$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bVQOwMKX5Dyi04gnU0-840JpXbY.roa File: bVQOwMKX5Dyi04gnU0-840JpXbY.roa (raw, json) Hash identifier: WcC6F9yz2qQsvk/8sP6byj9XYbPHCQ0lz0hikmtGsoE= Subject key identifier: 6D:54:0E:C0:C2:97:E4:3C:A2:D3:88:27:53:4F:BC:E3:42:69:5D:B6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E23 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bVQOwMKX5Dyi04gnU0-840JpXbY.roa Signing time: Tue 01 Apr 2025 02:31:38 +0000 ROA not before: Tue 01 Apr 2025 02:31:38 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3619 (0xe23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:31:38 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=6D540EC0C297E43CA2D38827534FBCE342695DB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:9b:44:61:97:0a:8c:fb:03:7a:b9:e6:0e: 53:c9:8b:aa:1b:6b:52:fa:ba:c6:6f:96:b9:bb:ea: 1a:71:ea:6f:c8:a9:97:88:2e:63:c7:f3:34:33:9b: bf:5b:06:56:bf:d5:98:49:fd:5f:0a:46:01:4b:2e: a5:c6:8d:d6:e2:66:7e:e0:7f:51:91:b3:4e:43:f5: 8a:d9:5d:63:0b:b7:0d:13:53:c9:52:31:b8:65:2a: b3:67:3a:46:78:8c:f2:1a:cb:46:2a:fa:ab:94:ce: 3b:29:b9:09:8d:65:aa:b8:f9:ac:eb:18:cf:61:f4: 2a:e2:2e:70:80:c8:fa:88:e7:32:cd:2e:3f:e6:9b: 05:47:c5:67:34:99:e0:f5:bd:2b:c0:16:58:93:19: 96:63:77:ce:44:f9:58:4e:f9:32:c6:d3:7d:5b:90: 61:ae:b5:8d:41:25:f1:f8:2f:e8:f8:7b:b5:7c:27: 2e:95:7b:65:fa:af:9e:92:3e:bf:b0:70:fa:0f:87: 91:61:81:39:cd:86:6f:3f:f9:31:3e:8a:6b:c1:0c: 51:23:23:a2:a1:00:51:05:60:5e:49:9c:e4:f5:44: 7c:d8:16:75:18:f3:35:ce:ef:48:19:78:ba:d0:3c: 99:1a:68:19:3b:b5:ba:c0:b9:e3:02:6d:55:c4:19: 56:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:54:0E:C0:C2:97:E4:3C:A2:D3:88:27:53:4F:BC:E3:42:69:5D:B6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bVQOwMKX5Dyi04gnU0-840JpXbY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.152.0/22 Signature Algorithm: sha256WithRSAEncryption 64:f4:21:f9:a4:f9:58:75:5c:cd:0e:d6:32:12:65:b3:de:a6: c2:c9:00:71:7d:36:f1:42:c3:72:c9:15:a2:d4:f9:03:e0:94: 0f:42:dd:bd:da:4e:43:67:bf:f5:93:c6:99:2b:f4:7b:81:e6: 44:7d:cc:cd:20:26:26:0e:7b:09:96:ac:cc:a3:6d:10:76:e7: 49:57:af:14:60:e4:09:9a:33:91:c6:a7:22:60:60:df:af:38: a4:6a:da:49:77:ea:68:4c:49:64:d7:bd:35:3e:8d:0e:e1:65: e6:20:f6:8f:d1:54:9a:08:06:cb:b0:54:5e:08:7a:5e:71:3a: 63:ec:8c:8c:be:0e:3f:a8:62:7e:5c:08:bc:4c:6b:af:d3:1d: ff:c0:cd:59:48:5e:2f:39:41:db:21:5e:81:85:35:0e:34:68: f8:c0:01:2f:3a:df:57:cc:8a:6e:b8:9e:32:6f:70:74:59:63: a4:85:c6:ac:63:f3:21:84:4e:d7:d9:b6:9e:cd:99:21:cc:ad: a5:d2:2c:d3:08:e7:32:05:aa:e2:0e:4b:ab:d0:46:ba:d6:18: 44:c1:29:71:21:0a:2b:d4:4a:21:3e:ba:30:b7:8c:94:4c:8d: 0b:2d:cf:59:59:82:aa:e9:76:8e:97:87:6b:a8:c7:17:a3:ed: 06:2a:11:03 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDiMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMxMzhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZENTQwRUMwQzI5N0U0 M0NBMkQzODgyNzUzNEZCQ0UzNDI2OTVEQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5VZtEYZcKjPsDernmDlPJi6oba1L6usZvlrm76hpx6m/IqZeI LmPH8zQzm79bBla/1ZhJ/V8KRgFLLqXGjdbiZn7gf1GRs05D9YrZXWMLtw0TU8lS MbhlKrNnOkZ4jPIay0Yq+quUzjspuQmNZaq4+azrGM9h9CriLnCAyPqI5zLNLj/m mwVHxWc0meD1vSvAFliTGZZjd85E+VhO+TLG031bkGGutY1BJfH4L+j4e7V8Jy6V e2X6r56SPr+wcPoPh5FhgTnNhm8/+TE+imvBDFEjI6KhAFEFYF5JnOT1RHzYFnUY 8zXO70gZeLrQPJkaaBk7tbrAueMCbVXEGVZ7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbVQOwMKX5Dyi04gnU0+840JpXbYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2JWUU93TUtYNUR5aTA0Z25VMC04NDBKcFhiWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYpgwDQYJKoZIhvcNAQELBQADggEBAGT0Ifmk+Vh1XM0O1jISZbPepsLJ AHF9NvFCw3LJFaLU+QPglA9C3b3aTkNnv/WTxpkr9HuB5kR9zM0gJiYOewmWrMyj bRB250lXrxRg5AmaM5HGpyJgYN+vOKRq2kl36mhMSWTXvTU+jQ7hZeYg9o/RVJoI BsuwVF4Iel5xOmPsjIy+Dj+oYn5cCLxMa6/THf/AzVlIXi85QdshXoGFNQ40aPjA AS8631fMim64njJvcHRZY6SFxqxj8yGETtfZtp7NmSHMraXSLNMI5zIFquIOS6vQ RrrWGETBKXEhCivUSiE+ujC3jJRMjQstz1lZgqrpdo6Xh2uoxxej7QYqEQM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:52:51 2025 by rpki-client