$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xg9P7IlF4rN5X9QcVtThdNeEEnA.roa File: Xg9P7IlF4rN5X9QcVtThdNeEEnA.roa (raw, json) Hash identifier: Z8IW5YJSvzKots65xXIWmkyCg/vM2AgTHCBgT69HAWg= Subject key identifier: 5E:0F:4F:EC:89:45:E2:B3:79:5F:D4:1C:56:D4:E1:74:D7:84:12:70 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F02 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xg9P7IlF4rN5X9QcVtThdNeEEnA.roa Signing time: Tue 10 Jun 2025 11:16:47 +0000 ROA not before: Tue 10 Jun 2025 11:16:47 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.102.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3842 (0xf02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:47 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=5E0F4FEC8945E2B3795FD41C56D4E174D7841270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f6:0a:94:3a:78:26:f4:b3:e5:e1:f4:9f:5d: 7d:ad:3f:50:c1:8b:a7:76:0d:b6:aa:6a:b3:34:de: 08:17:8e:4d:f6:15:68:a9:56:04:9c:0b:ad:24:d8: 4c:92:98:3e:b6:a2:a6:97:5b:fe:83:03:b5:a7:1c: 9e:92:a9:db:41:a5:d8:5b:98:a2:f9:0e:66:32:6d: 42:1d:8a:25:ae:6f:7b:22:c1:b0:08:05:36:99:e5: 7e:a9:41:2c:0a:14:9c:2f:ae:65:e1:64:5e:e7:63: 0e:99:92:28:4e:32:74:82:58:8d:39:5c:0c:37:21: e7:3d:2f:ef:87:26:29:af:5b:2c:30:96:72:23:11: 64:0d:c6:1f:42:f2:ea:1f:b0:4a:35:37:6a:a1:69: 7c:63:b0:f4:80:7b:69:8c:75:e5:78:a2:3b:43:e2: 70:93:74:3b:02:2c:50:71:4c:95:da:4b:d2:b7:e2: 8b:af:17:c1:cf:82:d0:a0:c6:a7:ec:4f:52:fd:35: 48:34:24:59:ac:6e:b1:95:d5:46:71:a0:4f:74:c8: 43:15:b3:18:eb:2c:13:26:fb:72:d2:a2:65:f1:df: 62:d3:2c:08:d4:2c:63:da:24:fd:97:f1:b0:37:48: 19:2a:3b:61:ce:31:3d:77:33:42:af:dc:5d:5e:9d: e0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0F:4F:EC:89:45:E2:B3:79:5F:D4:1C:56:D4:E1:74:D7:84:12:70 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xg9P7IlF4rN5X9QcVtThdNeEEnA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.158.0/24 Signature Algorithm: sha256WithRSAEncryption 20:3d:ef:5a:9a:39:d5:3f:83:77:47:02:c2:bf:e0:30:ab:60: 1d:ad:6d:e7:46:a3:7e:79:aa:f6:d0:0b:c1:b8:35:87:92:66: 36:fc:3b:f3:7c:a6:10:99:be:be:75:fe:99:78:c7:99:60:09: da:22:b6:58:07:99:20:d5:a6:b4:b0:28:ea:e2:7f:04:f7:1f: c2:46:45:98:9d:bd:c1:39:6b:d0:36:ad:5f:bb:4d:71:f2:12: 44:aa:69:89:c3:c3:8d:be:f6:a0:2d:80:a6:a8:5d:f5:f3:44: 8d:c9:45:d5:21:5a:ca:66:d0:f9:52:24:5a:5f:8a:56:8c:85: b4:d5:38:f7:2f:97:cd:48:8c:38:68:05:8a:e6:f4:b3:9f:56: e2:15:59:71:99:8a:fb:65:1f:1f:9a:6b:72:8b:65:53:ff:ee: e6:ac:a1:c6:cc:98:1a:3f:a8:c8:af:66:b1:26:aa:73:62:ac: 03:a8:92:d8:c6:24:65:19:02:f2:16:a4:42:6e:66:79:3c:83: 3e:f1:a1:c6:85:8b:f3:40:89:24:03:75:f3:7c:13:f9:25:12: 91:a4:84:04:94:f8:d9:f4:75:dd:a9:16:7e:69:69:7b:5f:e9: a5:90:df:bf:ba:a6:bc:42:2c:e1:d3:b9:e8:49:4c:54:2a:67: 5d:96:61:29 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDwIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NDdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDVFMEY0RkVDODk0NUUy QjM3OTVGRDQxQzU2RDRFMTc0RDc4NDEyNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDv9gqUOngm9LPl4fSfXX2tP1DBi6d2DbaqarM03ggXjk32FWip VgScC60k2EySmD62oqaXW/6DA7WnHJ6SqdtBpdhbmKL5DmYybUIdiiWub3siwbAI BTaZ5X6pQSwKFJwvrmXhZF7nYw6ZkihOMnSCWI05XAw3Iec9L++HJimvWywwlnIj EWQNxh9C8uofsEo1N2qhaXxjsPSAe2mMdeV4ojtD4nCTdDsCLFBxTJXaS9K34ouv F8HPgtCgxqfsT1L9NUg0JFmsbrGV1UZxoE90yEMVsxjrLBMm+3LSomXx32LTLAjU LGPaJP2X8bA3SBkqO2HOMT13M0Kv3F1eneDlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXg9P7IlF4rN5X9QcVtThdNeEEnAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hnOVA3SWxGNHJONVg5UWNWdFRoZE5lRUVuQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxZp4wDQYJKoZIhvcNAQELBQADggEBACA971qaOdU/g3dHAsK/4DCrYB2t bedGo355qvbQC8G4NYeSZjb8O/N8phCZvr51/pl4x5lgCdoitlgHmSDVprSwKOri fwT3H8JGRZidvcE5a9A2rV+7TXHyEkSqaYnDw42+9qAtgKaoXfXzRI3JRdUhWspm 0PlSJFpfilaMhbTVOPcvl81IjDhoBYrm9LOfVuIVWXGZivtlHx+aa3KLZVP/7uas ocbMmBo/qMivZrEmqnNirAOoktjGJGUZAvIWpEJuZnk8gz7xocaFi/NAiSQDdfN8 E/klEpGkhASU+Nn0dd2pFn5paXtf6aWQ37+6prxCLOHTuehJTFQqZ12WYSk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:09 2025 by rpki-client