$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fVKx062LT0fvy1xsnheLxVSq900.roa File: fVKx062LT0fvy1xsnheLxVSq900.roa (raw, json) Hash identifier: bO3c9uUrgNQ8YChk6CpxxJxPeJa2KO5hAB/OwzFcNqI= Subject key identifier: 7D:52:B1:D3:AD:8B:4F:47:EF:CB:5C:6C:9E:17:8B:C5:54:AA:F7:4D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E04 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fVKx062LT0fvy1xsnheLxVSq900.roa Signing time: Tue 01 Apr 2025 02:29:16 +0000 ROA not before: Tue 01 Apr 2025 02:29:16 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3588 (0xe04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:29:16 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=7D52B1D3AD8B4F47EFCB5C6C9E178BC554AAF74D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:56:48:c1:c4:f3:e8:3e:40:41:e5:e0:de:26: fc:c5:bc:8a:cf:6a:e0:0e:67:a4:c5:fc:bf:61:9e: 43:58:25:c8:a2:42:02:b6:4b:5d:a9:bb:2b:de:4b: af:4a:d1:bb:aa:3c:d4:42:35:bf:e5:39:ed:7b:df: 14:6c:92:38:ed:f3:b2:a6:b8:dd:e4:06:91:96:9b: c3:03:4e:d8:ee:2d:4b:fa:47:6a:28:8f:f4:4a:40: 45:1f:99:60:f0:64:f3:10:da:85:fa:a9:3a:b8:c2: 5b:06:54:8f:7f:f9:08:86:33:52:f9:a7:77:4e:fa: 64:9b:7b:54:05:99:fa:da:18:a3:95:8d:2f:c7:02: 21:c8:bd:b8:64:d5:cd:4c:b9:05:f3:fe:60:b1:ec: 42:97:22:7f:58:5f:c2:74:62:66:e7:10:51:e4:bd: d5:2f:a3:af:1e:0a:73:39:69:f5:bf:60:10:dc:da: 92:32:75:03:e7:ec:1e:10:2c:af:e1:94:08:f3:ef: 0e:33:0a:5b:3f:d7:28:0b:27:a1:9d:d8:42:ef:31: 0b:01:5f:0e:c5:c1:ca:df:83:9a:cb:c6:0d:e8:27: c5:e0:06:4d:b3:8f:5b:43:83:39:8b:e2:88:81:66: 2b:84:5e:70:35:ad:a3:b0:87:71:27:fc:cb:60:3b: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:52:B1:D3:AD:8B:4F:47:EF:CB:5C:6C:9E:17:8B:C5:54:AA:F7:4D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fVKx062LT0fvy1xsnheLxVSq900.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.224.0/22 Signature Algorithm: sha256WithRSAEncryption 06:84:e1:e3:e2:94:52:6a:45:58:3f:94:e0:56:fe:71:2e:ec: 58:d4:d1:08:35:c0:89:0d:22:83:8b:e7:dd:cf:f6:3d:fb:41: c9:ea:01:41:2d:b2:55:6a:2f:92:c6:7a:70:b2:99:29:c6:e8: 17:f9:a0:a3:c1:1f:8a:86:23:fd:6d:27:04:89:86:f6:ce:13: 02:f0:df:2b:af:01:b2:89:ca:d8:35:e0:01:59:62:ef:a6:c8: 72:6f:48:2b:2a:17:52:f0:57:b1:ce:85:23:be:0a:37:cb:df: da:02:0c:9e:84:d6:88:dc:48:9f:26:4c:c2:04:44:23:33:03: 3f:88:7a:f9:7e:01:f8:9d:63:41:6d:48:97:ea:7d:73:e8:02: 69:3c:05:be:8c:f9:5b:3f:86:5e:ba:d6:6c:26:fd:73:0a:ea: 78:6f:43:ee:69:99:e2:51:9b:82:78:8c:e3:35:90:19:5e:0c: f3:fc:4c:51:d8:af:be:89:9c:8c:69:a8:2f:60:f6:ef:bb:06: 77:40:d1:2e:19:a5:d4:2c:a4:8e:9d:ee:c3:b8:cc:ed:11:75: e8:57:36:da:df:c3:84:17:84:2e:81:84:fc:1c:26:c3:93:ec: 2c:38:aa:a7:62:06:1b:b2:c8:58:ee:3f:2e:81:09:f4:f2:61: eb:16:69:00 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDgQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI5MTZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdENTJCMUQzQUQ4QjRG NDdFRkNCNUM2QzlFMTc4QkM1NTRBQUY3NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4VkjBxPPoPkBB5eDeJvzFvIrPauAOZ6TF/L9hnkNYJciiQgK2 S12puyveS69K0buqPNRCNb/lOe173xRskjjt87KmuN3kBpGWm8MDTtjuLUv6R2oo j/RKQEUfmWDwZPMQ2oX6qTq4wlsGVI9/+QiGM1L5p3dO+mSbe1QFmfraGKOVjS/H AiHIvbhk1c1MuQXz/mCx7EKXIn9YX8J0YmbnEFHkvdUvo68eCnM5afW/YBDc2pIy dQPn7B4QLK/hlAjz7w4zCls/1ygLJ6Gd2ELvMQsBXw7Fwcrfg5rLxg3oJ8XgBk2z j1tDgzmL4oiBZiuEXnA1raOwh3En/MtgO9F3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfVKx062LT0fvy1xsnheLxVSq900wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ZWS3gwNjJMVDBmdnkxeHNuaGVMeFZTcTkwMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYuAwDQYJKoZIhvcNAQELBQADggEBAAaE4ePilFJqRVg/lOBW/nEu7FjU 0Qg1wIkNIoOL593P9j37QcnqAUEtslVqL5LGenCymSnG6Bf5oKPBH4qGI/1tJwSJ hvbOEwLw3yuvAbKJytg14AFZYu+myHJvSCsqF1LwV7HOhSO+CjfL39oCDJ6E1ojc SJ8mTMIERCMzAz+Ievl+AfidY0FtSJfqfXPoAmk8Bb6M+Vs/hl661mwm/XMK6nhv Q+5pmeJRm4J4jOM1kBleDPP8TFHYr76JnIxpqC9g9u+7BndA0S4ZpdQspI6d7sO4 zO0RdehXNtrfw4QXhC6BhPwcJsOT7Cw4qqdiBhuyyFjuPy6BCfTyYesWaQA= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:14 2025 by rpki-client