$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/inCfLkSP5z7Z7iaEp1nH1VgSfrY.roa File: inCfLkSP5z7Z7iaEp1nH1VgSfrY.roa (raw, json) Hash identifier: IvFV42XtFflYq89ld+8iIYXap9LhC4212H3lxruIbtA= Subject key identifier: 8A:70:9F:2E:44:8F:E7:3E:D9:EE:26:84:A7:59:C7:D5:58:12:7E:B6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DD8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/inCfLkSP5z7Z7iaEp1nH1VgSfrY.roa Signing time: Tue 01 Apr 2025 02:27:25 +0000 ROA not before: Tue 01 Apr 2025 02:27:25 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3544 (0xdd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:25 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=8A709F2E448FE73ED9EE2684A759C7D558127EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bb:af:21:92:cc:8f:bc:cd:fa:22:e2:da:67: 52:6b:1a:44:9f:62:57:14:f2:0f:32:25:e4:95:ae: a8:0b:b5:91:bb:68:d7:96:2e:95:42:2d:0c:28:37: e3:2a:ba:8f:f5:a4:6b:e7:17:c1:91:bf:a7:9c:db: d8:d5:22:35:58:2e:bd:65:db:cc:87:47:29:06:48: 87:6c:9c:b1:74:e4:70:fc:a3:ff:f6:07:4f:3b:5f: 35:b1:50:dd:18:f1:b2:1b:d5:92:1d:15:c6:16:08: 0a:75:26:2f:78:0e:bb:0a:3b:bb:30:f5:a2:5d:c2: 90:43:ef:41:81:6f:f0:e1:01:f3:90:ae:3a:0c:2d: 99:d2:0d:76:f5:16:2f:97:6b:67:35:b1:95:3d:db: c9:f5:b9:53:cb:43:78:64:53:0d:4e:92:97:23:ce: cc:b8:9b:3f:0f:e6:00:f7:1d:73:f1:f0:eb:f0:31: bf:b8:ee:f6:f6:b6:19:d2:a0:10:40:a7:b3:d8:18: 61:72:ae:95:85:96:cd:9e:47:b0:7b:a8:cf:d9:81: fc:f0:91:5f:f2:c5:32:37:21:6a:b5:cd:be:65:54: 4e:51:ff:79:82:de:df:f6:48:d9:46:e5:14:5a:08: 9d:97:b6:7d:28:34:cc:7c:f2:7d:32:0a:21:9d:97: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:70:9F:2E:44:8F:E7:3E:D9:EE:26:84:A7:59:C7:D5:58:12:7E:B6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/inCfLkSP5z7Z7iaEp1nH1VgSfrY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.40.0/22 Signature Algorithm: sha256WithRSAEncryption 89:67:8a:2b:c0:37:03:fb:26:63:02:c5:ad:92:5d:90:9d:0a: 2e:93:29:90:ae:7d:0f:95:f3:12:ed:f6:e7:6a:e9:5f:f5:26: 98:5b:63:57:45:48:47:ab:65:59:ef:54:11:c8:76:a2:85:24: f9:94:a8:5d:c0:4e:c4:c0:7b:43:24:55:1c:81:71:2d:20:c9: d8:79:91:6e:2d:17:ae:f8:8d:21:22:70:ac:7c:4d:6f:85:b7: cd:67:4d:81:a9:b8:27:f4:d1:80:bf:ee:ca:f3:55:a7:c4:e0: 1b:92:b8:ef:2b:5a:ba:ea:e6:5d:8a:52:e7:31:5c:56:01:e6: 8e:9c:2b:66:03:0c:e6:d9:7c:3e:f4:f4:c8:0a:eb:06:03:d8: 0a:9b:dd:93:f8:21:69:b5:5e:c0:b5:05:51:83:1d:7e:50:26: ab:cf:1e:cb:4b:65:c4:ba:23:50:5b:00:da:37:ee:46:31:c3: ab:fa:c9:ab:58:1b:73:d4:dd:5d:48:b2:84:26:39:86:6f:b5: b5:3d:11:60:fe:14:8f:95:50:ff:1e:a6:f4:fd:16:2f:32:82: e2:0b:da:a3:c5:54:27:36:3d:5e:a6:e4:f8:d9:d3:fb:2c:83: c3:22:97:e8:9d:46:86:81:5d:14:6f:16:c9:7c:b0:35:96:8b: 05:af:ef:8c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MjVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhBNzA5RjJFNDQ4RkU3 M0VEOUVFMjY4NEE3NTlDN0Q1NTgxMjdFQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfu68hksyPvM36IuLaZ1JrGkSfYlcU8g8yJeSVrqgLtZG7aNeW LpVCLQwoN+Mquo/1pGvnF8GRv6ec29jVIjVYLr1l28yHRykGSIdsnLF05HD8o//2 B087XzWxUN0Y8bIb1ZIdFcYWCAp1Ji94DrsKO7sw9aJdwpBD70GBb/DhAfOQrjoM LZnSDXb1Fi+Xa2c1sZU928n1uVPLQ3hkUw1Okpcjzsy4mz8P5gD3HXPx8OvwMb+4 7vb2thnSoBBAp7PYGGFyrpWFls2eR7B7qM/ZgfzwkV/yxTI3IWq1zb5lVE5R/3mC 3t/2SNlG5RRaCJ2Xtn0oNMx88n0yCiGdl4tpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUinCfLkSP5z7Z7iaEp1nH1VgSfrYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2luQ2ZMa1NQNXo3WjdpYUVwMW5IMVZnU2ZyWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYCgwDQYJKoZIhvcNAQELBQADggEBAIlniivANwP7JmMCxa2SXZCdCi6T KZCufQ+V8xLt9udq6V/1JphbY1dFSEerZVnvVBHIdqKFJPmUqF3ATsTAe0MkVRyB cS0gydh5kW4tF674jSEicKx8TW+Ft81nTYGpuCf00YC/7srzVafE4BuSuO8rWrrq 5l2KUucxXFYB5o6cK2YDDObZfD709MgK6wYD2Aqb3ZP4IWm1XsC1BVGDHX5QJqvP HstLZcS6I1BbANo37kYxw6v6yatYG3PU3V1IsoQmOYZvtbU9EWD+FI+VUP8epvT9 Fi8yguIL2qPFVCc2PV6m5PjZ0/ssg8Mil+idRoaBXRRvFsl8sDWWiwWv74w= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:25 2025 by rpki-client