$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sa-J-1kW7e1Ep6X0QlBy22TxuvM.roa File: Sa-J-1kW7e1Ep6X0QlBy22TxuvM.roa (raw, json) Hash identifier: 8FjX6vd7ZabY1obRH6uZrUABqjLPmOTkCpDF1re9ZZY= Subject key identifier: 49:AF:89:FB:59:16:ED:ED:44:A7:A5:F4:42:50:72:DB:64:F1:BA:F3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F85 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sa-J-1kW7e1Ep6X0QlBy22TxuvM.roa Signing time: Tue 10 Jun 2025 11:36:15 +0000 ROA not before: Tue 10 Jun 2025 11:36:15 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3973 (0xf85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:36:15 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=49AF89FB5916EDED44A7A5F4425072DB64F1BAF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:ae:ab:49:a3:ee:21:61:f2:c7:ff:46:42: b4:c2:81:86:bb:3a:86:63:e6:1e:24:3b:3a:f8:e8: 1f:a5:06:7b:ee:ee:a4:5a:3a:eb:02:46:23:24:c1: 25:51:b3:8a:1e:f5:b5:88:7e:ee:5a:91:e5:fe:e4: fb:18:39:d4:df:4a:48:bd:78:0d:ac:80:8a:77:e2: 16:90:c9:e0:42:97:5c:93:bc:7b:f6:85:18:ed:74: 92:50:62:e7:3c:a9:29:b9:3a:da:7e:01:3e:8c:34: 6f:ab:76:53:8c:8f:80:e6:73:2d:d4:f4:7c:66:79: 81:ab:14:0f:08:71:a1:16:c0:8a:49:39:ea:76:52: 4b:b2:79:01:c1:35:31:a4:ee:b2:a1:e9:8b:bf:74: 7f:35:c8:9e:44:28:e3:ea:c4:42:13:80:55:ea:39: 21:ad:ea:c1:2d:6c:64:2c:f2:47:69:4c:af:da:b6: 96:ea:37:60:76:66:5c:99:25:86:72:f7:b7:36:9a: cb:ee:a1:13:5b:5e:35:bc:15:b0:02:b0:01:04:2d: 55:05:81:f8:ad:a9:a1:07:6e:6e:9f:8a:08:75:f4: f2:80:b9:0e:ce:83:6d:d2:61:42:4c:8d:09:a6:09: 8d:e5:5a:3e:e0:24:34:e2:a6:13:f7:b9:24:24:65: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:89:FB:59:16:ED:ED:44:A7:A5:F4:42:50:72:DB:64:F1:BA:F3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sa-J-1kW7e1Ep6X0QlBy22TxuvM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.72.0/23 Signature Algorithm: sha256WithRSAEncryption b0:2c:88:fd:f3:40:49:fd:ca:7d:d1:06:fc:59:a1:a8:8c:4a: 1c:e7:cc:9a:c6:75:d9:f2:6d:0e:50:d7:80:ce:5e:da:47:b9: c4:33:69:bd:d3:80:6d:8d:73:9f:e2:4a:1e:cf:93:1c:eb:71: 17:94:10:88:6a:1f:d3:ea:01:66:d2:16:dc:46:0a:a7:cb:47: 5e:08:a3:5e:29:b7:ae:2c:30:7c:99:ce:73:67:b5:d8:d2:25: 0f:f4:bf:d0:d8:e4:39:f6:7e:ec:87:e3:b4:41:a0:89:d3:ed: ea:9f:b9:70:16:97:99:28:7c:58:f5:9a:3c:cc:da:2c:a7:2b: 76:26:c4:1b:b1:f3:8d:b1:ff:f4:12:86:76:1d:26:44:b0:c2: b3:f4:50:5a:29:2d:d6:ce:36:98:ba:b7:5e:1a:a9:e9:35:34: 83:5b:22:cb:29:cf:cb:42:35:0a:cc:4f:cc:d4:26:7e:6c:d3: ba:ff:86:6b:d8:ca:9e:b4:9a:c0:22:40:75:f5:e8:9c:6f:1f: ac:04:23:14:db:11:f5:6c:e3:a0:fa:8a:16:82:e0:19:83:7d: a5:8c:b3:94:da:af:cf:18:a3:c6:fb:10:08:04:f9:30:8c:cc: 42:6a:67:bd:6d:83:4a:fa:57:8f:66:bc:95:dc:8a:e6:fb:4e: df:cd:74:38 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTM2MTVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDQ5QUY4OUZCNTkxNkVE RUQ0NEE3QTVGNDQyNTA3MkRCNjRGMUJBRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJma6rSaPuIWHyx/9GQrTCgYa7OoZj5h4kOzr46B+lBnvu7qRa OusCRiMkwSVRs4oe9bWIfu5akeX+5PsYOdTfSki9eA2sgIp34haQyeBCl1yTvHv2 hRjtdJJQYuc8qSm5Otp+AT6MNG+rdlOMj4Dmcy3U9HxmeYGrFA8IcaEWwIpJOep2 UkuyeQHBNTGk7rKh6Yu/dH81yJ5EKOPqxEITgFXqOSGt6sEtbGQs8kdpTK/atpbq N2B2ZlyZJYZy97c2msvuoRNbXjW8FbACsAEELVUFgfitqaEHbm6figh19PKAuQ7O g23SYUJMjQmmCY3lWj7gJDTiphP3uSQkZVlhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSa+J+1kW7e1Ep6X0QlBy22TxuvMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1NhLUotMWtXN2UxRXA2WDBRbEJ5MjJUeHV2TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0kgwDQYJKoZIhvcNAQELBQADggEBALAsiP3zQEn9yn3RBvxZoaiMShzn zJrGddnybQ5Q14DOXtpHucQzab3TgG2Nc5/iSh7PkxzrcReUEIhqH9PqAWbSFtxG CqfLR14Io14pt64sMHyZznNntdjSJQ/0v9DY5Dn2fuyH47RBoInT7eqfuXAWl5ko fFj1mjzM2iynK3YmxBux842x//QShnYdJkSwwrP0UFopLdbONpi6t14aqek1NINb Isspz8tCNQrMT8zUJn5s07r/hmvYyp60msAiQHX16JxvH6wEIxTbEfVs46D6ihaC 4BmDfaWMs5Tar88Yo8b7EAgE+TCMzEJqZ71tg0r6V49mvJXciub7Tt/NdDg= -----END CERTIFICATE-----Generated at Wed Nov 5 20:17:27 2025 by rpki-client