$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fxUcEwAe2SMrI-GJgZ7OFOjJwRo.roa File: fxUcEwAe2SMrI-GJgZ7OFOjJwRo.roa (raw, json) Hash identifier: PxoKEdz65xuaIyv3KkxB6lmyreMMJLYXU+ssul/TmeU= Subject key identifier: 7F:15:1C:13:00:1E:D9:23:2B:23:E1:89:81:9E:CE:14:E8:C9:C1:1A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C25 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fxUcEwAe2SMrI-GJgZ7OFOjJwRo.roa Signing time: Tue 01 Apr 2025 01:54:02 +0000 ROA not before: Tue 01 Apr 2025 01:54:02 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3109 (0xc25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:54:02 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=7F151C13001ED9232B23E189819ECE14E8C9C11A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e2:88:22:b2:5b:6c:76:37:f5:14:22:fb:a6: a0:81:7b:2c:a2:11:a4:77:3b:8e:20:86:e8:46:28: df:7c:15:32:f0:05:42:91:62:db:24:29:57:56:73: a6:c7:3d:77:21:73:52:22:25:e7:de:8d:f2:65:85: 13:d2:4d:dc:ac:28:4e:48:43:96:c5:6c:21:af:b2: 0c:64:0c:22:5e:7c:10:25:29:76:56:c7:d2:8f:9e: 2e:7e:ed:5a:eb:74:71:a0:00:24:df:90:2d:6d:1e: 23:6b:c0:12:c5:68:7e:26:7b:21:b2:07:11:f3:f8: 3c:05:35:bb:2a:3f:17:a2:a8:b9:1a:ba:63:39:ae: a9:88:83:55:19:37:0a:5e:e8:b7:57:e2:dc:00:6a: ff:a8:29:85:57:93:c6:5e:8c:7a:d6:9f:96:6f:a5: 04:ae:ee:a7:b5:36:7c:ee:8f:a6:f9:8d:fe:c9:36: 48:94:70:a6:be:b0:be:30:29:71:82:96:fe:b1:ee: 98:30:db:89:39:e5:d5:19:9d:06:3e:f1:68:00:56: 80:7c:f3:8a:11:88:ce:e5:c8:33:fa:07:f7:7c:96: 19:9c:55:60:af:92:ff:78:6d:a9:f2:3e:f4:19:9e: 7d:26:37:1c:ca:40:ea:03:fd:4e:6f:d3:5d:fb:cb: 3f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:15:1C:13:00:1E:D9:23:2B:23:E1:89:81:9E:CE:14:E8:C9:C1:1A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fxUcEwAe2SMrI-GJgZ7OFOjJwRo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.20.0/22 Signature Algorithm: sha256WithRSAEncryption e3:27:19:26:40:39:27:3a:fe:3d:55:19:1b:ac:6d:42:51:9a: 4f:d8:d6:0f:cd:eb:23:dd:da:2f:bf:16:94:ea:24:49:6a:5f: 36:f4:61:11:36:fb:ee:bb:44:75:95:8f:77:3b:d8:a2:49:94: a3:20:30:87:70:ed:78:6f:94:02:c9:ae:b6:af:e3:d3:d4:1c: 6a:a3:43:d9:52:b2:47:72:8a:9a:3e:c0:15:7b:62:53:6d:f2: b8:8e:eb:ef:b4:c2:c5:71:cb:b2:47:ba:8b:e4:34:4d:28:27: d5:b2:e5:6e:03:cc:26:0e:f1:2e:2f:41:64:a1:26:e2:f0:72: d9:64:8a:7a:93:73:42:f9:ce:ba:14:be:79:a3:7b:a0:1f:33: 0f:3e:2f:11:72:82:47:f7:ea:1b:29:46:7e:05:98:17:46:30: 39:e4:70:c9:88:bd:b1:7d:85:7d:48:f3:ca:74:7c:24:02:81: cb:be:bc:42:54:86:45:0e:1f:95:2e:88:95:8b:a2:d9:c6:14: 72:08:c5:d1:7b:36:d1:5e:34:7b:72:1b:03:ee:c8:bc:47:30: fb:fa:f9:ae:24:d8:d1:bc:a8:36:ae:e9:87:12:c8:5b:d6:24: d8:27:cc:10:ce:f3:ea:d2:2f:8d:b9:1b:1d:d3:ca:e6:f0:8f: 5d:73:17:b2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU0MDJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdGMTUxQzEzMDAxRUQ5 MjMyQjIzRTE4OTgxOUVDRTE0RThDOUMxMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDj4ogisltsdjf1FCL7pqCBeyyiEaR3O44ghuhGKN98FTLwBUKR YtskKVdWc6bHPXchc1IiJefejfJlhRPSTdysKE5IQ5bFbCGvsgxkDCJefBAlKXZW x9KPni5+7VrrdHGgACTfkC1tHiNrwBLFaH4meyGyBxHz+DwFNbsqPxeiqLkaumM5 rqmIg1UZNwpe6LdX4twAav+oKYVXk8ZejHrWn5ZvpQSu7qe1Nnzuj6b5jf7JNkiU cKa+sL4wKXGClv6x7pgw24k55dUZnQY+8WgAVoB884oRiM7lyDP6B/d8lhmcVWCv kv94banyPvQZnn0mNxzKQOoD/U5v0137yz9bAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfxUcEwAe2SMrI+GJgZ7OFOjJwRowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2Z4VWNFd0FlMlNNckktR0pnWjdPRk9qSndSby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYBQwDQYJKoZIhvcNAQELBQADggEBAOMnGSZAOSc6/j1VGRusbUJRmk/Y 1g/N6yPd2i+/FpTqJElqXzb0YRE2++67RHWVj3c72KJJlKMgMIdw7XhvlALJrrav 49PUHGqjQ9lSskdyipo+wBV7YlNt8riO6++0wsVxy7JHuovkNE0oJ9Wy5W4DzCYO 8S4vQWShJuLwctlkinqTc0L5zroUvnmje6AfMw8+LxFygkf36hspRn4FmBdGMDnk cMmIvbF9hX1I88p0fCQCgcu+vEJUhkUOH5UuiJWLotnGFHIIxdF7NtFeNHtyGwPu yLxHMPv6+a4k2NG8qDau6YcSyFvWJNgnzBDO8+rSL425Gx3Tyubwj11zF7I= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:22 2025 by rpki-client