$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XF9Twg1713pclKKe1G7DDhToNcc.roa File: XF9Twg1713pclKKe1G7DDhToNcc.roa (raw, json) Hash identifier: 3d2TjefXCTuCNZ6on3+V8REe0ZbVcNwwjTkgq5eIuzg= Subject key identifier: 5C:5F:53:C2:0D:7B:D7:7A:5C:94:A2:9E:D4:6E:C3:0E:14:E8:35:C7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DF1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XF9Twg1713pclKKe1G7DDhToNcc.roa Signing time: Tue 01 Apr 2025 02:29:06 +0000 ROA not before: Tue 01 Apr 2025 02:29:06 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3569 (0xdf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:29:06 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=5C5F53C20D7BD77A5C94A29ED46EC30E14E835C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:12:1d:70:a3:1f:43:b3:bf:a4:e2:6f:06:5a: bf:bc:fe:2b:d5:d3:7e:af:1c:4b:2a:4e:36:a4:8e: d6:10:01:51:cf:af:15:df:7d:19:20:15:a8:5a:69: f5:7f:06:24:d4:13:dd:6a:a3:c4:95:47:72:a0:3f: 60:52:2c:f7:64:81:90:e3:e4:04:3b:40:b2:87:40: fd:58:84:a0:dc:1e:1e:17:37:18:9f:c2:00:ed:62: 03:71:ff:80:a6:87:bb:76:d3:12:24:a1:20:2b:14: 59:eb:28:43:e4:6e:27:72:8d:5e:82:4e:8b:47:60: b2:4f:d4:22:7c:a4:50:36:26:13:c1:20:40:37:a5: 40:81:46:70:64:7d:48:5a:60:32:31:5c:92:ae:04: 18:bb:2e:4d:3b:e6:60:d7:fc:4d:e7:9f:10:22:d3: eb:59:b8:a2:ba:f3:e0:88:35:22:b2:43:e2:a5:11: c4:de:a9:7e:9e:de:5e:c0:3a:35:85:39:36:78:d2: 58:7e:61:fc:9f:cc:ef:30:4c:e8:a3:8b:ec:5a:bb: d5:d1:a3:99:10:f5:68:49:09:22:05:77:7f:68:ef: 9a:56:5e:25:4b:3e:b5:67:ab:71:e3:7a:5e:83:c6: 2b:2b:51:75:34:ee:41:15:20:24:05:f9:6a:a1:b5: 82:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5F:53:C2:0D:7B:D7:7A:5C:94:A2:9E:D4:6E:C3:0E:14:E8:35:C7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XF9Twg1713pclKKe1G7DDhToNcc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.184.0/23 Signature Algorithm: sha256WithRSAEncryption 70:11:f4:ed:61:5c:45:fd:26:66:82:4f:0a:58:46:f9:e9:17: db:14:da:59:2b:ef:73:7f:6f:2d:0f:7b:4e:74:e4:48:07:a8: e3:f8:7e:72:a2:41:40:b1:af:70:de:66:67:f0:6b:87:dd:29: 27:bc:dd:d7:82:a7:a7:04:0c:b7:29:cc:5b:aa:27:b9:46:fe: 1a:2a:46:ca:ad:56:41:2b:6d:9d:ce:c7:58:d6:69:44:5b:9f: ee:cf:b8:5c:e3:28:ee:59:3e:aa:0e:0c:55:00:86:17:3a:c7: ca:1e:c9:dd:9f:06:df:4a:96:67:59:4c:8c:77:b9:db:f1:6a: bc:e9:8e:e3:60:1c:42:a6:a3:85:3c:7a:02:c3:9e:da:14:08: e0:72:43:b8:ba:6d:db:8e:1d:3a:51:2d:9f:00:1d:f5:a2:59: 50:9b:d9:a1:9c:37:f4:a6:63:f9:37:4b:55:01:0c:1a:84:dc: ed:da:84:87:ff:66:56:b6:9d:d6:5e:2b:f6:61:20:26:68:03: 3b:dc:2d:a7:ea:21:01:bc:51:c5:5d:f7:c6:c0:52:b7:0d:45: 96:b2:da:07:f6:80:5f:2e:17:67:38:5b:ee:da:e6:40:63:35: 13:38:7d:1c:42:4a:45:72:b9:14:23:5e:a7:c1:da:9d:43:f4: 25:27:c7:03 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI5MDZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVDNUY1M0MyMEQ3QkQ3 N0E1Qzk0QTI5RUQ0NkVDMzBFMTRFODM1QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeEh1wox9Ds7+k4m8GWr+8/ivV036vHEsqTjakjtYQAVHPrxXf fRkgFahaafV/BiTUE91qo8SVR3KgP2BSLPdkgZDj5AQ7QLKHQP1YhKDcHh4XNxif wgDtYgNx/4Cmh7t20xIkoSArFFnrKEPkbidyjV6CTotHYLJP1CJ8pFA2JhPBIEA3 pUCBRnBkfUhaYDIxXJKuBBi7Lk075mDX/E3nnxAi0+tZuKK68+CINSKyQ+KlEcTe qX6e3l7AOjWFOTZ40lh+YfyfzO8wTOiji+xau9XRo5kQ9WhJCSIFd39o75pWXiVL PrVnq3Hjel6DxisrUXU07kEVICQF+WqhtYITAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXF9Twg1713pclKKe1G7DDhToNccwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hGOVR3ZzE3MTNwY2xLS2UxRzdERGhUb05jYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExargwDQYJKoZIhvcNAQELBQADggEBAHAR9O1hXEX9JmaCTwpYRvnpF9sU 2lkr73N/by0Pe0505EgHqOP4fnKiQUCxr3DeZmfwa4fdKSe83deCp6cEDLcpzFuq J7lG/hoqRsqtVkErbZ3Ox1jWaURbn+7PuFzjKO5ZPqoODFUAhhc6x8oeyd2fBt9K lmdZTIx3udvxarzpjuNgHEKmo4U8egLDntoUCOByQ7i6bduOHTpRLZ8AHfWiWVCb 2aGcN/SmY/k3S1UBDBqE3O3ahIf/Zla2ndZeK/ZhICZoAzvcLafqIQG8UcVd98bA UrcNRZay2gf2gF8uF2c4W+7a5kBjNRM4fRxCSkVyuRQjXqfB2p1D9CUnxwM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:53 2025 by rpki-client