$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jxGme1X_MyJqqgsudQvdIB5F5nU.roa File: jxGme1X_MyJqqgsudQvdIB5F5nU.roa (raw, json) Hash identifier: g5Mz9IzE5nx7WbdoY2d2Bn6J48bKb99lJBDgjhsZigU= Subject key identifier: 8F:11:A6:7B:55:FF:33:22:6A:AA:0B:2E:75:0B:DD:20:1E:45:E6:75 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D06 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jxGme1X_MyJqqgsudQvdIB5F5nU.roa Signing time: Tue 01 Apr 2025 02:11:39 +0000 ROA not before: Tue 01 Apr 2025 02:11:39 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3334 (0xd06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:39 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=8F11A67B55FF33226AAA0B2E750BDD201E45E675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2e:48:93:55:f4:65:2f:fb:2b:ac:5e:c8:33: 0c:3c:3a:fa:cc:9a:60:7b:19:b4:94:3e:5a:f8:79: 64:ef:11:a8:02:f9:cb:88:8d:77:23:36:9a:04:ac: 97:e5:f5:7c:04:d2:7b:15:c3:81:7d:42:44:7c:fe: fd:cd:ad:15:aa:58:ba:96:22:d4:f6:e3:b8:15:a2: 8b:cb:6e:4c:7c:97:f7:1e:52:47:98:8f:cf:4b:3f: 39:6d:0e:72:a1:96:9d:3f:4d:22:44:15:8f:51:ed: fc:d5:3a:25:c4:85:ba:ba:c1:cd:08:16:64:ce:aa: 2a:34:2e:43:25:50:22:cc:be:e4:b9:9d:b0:f8:29: 8b:b3:5f:a4:d3:d2:06:ef:de:65:aa:6b:40:64:fb: 55:7b:4e:c9:d9:b6:ad:83:bf:92:02:53:2a:19:6a: 44:17:6f:b6:58:39:59:a4:87:b7:93:97:b1:00:67: 96:a1:70:f6:f8:e4:fb:ef:88:ba:ed:32:2a:96:0f: b7:b1:55:90:c6:e1:5f:fd:3d:44:31:f8:c8:b8:cc: 0b:54:58:ac:1c:2e:52:7f:fe:d7:53:65:0d:53:a6: 6f:d8:16:b2:51:b4:f4:8b:b1:98:c8:12:97:fb:44: cf:1c:60:89:51:1c:ba:1b:3f:4b:4c:1b:81:fb:12: 1d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:11:A6:7B:55:FF:33:22:6A:AA:0B:2E:75:0B:DD:20:1E:45:E6:75 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jxGme1X_MyJqqgsudQvdIB5F5nU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.42.0/23 Signature Algorithm: sha256WithRSAEncryption 28:3d:d1:0b:a7:8e:3a:17:79:a9:29:5d:13:39:da:d7:ce:0f: 04:f3:83:60:87:66:69:8c:65:c8:de:39:d5:35:ef:14:76:29: a4:4d:d3:10:f4:3e:cd:9e:71:dd:7b:27:a9:2f:d4:b3:01:98: b7:04:01:63:82:31:d7:0b:50:e0:96:16:5e:fe:34:86:0d:69: c3:11:a4:96:9f:67:c5:fb:e0:3a:e7:24:c2:a3:0c:24:3b:50: e2:0c:4d:72:b6:44:f9:16:9a:51:93:9d:d9:c4:e2:96:75:3c: 16:50:e5:ce:37:d5:0e:f8:5d:0b:5d:82:31:56:5f:e6:6e:d0: b3:40:bf:50:d4:b1:f4:65:c4:de:3f:40:d8:db:7a:51:07:1f: 41:8c:03:b3:b8:2c:86:73:26:75:54:65:99:f7:15:57:02:e4: f3:5b:37:c1:cc:78:9f:40:ad:9b:5e:e1:36:29:0f:ed:6f:34: 82:c7:21:69:d8:0d:05:dd:d3:74:26:77:01:78:19:cd:48:1b: a5:df:0d:68:88:fb:0c:57:69:dc:b1:82:7c:d3:d8:11:8f:96: f9:47:a3:ad:76:0c:94:83:19:29:0b:54:59:df:8a:c9:ba:22: e4:93:89:2d:ac:e9:c1:9f:2c:33:20:5a:cb:cd:fd:00:6e:75: 67:3d:58:9b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExMzlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhGMTFBNjdCNTVGRjMz MjI2QUFBMEIyRTc1MEJERDIwMUU0NUU2NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnLkiTVfRlL/srrF7IMww8OvrMmmB7GbSUPlr4eWTvEagC+cuI jXcjNpoErJfl9XwE0nsVw4F9QkR8/v3NrRWqWLqWItT247gVoovLbkx8l/ceUkeY j89LPzltDnKhlp0/TSJEFY9R7fzVOiXEhbq6wc0IFmTOqio0LkMlUCLMvuS5nbD4 KYuzX6TT0gbv3mWqa0Bk+1V7TsnZtq2Dv5ICUyoZakQXb7ZYOVmkh7eTl7EAZ5ah cPb45PvviLrtMiqWD7exVZDG4V/9PUQx+Mi4zAtUWKwcLlJ//tdTZQ1Tpm/YFrJR tPSLsZjIEpf7RM8cYIlRHLobP0tMG4H7Eh3jAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjxGme1X/MyJqqgsudQvdIB5F5nUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2p4R21lMVhfTXlKcXFnc3VkUXZkSUI1RjVuVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYiowDQYJKoZIhvcNAQELBQADggEBACg90QunjjoXeakpXRM52tfODwTz g2CHZmmMZcjeOdU17xR2KaRN0xD0Ps2ecd17J6kv1LMBmLcEAWOCMdcLUOCWFl7+ NIYNacMRpJafZ8X74DrnJMKjDCQ7UOIMTXK2RPkWmlGTndnE4pZ1PBZQ5c431Q74 XQtdgjFWX+Zu0LNAv1DUsfRlxN4/QNjbelEHH0GMA7O4LIZzJnVUZZn3FVcC5PNb N8HMeJ9ArZte4TYpD+1vNILHIWnYDQXd03QmdwF4Gc1IG6XfDWiI+wxXadyxgnzT 2BGPlvlHo612DJSDGSkLVFnfism6IuSTiS2s6cGfLDMgWsvN/QBudWc9WJs= -----END CERTIFICATE-----Generated at Wed Nov 5 17:24:41 2025 by rpki-client