$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VNddnXIt4s7Hxc9m06v-jUws-C0.roa File: VNddnXIt4s7Hxc9m06v-jUws-C0.roa (raw, json) Hash identifier: sEB6g7HckFJPzvpJTj7G/0O8DdvsRWJyi+Whsdc/P04= Subject key identifier: 54:D7:5D:9D:72:2D:E2:CE:C7:C5:CF:66:D3:AB:FE:8D:4C:2C:F8:2D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E25 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VNddnXIt4s7Hxc9m06v-jUws-C0.roa Signing time: Tue 01 Apr 2025 02:33:28 +0000 ROA not before: Tue 01 Apr 2025 02:33:28 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3621 (0xe25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:33:28 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=54D75D9D722DE2CEC7C5CF66D3ABFE8D4C2CF82D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:8b:cd:f8:85:95:50:ce:3c:88:75:34:f0: be:60:e9:4f:c7:26:7a:48:61:03:26:dc:44:c1:7e: c7:12:43:1a:ec:81:d0:ce:ae:52:80:25:f6:66:b3: 6c:63:71:23:78:08:38:d5:5d:07:10:a7:2e:4f:96: bb:26:49:88:b7:c5:79:c0:c9:59:27:b8:84:f5:fc: 96:d9:81:54:11:20:5b:f4:ac:e3:6d:46:dd:c7:24: 4a:44:54:e0:e1:ae:e3:56:eb:02:5d:19:ec:7a:ff: d6:39:6e:76:b8:31:c7:3e:06:ec:fe:91:75:36:fb: 1f:63:56:7d:c6:e1:94:6c:9f:10:7c:86:5a:1c:91: a1:d5:37:69:a8:34:64:9b:be:ce:f6:1f:d1:83:2e: 92:a8:4b:60:3a:1c:30:6d:03:43:d7:e3:6f:13:fb: 6c:f7:e1:37:b9:d7:d4:a6:db:e6:eb:0e:23:d1:71: f4:df:aa:65:83:3d:52:58:9e:40:f3:cb:44:bc:be: 28:e0:61:79:9f:93:2d:e7:2a:34:ca:3c:8a:fe:16: 68:72:8c:95:d4:2d:c1:c3:36:1b:51:da:d2:d3:32: 8b:d7:b0:4d:fe:bb:a0:0e:6e:c3:45:75:bd:49:4f: 04:54:53:01:52:c5:cf:a0:73:bd:dd:b7:43:8e:9e: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D7:5D:9D:72:2D:E2:CE:C7:C5:CF:66:D3:AB:FE:8D:4C:2C:F8:2D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VNddnXIt4s7Hxc9m06v-jUws-C0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.86.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:85:e3:84:fe:f6:11:b8:bd:e4:ea:27:42:20:0c:8f:06:24: a4:56:c1:63:f3:f0:33:07:92:c5:ce:32:0e:61:bf:fa:45:aa: c3:70:53:a8:79:dc:99:4d:a6:5c:63:1f:fc:c7:c2:e5:33:17: a1:a0:79:cb:31:e6:ad:6b:67:81:f6:70:44:94:e6:19:c3:68: 2a:06:a7:1e:2b:df:17:85:54:57:01:27:36:a5:db:83:5c:10: b7:fd:3b:35:a2:71:fa:81:5c:5d:c6:cd:6c:13:63:bf:23:3a: a8:fe:e7:b0:35:0e:c1:2f:4a:2c:c6:f7:1b:b6:eb:4f:0c:93: 3a:32:95:25:69:71:24:dd:18:81:9d:a2:2b:fc:d2:27:e8:2c: 32:0d:78:8c:b4:f8:28:da:d8:6a:cf:80:67:b9:69:76:f5:c2: ed:55:57:f9:c2:47:e7:26:b5:40:a1:27:44:ee:7f:39:91:01: 4f:c8:4b:52:e3:00:00:d0:fb:0c:9c:09:e9:27:79:89:19:b8: f9:a5:75:fb:1b:a4:87:92:8e:49:9c:a4:62:15:91:3b:9f:95: cf:d1:97:32:70:6e:01:0f:0b:1a:11:1a:b3:2a:8c:fd:00:c6: b6:28:df:4a:cd:36:39:5c:79:05:f1:09:db:84:ee:8b:90:65: 72:bd:bd:79 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMzMjhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU0RDc1RDlENzIyREUy Q0VDN0M1Q0Y2NkQzQUJGRThENEMyQ0Y4MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyA4vN+IWVUM48iHU08L5g6U/HJnpIYQMm3ETBfscSQxrsgdDO rlKAJfZms2xjcSN4CDjVXQcQpy5PlrsmSYi3xXnAyVknuIT1/JbZgVQRIFv0rONt Rt3HJEpEVODhruNW6wJdGex6/9Y5bna4Mcc+Buz+kXU2+x9jVn3G4ZRsnxB8hloc kaHVN2moNGSbvs72H9GDLpKoS2A6HDBtA0PX428T+2z34Te519Sm2+brDiPRcfTf qmWDPVJYnkDzy0S8vijgYXmfky3nKjTKPIr+FmhyjJXULcHDNhtR2tLTMovXsE3+ u6AObsNFdb1JTwRUUwFSxc+gc73dt0OOnleZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVNddnXIt4s7Hxc9m06v+jUws+C0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ZOZGRuWEl0NHM3SHhjOW0wNnYtalV3cy1DMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYlYwDQYJKoZIhvcNAQELBQADggEBAIqF44T+9hG4veTqJ0IgDI8GJKRW wWPz8DMHksXOMg5hv/pFqsNwU6h53JlNplxjH/zHwuUzF6Ggecsx5q1rZ4H2cESU 5hnDaCoGpx4r3xeFVFcBJzal24NcELf9OzWicfqBXF3GzWwTY78jOqj+57A1DsEv SizG9xu2608MkzoylSVpcSTdGIGdoiv80ifoLDINeIy0+Cja2GrPgGe5aXb1wu1V V/nCR+cmtUChJ0TufzmRAU/IS1LjAADQ+wycCekneYkZuPmldfsbpIeSjkmcpGIV kTuflc/RlzJwbgEPCxoRGrMqjP0AxrYo30rNNjlceQXxCduE7ouQZXK9vXk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:26:23 2025 by rpki-client