$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/b2cO_BCTIcohnT1X-6rDfrzk5Dc.roa File: b2cO_BCTIcohnT1X-6rDfrzk5Dc.roa (raw, json) Hash identifier: i8ZGeNdjQvj603VtN88OE5eG//ozgXffLcw8fzsVb4E= Subject key identifier: 6F:67:0E:FC:10:93:21:CA:21:9D:3D:57:FB:AA:C3:7E:BC:E4:E4:37 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D0F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b2cO_BCTIcohnT1X-6rDfrzk5Dc.roa Signing time: Tue 01 Apr 2025 02:11:43 +0000 ROA not before: Tue 01 Apr 2025 02:11:43 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3343 (0xd0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:43 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=6F670EFC109321CA219D3D57FBAAC37EBCE4E437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:4b:36:f6:f9:e6:31:0d:76:b2:5f:a9:0d:60: a6:f7:f7:7e:67:0d:1a:70:76:c6:16:eb:31:b4:90: e5:8b:44:91:3e:3b:a9:f1:0c:7c:b4:7c:88:9e:91: 85:09:d1:a9:0b:8e:f1:1b:af:46:8e:83:e3:b2:8b: 8c:9e:62:5b:fd:0e:13:ed:05:77:62:bc:ea:59:c5: 87:d8:e2:1f:70:58:b3:df:33:b8:f8:b3:85:55:7b: b2:b8:a0:95:81:3b:ac:11:96:80:76:b7:d4:69:8b: 3d:44:3c:64:40:88:22:c4:00:56:6c:54:18:9d:16: 97:e7:1f:45:8b:5f:96:d2:53:85:f2:7f:3c:76:39: da:b9:fe:7d:9a:ff:a8:fd:bf:13:dd:2a:21:46:c1: 0e:16:37:18:ef:1f:f5:2d:6b:a7:c5:bd:6a:55:7d: 9c:bb:30:63:0b:22:d7:ae:c2:bb:49:70:db:69:e9: eb:85:e2:70:05:42:5e:91:eb:24:a5:aa:12:b2:4c: 52:ac:99:5e:4c:bf:e3:29:a4:c0:11:de:82:42:43: 2e:54:e8:f7:bf:9f:c0:26:28:f5:1f:57:60:fd:93: 79:bd:a3:d1:4a:be:88:78:20:b7:a8:60:38:4f:bb: 27:1f:11:ba:14:54:81:f6:ca:d6:c8:14:ae:b2:70: 8c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:67:0E:FC:10:93:21:CA:21:9D:3D:57:FB:AA:C3:7E:BC:E4:E4:37 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b2cO_BCTIcohnT1X-6rDfrzk5Dc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.52.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:8f:fd:f9:35:90:50:8d:a6:65:32:41:22:98:c7:dc:e8:3a: d0:23:47:44:91:87:16:5e:3c:46:ab:53:7d:d3:d2:4f:14:64: 3e:db:04:6d:a8:26:12:b8:f4:4f:cb:f1:96:26:40:9c:eb:db: af:5c:0f:f7:6c:75:7b:60:73:b7:1f:a6:cb:35:87:29:76:8d: 56:4e:57:cc:a0:45:89:ca:3c:5c:66:ca:73:09:1f:ea:47:b6: c1:82:80:c0:3c:77:62:c2:6c:b4:c4:8f:c3:65:be:ae:5d:fe: 0f:e5:aa:b8:16:ba:05:a5:ab:71:c3:42:7e:30:6a:28:e3:71: 08:38:00:9b:06:41:b6:96:0a:94:e2:20:6a:ee:ff:24:07:96: 86:7d:8d:9f:84:54:7e:0b:90:bf:b9:9b:7b:9b:09:ee:6a:78: 52:63:52:c3:f0:e5:b4:ff:41:21:64:a6:cc:7c:3d:97:77:a8: 8a:be:b1:e0:48:02:ee:31:0b:cf:e7:49:d8:24:5e:00:3d:80: ca:a7:92:31:66:00:a9:9b:59:e3:88:28:55:9f:4e:78:1d:04: 97:a0:62:6e:0d:01:10:2e:66:8b:c5:2c:d9:89:4c:f4:26:5f: 56:97:fc:51:0c:49:8e:35:3b:4d:88:01:22:49:3f:da:a0:c9: 65:e6:4c:fd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExNDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZGNjcwRUZDMTA5MzIx Q0EyMTlEM0Q1N0ZCQUFDMzdFQkNFNEU0MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4Szb2+eYxDXayX6kNYKb3935nDRpwdsYW6zG0kOWLRJE+O6nx DHy0fIiekYUJ0akLjvEbr0aOg+Oyi4yeYlv9DhPtBXdivOpZxYfY4h9wWLPfM7j4 s4VVe7K4oJWBO6wRloB2t9Rpiz1EPGRAiCLEAFZsVBidFpfnH0WLX5bSU4Xyfzx2 Odq5/n2a/6j9vxPdKiFGwQ4WNxjvH/Uta6fFvWpVfZy7MGMLIteuwrtJcNtp6euF 4nAFQl6R6ySlqhKyTFKsmV5Mv+MppMAR3oJCQy5U6Pe/n8AmKPUfV2D9k3m9o9FK voh4ILeoYDhPuycfEboUVIH2ytbIFK6ycIyhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUb2cO/BCTIcohnT1X+6rDfrzk5DcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2IyY09fQkNUSWNvaG5UMVgtNnJEZnJ6azVEYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYDQwDQYJKoZIhvcNAQELBQADggEBAIqP/fk1kFCNpmUyQSKYx9zoOtAj R0SRhxZePEarU33T0k8UZD7bBG2oJhK49E/L8ZYmQJzr269cD/dsdXtgc7cfpss1 hyl2jVZOV8ygRYnKPFxmynMJH+pHtsGCgMA8d2LCbLTEj8Nlvq5d/g/lqrgWugWl q3HDQn4waijjcQg4AJsGQbaWCpTiIGru/yQHloZ9jZ+EVH4LkL+5m3ubCe5qeFJj UsPw5bT/QSFkpsx8PZd3qIq+seBIAu4xC8/nSdgkXgA9gMqnkjFmAKmbWeOIKFWf TngdBJegYm4NARAuZovFLNmJTPQmX1aX/FEMSY41O02IASJJP9qgyWXmTP0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:06:35 2025 by rpki-client