$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_MJ9NuJx3OC8zZJ7Ts4I_lkYhz8.roa File: _MJ9NuJx3OC8zZJ7Ts4I_lkYhz8.roa (raw, json) Hash identifier: CRtdqvFMqD4nHxCDhoNronS2RMXGBOcDMVbYKHBADSY= Subject key identifier: FC:C2:7D:36:E2:71:DC:E0:BC:CD:92:7B:4E:CE:08:FE:59:18:87:3F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D8B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_MJ9NuJx3OC8zZJ7Ts4I_lkYhz8.roa Signing time: Tue 01 Apr 2025 02:21:31 +0000 ROA not before: Tue 01 Apr 2025 02:21:31 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.100.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3467 (0xd8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:21:31 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=FCC27D36E271DCE0BCCD927B4ECE08FE5918873F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:32:e9:58:c4:c6:c3:d0:ae:a4:65:0d:b7:0e: 31:59:6c:30:8e:28:98:8b:e3:82:a4:08:c4:ff:05: 5e:93:67:3b:22:d5:9d:55:05:55:39:3c:4d:ae:84: 28:16:8e:19:b7:9d:9d:b3:66:e8:ef:d4:2c:16:a1: f1:11:9a:67:0b:11:19:14:c2:13:4d:3c:dc:eb:fa: b2:c0:cf:fd:ab:37:4b:81:92:f6:80:da:ad:15:f3: 48:74:6d:40:89:2a:9d:fb:aa:c9:b9:05:3d:c9:c8: f5:b5:06:17:8f:0e:3c:d5:99:75:6a:12:6a:98:cd: ad:c1:2e:c1:e5:54:bb:b4:af:b5:38:78:b3:d7:3e: 0a:33:52:db:1a:9d:2e:a7:76:96:17:dd:be:db:31: da:ba:61:ea:10:e8:0d:36:44:07:e5:6a:84:57:0d: 9c:10:2e:1f:e1:3f:9e:40:07:06:da:92:ef:50:35: e3:d4:02:86:31:e1:d3:92:99:b3:fd:f8:7c:5b:a4: 2b:ef:7e:89:92:c8:00:01:a6:27:94:ac:a3:07:3b: 82:af:44:bf:4e:0b:17:a1:3d:7f:79:27:40:9a:cc: c5:ec:d9:20:43:b2:71:a7:e7:91:fc:75:57:e7:5f: 56:67:de:0d:cf:d7:0b:1b:44:f9:3c:1b:51:1c:5d: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C2:7D:36:E2:71:DC:E0:BC:CD:92:7B:4E:CE:08:FE:59:18:87:3F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_MJ9NuJx3OC8zZJ7Ts4I_lkYhz8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.100.160.0/19 Signature Algorithm: sha256WithRSAEncryption 07:b0:8b:9e:90:92:4b:0d:26:22:e2:30:ef:f0:79:ff:51:6d: 53:9f:51:ac:5f:7d:10:d5:bd:24:fa:c3:09:b9:ee:56:41:de: 97:09:1c:21:b3:2f:d9:ab:b3:e6:5b:c5:e2:4a:fb:3b:7c:99: e1:c3:f0:a5:8e:34:5f:67:21:41:69:a7:e9:d7:04:d4:53:06: 6b:3d:49:ec:ec:5f:5a:b2:cf:96:ac:76:05:75:49:c0:d3:2a: 33:9a:59:3b:b4:70:53:eb:c6:09:22:97:aa:7b:73:ac:f0:83: b0:db:b8:74:36:ec:4b:12:34:06:94:1a:e4:22:50:d8:72:e6: 78:a3:22:42:6b:d7:f3:1a:68:f9:da:19:23:5c:17:a9:af:13: 6b:41:31:d2:29:d8:80:6b:48:e8:5d:a8:5b:aa:36:68:c0:4f: f8:7e:5b:96:89:6e:2e:b2:f9:73:a4:46:da:f8:dd:7a:b5:16: f0:0c:5b:ec:b7:a8:62:9a:10:0b:d2:60:a9:e9:35:0c:70:b7: 6b:ea:d4:f1:e1:da:fc:30:22:6d:98:a7:9d:52:03:1b:98:f3: 0f:39:bb:02:cf:2e:b6:54:33:b3:1e:8c:ff:ac:b0:ff:d7:99: de:2b:b5:0f:74:bb:92:55:1c:a6:fb:ea:6b:15:43:39:da:e8: e4:11:39:e1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjIxMzFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEZDQzI3RDM2RTI3MURD RTBCQ0NEOTI3QjRFQ0UwOEZFNTkxODg3M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDyMulYxMbD0K6kZQ23DjFZbDCOKJiL44KkCMT/BV6TZzsi1Z1V BVU5PE2uhCgWjhm3nZ2zZujv1CwWofERmmcLERkUwhNNPNzr+rLAz/2rN0uBkvaA 2q0V80h0bUCJKp37qsm5BT3JyPW1BhePDjzVmXVqEmqYza3BLsHlVLu0r7U4eLPX PgozUtsanS6ndpYX3b7bMdq6YeoQ6A02RAflaoRXDZwQLh/hP55ABwbaku9QNePU AoYx4dOSmbP9+HxbpCvvfomSyAABpieUrKMHO4KvRL9OCxehPX95J0CazMXs2SBD snGn55H8dVfnX1Zn3g3P1wsbRPk8G1EcXSPvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/MJ9NuJx3OC8zZJ7Ts4I/lkYhz8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L19NSjlOdUp4M09DOHpaSjdUczRJX2xrWWh6OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUxZKAwDQYJKoZIhvcNAQELBQADggEBAAewi56QkksNJiLiMO/wef9RbVOf UaxffRDVvST6wwm57lZB3pcJHCGzL9mrs+ZbxeJK+zt8meHD8KWONF9nIUFpp+nX BNRTBms9SezsX1qyz5asdgV1ScDTKjOaWTu0cFPrxgkil6p7c6zwg7DbuHQ27EsS NAaUGuQiUNhy5nijIkJr1/MaaPnaGSNcF6mvE2tBMdIp2IBrSOhdqFuqNmjAT/h+ W5aJbi6y+XOkRtr43Xq1FvAMW+y3qGKaEAvSYKnpNQxwt2vq1PHh2vwwIm2Yp51S AxuY8w85uwLPLrZUM7MejP+ssP/Xmd4rtQ90u5JVHKb76msVQzna6OQROeE= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:07 2025 by rpki-client