$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YmLyBCZKXSIXqhrIT3hZ747Uv5U.roa File: YmLyBCZKXSIXqhrIT3hZ747Uv5U.roa (raw, json) Hash identifier: c+4E4vh+juJ+yW4LpW6qKmw0tV7CsrtTgoXgx6j5xAA= Subject key identifier: 62:62:F2:04:26:4A:5D:22:17:AA:1A:C8:4F:78:59:EF:8E:D4:BF:95 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CAE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YmLyBCZKXSIXqhrIT3hZ747Uv5U.roa Signing time: Tue 01 Apr 2025 02:05:40 +0000 ROA not before: Tue 01 Apr 2025 02:05:40 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3246 (0xcae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:40 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=6262F204264A5D2217AA1AC84F7859EF8ED4BF95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:3e:12:b7:4e:2e:c6:59:03:c4:ad:da:b4: 56:63:30:1b:bc:05:2b:4e:86:9d:6e:6c:7b:77:7b: 07:91:1a:66:ab:fa:e5:b5:3e:18:1b:e9:81:4f:d8: d9:dd:25:25:23:ca:18:57:3b:54:65:a6:dc:65:56: 5d:cc:b4:4b:83:bf:b1:c5:9d:ea:84:db:c5:48:58: 35:30:0b:d1:0e:0b:dc:c8:bc:59:bb:6f:27:ef:03: 76:ef:5d:73:6a:16:d6:c6:a4:3c:25:c6:68:43:2b: da:d1:70:4a:e4:1c:d4:d8:33:66:00:cd:ab:63:ab: f7:ac:3e:c1:0a:14:d4:8c:92:73:5d:c0:ce:98:89: e5:fe:45:32:9c:47:7e:c7:40:7b:42:55:fc:dc:97: f4:a2:1a:54:ed:72:b1:90:9e:dc:70:9a:a2:2b:39: 0a:0f:60:ca:b8:50:02:d5:be:12:0d:c2:b3:61:89: 3c:9f:7a:ea:78:6c:2b:98:87:33:fe:e0:be:e1:3c: 40:1e:0d:3f:65:80:b4:1f:1f:c6:d1:be:b1:70:2f: 56:90:fb:85:3c:8f:69:9e:db:94:6e:c3:f9:1c:a6: cc:d1:e4:c8:c1:d2:5f:c4:c8:73:e8:a9:97:1e:07: cd:c2:6c:5d:d4:e2:0b:4b:06:28:05:00:8f:e8:94: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:62:F2:04:26:4A:5D:22:17:AA:1A:C8:4F:78:59:EF:8E:D4:BF:95 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YmLyBCZKXSIXqhrIT3hZ747Uv5U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.18.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:99:c6:91:f3:a5:09:f3:d1:31:dc:81:e6:a1:88:a5:2f:61: 6d:51:6b:bb:a9:f1:04:c5:a2:e6:6e:27:6e:36:f1:38:62:43: 11:50:a0:7f:39:85:2c:e8:b6:d7:d4:bc:75:be:02:35:af:8a: c6:b7:2e:cb:fc:f9:a8:09:fb:31:af:3b:a0:97:2d:de:10:00: 38:24:32:8e:92:15:b3:7c:1d:5d:41:08:42:70:e7:d7:51:1b: 40:42:23:05:6b:a4:7c:72:05:dd:17:0a:31:b1:3b:42:0e:32: 17:75:ad:ef:54:af:f8:1b:d9:6a:29:5d:06:a7:9e:22:2f:8e: 15:ab:05:37:0d:7d:24:e6:0d:0c:55:37:fa:b4:ae:ca:78:e6: eb:11:7c:6a:b8:99:03:be:d4:9d:13:58:77:99:1b:68:c3:4b: 62:f5:1a:c7:7b:27:91:2f:dd:fb:46:c2:3a:fe:c6:e9:28:af: 49:d7:19:00:a5:28:3e:e8:50:68:ef:d7:5b:32:39:91:4d:6e: 36:3c:8a:c7:40:d5:63:e5:dc:a3:ee:58:ff:05:75:86:35:05: fb:01:73:e8:17:4c:0f:54:d3:19:05:86:09:cc:27:7d:93:6a: 40:eb:3e:2d:97:e6:f2:8e:c0:43:e9:6e:f0:d4:2d:f6:27:18: d2:bc:21:cc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYyNjJGMjA0MjY0QTVE MjIxN0FBMUFDODRGNzg1OUVGOEVENEJGOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7iz4St04uxlkDxK3atFZjMBu8BStOhp1ubHt3eweRGmar+uW1 Phgb6YFP2NndJSUjyhhXO1RlptxlVl3MtEuDv7HFneqE28VIWDUwC9EOC9zIvFm7 byfvA3bvXXNqFtbGpDwlxmhDK9rRcErkHNTYM2YAzatjq/esPsEKFNSMknNdwM6Y ieX+RTKcR37HQHtCVfzcl/SiGlTtcrGQntxwmqIrOQoPYMq4UALVvhINwrNhiTyf eup4bCuYhzP+4L7hPEAeDT9lgLQfH8bRvrFwL1aQ+4U8j2me25Ruw/kcpszR5MjB 0l/EyHPoqZceB83CbF3U4gtLBigFAI/olLqdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYmLyBCZKXSIXqhrIT3hZ747Uv5UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ltTHlCQ1pLWFNJWHFocklUM2haNzQ3VXY1VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYBIwDQYJKoZIhvcNAQELBQADggEBAFyZxpHzpQnz0THcgeahiKUvYW1R a7up8QTFouZuJ2428ThiQxFQoH85hSzottfUvHW+AjWvisa3Lsv8+agJ+zGvO6CX Ld4QADgkMo6SFbN8HV1BCEJw59dRG0BCIwVrpHxyBd0XCjGxO0IOMhd1re9Ur/gb 2WopXQanniIvjhWrBTcNfSTmDQxVN/q0rsp45usRfGq4mQO+1J0TWHeZG2jDS2L1 Gsd7J5Ev3ftGwjr+xukor0nXGQClKD7oUGjv11syOZFNbjY8isdA1WPl3KPuWP8F dYY1BfsBc+gXTA9U0xkFhgnMJ32TakDrPi2X5vKOwEPpbvDULfYnGNK8Icw= -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:15 2025 by rpki-client