$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dtdnDNyREXY4BHJ-RPksYoK6WxY.roa File: dtdnDNyREXY4BHJ-RPksYoK6WxY.roa (raw, json) Hash identifier: jekgemRW2cfpTfbYvekSWAwBy5m4V7/bMpQY5R5O2n4= Subject key identifier: 76:D7:67:0C:DC:91:11:76:38:04:72:7E:44:F9:2C:62:82:BA:5B:16 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BBC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dtdnDNyREXY4BHJ-RPksYoK6WxY.roa Signing time: Tue 01 Apr 2025 01:43:43 +0000 ROA not before: Tue 01 Apr 2025 01:43:43 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3004 (0xbbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:43:43 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=76D7670CDC9111763804727E44F92C6282BA5B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:57:ab:c8:9c:e6:38:30:8e:79:77:21:33:91: 26:ec:57:4e:ef:62:80:2e:08:6d:b8:a6:15:11:63: 43:b4:51:d1:41:e5:20:d4:a0:dd:e4:a5:5a:32:ca: 37:11:f8:d9:74:d8:54:7e:a5:10:fb:ca:73:6a:9f: d5:66:e7:d5:15:52:f1:a1:86:5a:4b:08:1a:19:a4: bf:15:19:09:1a:c3:da:00:19:f0:0e:54:84:3b:c7: af:fd:96:96:59:0f:17:95:4b:04:89:b5:44:c8:68: 04:0e:eb:14:b4:ef:9b:66:89:ae:1b:af:39:c2:71: 03:2c:7d:d4:93:2e:49:79:cf:e7:a0:6b:40:81:4d: d6:fb:05:8e:92:a2:a7:f1:b6:8c:ec:87:05:fa:a2: 45:7b:26:c7:a5:32:a0:93:ed:f4:64:3a:77:4d:c3: 3c:20:82:2e:bd:9d:ad:cd:d6:71:be:31:18:b5:17: f2:11:78:e0:ab:05:8d:28:7a:b8:44:67:58:b4:8b: c3:45:0a:23:7a:10:d2:cb:fc:c0:b9:f1:57:28:9f: ab:06:0b:89:0a:8c:b9:1b:94:5e:3d:79:c7:9b:4b: 1e:75:ef:56:a0:4c:48:42:1e:8a:01:b7:39:45:1a: f6:b5:05:84:1b:2d:29:b7:a6:13:1e:01:22:9c:32: 4c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D7:67:0C:DC:91:11:76:38:04:72:7E:44:F9:2C:62:82:BA:5B:16 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dtdnDNyREXY4BHJ-RPksYoK6WxY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.158.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:9e:45:9c:ce:17:79:25:ad:4e:1a:2d:af:d3:38:9a:64:ba: ea:b6:60:5b:2e:8d:77:92:1c:15:0b:8f:08:e6:71:1b:8b:00: 7b:11:97:00:36:c8:32:03:3d:7c:ba:b1:3c:9c:af:07:f0:14: a9:72:19:8c:ac:a7:63:78:ef:96:16:34:3e:91:53:fc:4e:38: 2c:4a:c5:54:c3:ef:32:5b:cd:d3:76:4b:8e:cc:13:49:9a:aa: cc:2c:d7:c2:0d:9f:ba:05:37:b0:d1:ec:a0:8f:06:1d:a6:3d: 8c:d4:ac:60:01:4a:b9:40:2f:f6:10:e8:6c:5a:d4:2f:fc:db: e2:55:6e:46:d4:51:5a:6c:49:c5:94:04:5c:51:79:9e:d7:4b: 58:73:15:05:59:58:ae:8f:e1:0c:56:6f:08:a1:b4:15:3d:bd: ac:48:2a:48:f2:06:0b:1d:f8:12:68:4b:95:1e:35:5a:5a:ae: ee:bc:5f:7c:80:b2:d1:ef:bb:3e:7b:19:a5:88:61:90:22:57: 55:c2:79:db:08:5d:3f:2b:98:75:2f:24:15:5e:6f:7e:b5:d0: 7e:7a:e0:84:76:25:e1:49:8d:44:a5:fe:f9:ec:24:b7:d4:4a: 6e:eb:c5:50:d7:46:54:98:43:d3:d6:57:b6:4b:69:ab:4a:72: ba:1b:2f:c3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC7wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQzNDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc2RDc2NzBDREM5MTEx NzYzODA0NzI3RTQ0RjkyQzYyODJCQTVCMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOV6vInOY4MI55dyEzkSbsV07vYoAuCG24phURY0O0UdFB5SDU oN3kpVoyyjcR+Nl02FR+pRD7ynNqn9Vm59UVUvGhhlpLCBoZpL8VGQkaw9oAGfAO VIQ7x6/9lpZZDxeVSwSJtUTIaAQO6xS075tmia4brznCcQMsfdSTLkl5z+ega0CB Tdb7BY6SoqfxtozshwX6okV7JselMqCT7fRkOndNwzwggi69na3N1nG+MRi1F/IR eOCrBY0oerhEZ1i0i8NFCiN6ENLL/MC58Vcon6sGC4kKjLkblF49ecebSx5171ag TEhCHooBtzlFGva1BYQbLSm3phMeASKcMkxVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdtdnDNyREXY4BHJ+RPksYoK6WxYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2R0ZG5ETnlSRVhZNEJISi1SUGtzWW9LNld4WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYp4wDQYJKoZIhvcNAQELBQADggEBAG6eRZzOF3klrU4aLa/TOJpkuuq2 YFsujXeSHBULjwjmcRuLAHsRlwA2yDIDPXy6sTycrwfwFKlyGYysp2N475YWND6R U/xOOCxKxVTD7zJbzdN2S47ME0maqsws18INn7oFN7DR7KCPBh2mPYzUrGABSrlA L/YQ6Gxa1C/82+JVbkbUUVpsScWUBFxReZ7XS1hzFQVZWK6P4QxWbwihtBU9vaxI KkjyBgsd+BJoS5UeNVparu68X3yAstHvuz57GaWIYZAiV1XCedsIXT8rmHUvJBVe b3610H564IR2JeFJjUSl/vnsJLfUSm7rxVDXRlSYQ9PWV7ZLaatKcrobL8M= -----END CERTIFICATE-----Generated at Wed Nov 5 22:07:14 2025 by rpki-client