBkTuN/vz5vFhV3/gVn/KwrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURkzfV78HlmXou5RlqXPU3c0N270wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1JremZWNzhIbG1Yb3U1UmxxWFBVM2MwTjI3MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYhAwDQYJKoZIhvcNAQELBQADggEBAD5+xIonc2GI04zDSGR38s/gD06z fN2bMYZsofkYmU5Gc0FUPQtv+j47nbxtptL3AijjLU97YHnebFfHygiQilgg4v7M lFeCMzFLUY37mDdwSGs7Eg9gbH8Da9jom34VOh9A0pRormaOpFK/yx7ORafvrkn/ wWLBDdn0r9h0xm6xUVyoOjmyOXO2zYcgqs0is3JBhrnBz/gCrMHYdMvwaHjwvqUP L4jbyF5Llm4DOAS093hRyY+hlv77Ap7vccs87aeDLfPMHt/fG/t3GlLJyNr5PX7b Ir40vkn2vShkjMFT/o4kMxC0AsBz5sTAEC5fQr8ZaflxJjEI+olA2sh1Swg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:52:45 2025 by rpki-client