$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ahNZoYrrxRhHWfkTgALcRGjJPGU.roa File: ahNZoYrrxRhHWfkTgALcRGjJPGU.roa (raw, json) Hash identifier: PihEsrJThyfvwhhx+reGIP2x8FJC5SyLA5T3Okhumfo= Subject key identifier: 6A:13:59:A1:8A:EB:C5:18:47:59:F9:13:80:02:DC:44:68:C9:3C:65 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CB3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ahNZoYrrxRhHWfkTgALcRGjJPGU.roa Signing time: Tue 01 Apr 2025 02:05:43 +0000 ROA not before: Tue 01 Apr 2025 02:05:43 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3251 (0xcb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:43 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=6A1359A18AEBC5184759F9138002DC4468C93C65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4d:3a:aa:33:79:70:98:24:22:58:2b:33:1b: c1:10:ce:38:ce:c1:b2:d7:45:42:5b:92:15:83:aa: a4:69:5d:b3:4b:6e:bc:17:09:f2:d0:5f:0b:46:32: 02:6b:52:d8:8c:57:da:3e:f6:16:47:39:ad:04:e2: c9:3a:e6:0a:23:a5:64:52:d1:44:b6:f1:9d:83:4f: 24:c9:94:d9:8a:c1:79:a7:01:65:28:af:51:da:b1: a3:1b:45:9a:5a:9d:9f:29:ac:82:c7:24:60:94:c8: 79:f4:89:ac:bc:2f:b0:81:d9:4e:60:6a:47:ea:56: 49:cb:33:3c:d4:ec:e7:68:f5:aa:fa:e3:ce:7d:e5: 54:1c:17:4c:97:34:4d:2c:03:c7:04:29:08:1c:bf: e8:df:98:90:dd:61:00:05:2a:ff:1e:62:48:1a:bd: 25:41:f3:35:2a:f8:f9:a6:24:1b:1b:06:f0:26:0b: 5e:aa:47:4e:50:75:fa:cb:68:cb:e4:9a:a1:9e:f3: 48:55:dc:f4:5f:ec:e0:30:01:a8:49:d7:41:41:86: d3:18:ef:57:a1:ea:32:db:c4:a6:c7:9c:60:31:68: 06:03:8a:97:f9:b8:17:bd:68:91:9c:8e:00:30:f0: f5:d7:7f:27:f5:19:2a:aa:17:0e:b0:39:a4:30:6d: ad:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:13:59:A1:8A:EB:C5:18:47:59:F9:13:80:02:DC:44:68:C9:3C:65 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ahNZoYrrxRhHWfkTgALcRGjJPGU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.8.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:ba:d1:2b:8c:a6:0d:ea:ed:be:26:35:14:63:0c:48:0c:f3: 0b:cf:35:ad:d8:a2:2f:58:48:94:85:37:4c:c0:5f:e2:c1:4b: 64:3d:d9:18:e7:70:8e:ed:e0:60:a8:ef:f9:f8:23:9f:e4:9a: 12:18:34:2e:c7:58:de:65:ca:2d:93:9f:98:85:65:5c:53:3b: ef:8b:46:0c:bf:2e:14:e1:1f:82:6e:85:87:b5:46:be:45:01: e9:b7:65:92:39:57:07:aa:1d:85:af:d0:c6:8c:ef:06:aa:37: 70:65:9f:e6:4b:56:77:8f:d5:56:12:43:23:52:0e:6c:40:3d: 5c:43:2d:f6:d0:50:dd:6a:05:06:cd:6f:86:07:a5:df:b7:61: aa:57:fc:ac:97:90:44:81:3f:4c:b6:13:23:60:d0:e0:03:a6: d9:2a:ef:6e:4c:d0:6a:9b:dc:7a:d0:c7:0f:30:d4:22:17:8c: a9:cd:30:f1:13:d3:8a:92:3b:ef:f5:56:b7:b9:aa:71:30:6c: cb:dc:a1:1f:c1:4c:a2:fd:7d:86:52:fc:33:4f:d5:f3:9b:da: 97:36:8c:07:b5:fb:38:bf:9a:a2:af:e0:b3:f6:99:ca:c5:76: 21:94:ea:ee:0c:a3:21:a1:03:74:d2:23:11:b5:c0:4f:cf:e8: 3d:36:71:b6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDLMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZBMTM1OUExOEFFQkM1 MTg0NzU5RjkxMzgwMDJEQzQ0NjhDOTNDNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdTTqqM3lwmCQiWCszG8EQzjjOwbLXRUJbkhWDqqRpXbNLbrwX CfLQXwtGMgJrUtiMV9o+9hZHOa0E4sk65gojpWRS0US28Z2DTyTJlNmKwXmnAWUo r1HasaMbRZpanZ8prILHJGCUyHn0iay8L7CB2U5gakfqVknLMzzU7Odo9ar64859 5VQcF0yXNE0sA8cEKQgcv+jfmJDdYQAFKv8eYkgavSVB8zUq+PmmJBsbBvAmC16q R05QdfrLaMvkmqGe80hV3PRf7OAwAahJ10FBhtMY71eh6jLbxKbHnGAxaAYDipf5 uBe9aJGcjgAw8PXXfyf1GSqqFw6wOaQwba0jAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUahNZoYrrxRhHWfkTgALcRGjJPGUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2FoTlpvWXJyeFJoSFdma1RnQUxjUkdqSlBHVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaAgwDQYJKoZIhvcNAQELBQADggEBACu60SuMpg3q7b4mNRRjDEgM8wvP Na3Yoi9YSJSFN0zAX+LBS2Q92RjncI7t4GCo7/n4I5/kmhIYNC7HWN5lyi2Tn5iF ZVxTO++LRgy/LhThH4JuhYe1Rr5FAem3ZZI5VweqHYWv0MaM7waqN3Bln+ZLVneP 1VYSQyNSDmxAPVxDLfbQUN1qBQbNb4YHpd+3YapX/KyXkESBP0y2EyNg0OADptkq 725M0Gqb3HrQxw8w1CIXjKnNMPET04qSO+/1Vre5qnEwbMvcoR/BTKL9fYZS/DNP 1fOb2pc2jAe1+zi/mqKv4LP2mcrFdiGU6u4MoyGhA3TSIxG1wE/P6D02cbY= -----END CERTIFICATE-----Generated at Wed Nov 5 15:53:50 2025 by rpki-client