$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SAa5DIlsbskVPphAAYLhGpXsl_I.roa File: SAa5DIlsbskVPphAAYLhGpXsl_I.roa (raw, json) Hash identifier: MgdhIr8J+y1lUYgC0nj1IPdV/MpbZuA0I/d/ABkN5X0= Subject key identifier: 48:06:B9:0C:89:6C:6E:C9:15:3E:98:40:01:82:E1:1A:95:EC:97:F2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D39 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SAa5DIlsbskVPphAAYLhGpXsl_I.roa Signing time: Tue 01 Apr 2025 02:17:02 +0000 ROA not before: Tue 01 Apr 2025 02:17:02 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3385 (0xd39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:17:02 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=4806B90C896C6EC9153E98400182E11A95EC97F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:fb:b3:71:28:66:aa:03:80:91:e4:97:ba: 0a:23:a7:69:6f:ec:9f:11:bc:4f:28:46:72:18:c8: 1b:e0:84:e1:bb:eb:fc:e4:2a:8d:67:f2:70:43:2d: 91:20:80:76:58:58:a9:78:01:ed:dc:f5:25:88:f5: 30:8a:ee:c3:df:e3:91:51:2e:a0:d6:f6:18:d6:d0: 8a:68:8e:d9:b4:88:fb:be:25:29:e0:5f:d9:af:49: ba:14:46:63:9e:5a:7a:e9:82:6b:03:5d:42:6c:7d: 18:8b:3b:46:09:f3:21:c6:1f:c2:43:20:ac:9a:ac: cf:95:c8:a3:99:4f:e6:78:30:61:7b:59:6f:a4:e9: 73:90:4b:f7:83:0d:5a:bd:73:56:54:9e:9c:e8:96: 7f:5f:88:39:9a:fa:05:b9:05:ef:02:9a:f0:98:4d: 4c:ad:a9:8d:d9:6b:f4:c7:ce:aa:a2:e2:27:d2:e8: 88:40:4f:82:bf:df:6d:b3:93:39:f7:c5:5f:27:fa: ad:5a:9f:0d:04:57:6a:c2:48:06:ff:b0:5a:fe:d9: c7:6e:8a:70:6b:a4:5d:02:ba:5d:fa:af:6f:6d:b1: 98:69:d5:b0:d1:d3:8f:6a:ac:50:c7:7d:ca:db:a1: a6:6a:73:b1:ee:85:fc:4e:af:fb:f5:97:8c:37:ad: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:06:B9:0C:89:6C:6E:C9:15:3E:98:40:01:82:E1:1A:95:EC:97:F2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SAa5DIlsbskVPphAAYLhGpXsl_I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.234.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:70:6e:40:00:7a:ba:90:23:84:8b:f9:4a:0b:76:83:d9:0c: b6:4c:d0:6a:21:46:83:e1:f2:d7:05:83:fa:0b:3a:62:af:62: b6:46:8c:ea:c2:e9:bc:e1:5f:f6:88:bd:fb:2e:0e:67:b1:b1: 39:dc:e4:93:f3:e5:90:eb:ec:d9:1b:60:1b:9b:65:5a:ff:3d: b7:3a:0c:a7:fc:7d:f2:25:4d:6b:f4:b6:f0:44:c5:fe:14:aa: c7:1d:65:e1:6e:7c:90:98:95:af:5d:f7:9c:5e:4b:44:88:f0: 63:d5:84:f8:95:81:e5:0f:08:7b:4e:4a:17:c2:f5:0c:1e:0f: cb:a7:e7:10:a6:9c:03:3a:e2:45:d8:6d:a5:5b:d8:30:d8:b1: 16:43:c6:92:02:3b:e3:f4:9a:d5:7f:d6:26:a3:14:15:22:42: 15:28:a6:6a:b9:ea:4e:48:e7:60:3e:e4:69:1a:75:35:94:22: 80:40:7f:eb:a5:4d:cc:db:ba:18:eb:9a:36:5e:27:2b:10:f3: dd:4a:32:d2:85:01:00:45:aa:2f:e9:f1:36:8a:f7:de:4a:dd: ed:dc:cf:e9:9f:b4:03:32:1c:19:7b:9d:3a:98:8a:d6:e9:e1: a8:6e:d7:b6:1c:ed:15:33:f4:57:f7:3b:e1:33:fc:4c:23:b2: 38:e8:1d:89 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDTkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE3MDJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ4MDZCOTBDODk2QzZF QzkxNTNFOTg0MDAxODJFMTFBOTVFQzk3RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEffuzcShmqgOAkeSXugojp2lv7J8RvE8oRnIYyBvghOG76/zk Ko1n8nBDLZEggHZYWKl4Ae3c9SWI9TCK7sPf45FRLqDW9hjW0Ipojtm0iPu+JSng X9mvSboURmOeWnrpgmsDXUJsfRiLO0YJ8yHGH8JDIKyarM+VyKOZT+Z4MGF7WW+k 6XOQS/eDDVq9c1ZUnpzoln9fiDma+gW5Be8CmvCYTUytqY3Za/THzqqi4ifS6IhA T4K/322zkzn3xV8n+q1anw0EV2rCSAb/sFr+2cduinBrpF0Cul36r29tsZhp1bDR 049qrFDHfcrboaZqc7HuhfxOr/v1l4w3rRXLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSAa5DIlsbskVPphAAYLhGpXsl/IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1NBYTVESWxzYnNrVlBwaEFBWUxoR3BYc2xfSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxauowDQYJKoZIhvcNAQELBQADggEBAE9wbkAAerqQI4SL+UoLdoPZDLZM 0GohRoPh8tcFg/oLOmKvYrZGjOrC6bzhX/aIvfsuDmexsTnc5JPz5ZDr7NkbYBub ZVr/Pbc6DKf8ffIlTWv0tvBExf4UqscdZeFufJCYla9d95xeS0SI8GPVhPiVgeUP CHtOShfC9QweD8un5xCmnAM64kXYbaVb2DDYsRZDxpICO+P0mtV/1iajFBUiQhUo pmq56k5I52A+5GkadTWUIoBAf+ulTczbuhjrmjZeJysQ891KMtKFAQBFqi/p8TaK 995K3e3cz+mftAMyHBl7nTqYitbp4ahu17Yc7RUz9Ff3O+Ez/EwjsjjoHYk= -----END CERTIFICATE-----Generated at Wed Nov 5 22:46:38 2025 by rpki-client