$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mLo5cPyZLHmuOFIN5Ad9GcN6opI.roa File: mLo5cPyZLHmuOFIN5Ad9GcN6opI.roa (raw, json) Hash identifier: S6yoSZXAo9m8OqCeUBp0z/uJXz+VcKvEl+YcSUU2bdA= Subject key identifier: 98:BA:39:70:FC:99:2C:79:AE:38:52:0D:E4:07:7D:19:C3:7A:A2:92 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DCE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mLo5cPyZLHmuOFIN5Ad9GcN6opI.roa Signing time: Tue 01 Apr 2025 02:27:20 +0000 ROA not before: Tue 01 Apr 2025 02:27:20 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3534 (0xdce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:20 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=98BA3970FC992C79AE38520DE4077D19C37AA292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d9:b3:37:a9:c8:ec:af:35:05:e8:42:09:9a: ef:00:0b:d6:71:28:26:c6:80:9c:5b:69:ab:6a:f1: 8e:27:41:6d:00:51:67:af:af:65:99:3f:58:73:21: b0:a4:a5:3d:4c:a4:8e:f6:59:85:64:30:20:ba:dd: 50:b5:19:15:8e:f8:41:85:fb:76:c0:d5:f7:ac:8a: dd:6b:43:7e:4c:dc:1c:a9:2a:75:aa:dd:bc:32:1d: 0c:21:11:ea:5f:8a:16:fb:b9:56:61:8d:22:55:5f: 45:7e:d2:ac:f7:81:b6:de:39:d7:f8:be:fa:6b:59: 47:2b:e6:17:60:5b:5e:eb:a4:8c:1f:83:2b:83:f1: 82:b7:70:10:5e:02:32:46:64:b3:36:28:6e:4f:69: 66:a4:6c:88:51:fb:73:15:4f:e9:d2:e4:78:70:5a: 99:39:c8:ad:4f:58:57:b7:19:8a:bc:7e:1f:7c:84: 02:75:53:88:ff:5b:82:a5:9f:50:c1:57:36:d6:22: 0c:2a:a7:24:e5:71:6c:07:a4:f1:b3:13:2e:1a:c3: 67:a6:92:e6:c8:9d:e1:cc:dc:f5:4b:ef:79:61:d7: 19:cf:a6:eb:d7:1e:db:9e:3f:d0:ab:b3:37:18:77: 78:aa:2a:f2:df:7a:c6:f0:29:5f:97:35:24:a2:ba: 58:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BA:39:70:FC:99:2C:79:AE:38:52:0D:E4:07:7D:19:C3:7A:A2:92 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mLo5cPyZLHmuOFIN5Ad9GcN6opI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.252.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:4f:d8:6f:54:8b:0c:4d:f1:fc:37:88:e7:ba:40:c9:0b:0b: f0:35:62:3e:dd:7f:64:3f:24:28:1d:86:be:f8:dc:4b:4d:53: 58:1c:e0:af:47:4e:c3:b3:5e:44:7d:6f:e8:ef:a6:46:df:f1: d0:a2:1a:39:5d:40:38:3c:0e:63:5f:ae:ee:e1:da:48:58:ea: a8:e0:56:ad:d9:7d:1c:37:62:71:be:3c:43:06:13:9e:ef:1c: c9:0f:f8:3e:38:67:a9:1b:4f:eb:df:58:98:ea:42:46:8a:25: 44:c9:58:97:47:b7:6c:47:c2:45:da:6c:d5:0d:e4:76:60:db: aa:ec:09:60:d9:32:2c:ae:25:f4:04:d3:c1:5a:45:ba:31:f5: a3:4d:9f:c1:93:01:df:74:fe:40:cd:25:ec:26:dc:3d:8d:43: 7a:e4:40:70:dd:34:87:97:e2:b3:59:a5:69:b2:49:f3:ff:b0: 84:71:cb:05:3a:89:c5:da:14:93:b4:e6:03:65:19:bc:68:3e: 6b:06:31:7d:01:3b:33:4b:4f:85:6f:52:a0:6b:f2:39:b8:fc: 6f:ed:95:32:06:82:1c:1a:3e:b4:50:e4:c5:77:9e:73:24:28: e6:fa:fd:dd:6f:9a:ad:2e:89:bf:69:f1:c0:4e:4c:ba:cb:50: 3f:73:02:fd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MjBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk4QkEzOTcwRkM5OTJD NzlBRTM4NTIwREU0MDc3RDE5QzM3QUEyOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL2bM3qcjsrzUF6EIJmu8AC9ZxKCbGgJxbaatq8Y4nQW0AUWev r2WZP1hzIbCkpT1MpI72WYVkMCC63VC1GRWO+EGF+3bA1fesit1rQ35M3BypKnWq 3bwyHQwhEepfihb7uVZhjSJVX0V+0qz3gbbeOdf4vvprWUcr5hdgW17rpIwfgyuD 8YK3cBBeAjJGZLM2KG5PaWakbIhR+3MVT+nS5HhwWpk5yK1PWFe3GYq8fh98hAJ1 U4j/W4Kln1DBVzbWIgwqpyTlcWwHpPGzEy4aw2emkubIneHM3PVL73lh1xnPpuvX HtueP9CrszcYd3iqKvLfesbwKV+XNSSiuljzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmLo5cPyZLHmuOFIN5Ad9GcN6opIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L21MbzVjUHlaTEhtdU9GSU41QWQ5R2NONm9wSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaPwwDQYJKoZIhvcNAQELBQADggEBADpP2G9UiwxN8fw3iOe6QMkLC/A1 Yj7df2Q/JCgdhr743EtNU1gc4K9HTsOzXkR9b+jvpkbf8dCiGjldQDg8DmNfru7h 2khY6qjgVq3ZfRw3YnG+PEMGE57vHMkP+D44Z6kbT+vfWJjqQkaKJUTJWJdHt2xH wkXabNUN5HZg26rsCWDZMiyuJfQE08FaRbox9aNNn8GTAd90/kDNJewm3D2NQ3rk QHDdNIeX4rNZpWmySfP/sIRxywU6icXaFJO05gNlGbxoPmsGMX0BOzNLT4VvUqBr 8jm4/G/tlTIGghwaPrRQ5MV3nnMkKOb6/d1vmq0uib9p8cBOTLrLUD9zAv0= -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:37 2025 by rpki-client