$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n-ULlyPv8pyLZ-BkynyUNopsjEM.roa File: n-ULlyPv8pyLZ-BkynyUNopsjEM.roa (raw, json) Hash identifier: uHb9Uu9uNvk3VbcPgl1NU5vDOopzc1YbAJywBi2smr4= Subject key identifier: 9F:E5:0B:97:23:EF:F2:9C:8B:67:E0:64:CA:7C:94:36:8A:6C:8C:43 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D6E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n-ULlyPv8pyLZ-BkynyUNopsjEM.roa Signing time: Tue 01 Apr 2025 02:19:22 +0000 ROA not before: Tue 01 Apr 2025 02:19:22 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3438 (0xd6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:22 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=9FE50B9723EFF29C8B67E064CA7C94368A6C8C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:ec:76:d3:e2:d0:1a:bc:21:e8:7f:2f:36: a3:aa:7d:bd:30:e6:89:4f:09:f6:8c:8b:d8:b0:63: 7e:90:fb:5f:99:99:fc:67:8e:59:4d:e9:0a:32:b0: 52:d1:ce:07:c0:a5:43:f1:b4:b2:f6:84:32:fc:34: dc:f0:5f:83:1d:a7:ad:fe:bd:7e:36:8a:9c:2f:34: 93:13:5f:24:d9:58:e3:ca:5e:51:e5:22:20:86:05: f6:db:1d:b3:3b:cb:24:5e:00:41:c3:e5:c7:41:89: 67:fa:bb:5d:91:2c:8d:1a:ab:90:11:a4:a6:43:e6: 56:92:8d:f0:28:91:9c:9d:d2:5f:ab:e2:99:a0:98: e2:7d:14:87:e5:12:36:d6:89:42:24:14:8f:80:bf: bb:06:0a:03:d6:6d:6d:f9:fe:9b:6c:fa:f6:1d:7b: 39:e9:8b:b0:c8:9f:83:7c:6b:63:d9:84:9d:68:a9: b9:f7:ca:7d:8c:9e:7b:df:d5:9d:20:ef:13:f3:d2: fe:38:57:f0:c6:40:04:35:8c:10:23:70:2b:03:4e: 74:7c:83:2a:4a:52:c1:c9:26:b6:d8:c1:df:d3:84: 2d:fa:02:ba:47:39:85:89:8c:c0:11:f1:20:5a:d5: 12:36:ef:84:84:a4:e1:37:08:3f:0b:b1:55:8d:a9: ea:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E5:0B:97:23:EF:F2:9C:8B:67:E0:64:CA:7C:94:36:8A:6C:8C:43 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n-ULlyPv8pyLZ-BkynyUNopsjEM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.142.0/23 Signature Algorithm: sha256WithRSAEncryption e0:ec:56:57:37:bd:80:56:c1:c8:aa:a3:3e:c4:af:a4:2e:22: 2e:38:aa:44:8d:69:a5:e0:5c:27:68:ae:a7:9a:8a:ed:cf:82: 94:1d:19:a9:e2:1e:d7:e3:d2:1f:61:74:20:ae:85:91:79:3e: 92:e9:9b:68:bf:11:10:b2:d6:8f:f3:5d:f9:18:fa:4c:c6:ae: 75:0b:10:de:6f:68:c0:d0:66:2f:b6:99:1f:9e:a8:95:94:43: 7d:e2:5e:30:58:0a:47:21:21:c2:78:13:45:73:a9:a5:e6:d2: e3:2c:c1:61:45:6c:37:9d:2c:31:eb:9c:80:a2:33:18:6e:be: 7f:2f:a7:e2:27:53:ac:7a:59:96:32:30:b9:84:45:84:47:41: 6e:83:7d:88:d3:fb:77:a1:5b:45:84:ab:42:56:f0:8b:4c:4a: 44:18:da:72:ac:f8:3b:2b:4a:03:54:c0:a0:3e:29:90:fe:ce: c4:37:19:39:e5:79:86:f5:1a:dd:b6:15:c2:18:68:88:b3:04: 80:a8:16:36:4b:5b:b0:89:7a:94:fc:2e:e5:6b:f0:c3:9f:bc: 57:99:1b:33:36:59:12:a8:b4:ec:9b:c8:bd:d1:a3:0b:b5:65: b7:dd:71:02:91:8d:59:f1:ab:38:b9:4a:85:66:ea:aa:41:06: 95:22:6d:3d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MjJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlGRTUwQjk3MjNFRkYy OUM4QjY3RTA2NENBN0M5NDM2OEE2QzhDNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7OOx20+LQGrwh6H8vNqOqfb0w5olPCfaMi9iwY36Q+1+Zmfxn jllN6QoysFLRzgfApUPxtLL2hDL8NNzwX4Mdp63+vX42ipwvNJMTXyTZWOPKXlHl IiCGBfbbHbM7yyReAEHD5cdBiWf6u12RLI0aq5ARpKZD5laSjfAokZyd0l+r4pmg mOJ9FIflEjbWiUIkFI+Av7sGCgPWbW35/pts+vYdeznpi7DIn4N8a2PZhJ1oqbn3 yn2Mnnvf1Z0g7xPz0v44V/DGQAQ1jBAjcCsDTnR8gypKUsHJJrbYwd/ThC36ArpH OYWJjMAR8SBa1RI274SEpOE3CD8LsVWNqerpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUn+ULlyPv8pyLZ+BkynyUNopsjEMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L24tVUxseVB2OHB5TFotQmt5bnlVTm9wc2pFTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYo4wDQYJKoZIhvcNAQELBQADggEBAODsVlc3vYBWwciqoz7Er6QuIi44 qkSNaaXgXCdorqeaiu3PgpQdGaniHtfj0h9hdCCuhZF5PpLpm2i/ERCy1o/zXfkY +kzGrnULEN5vaMDQZi+2mR+eqJWUQ33iXjBYCkchIcJ4E0VzqaXm0uMswWFFbDed LDHrnICiMxhuvn8vp+InU6x6WZYyMLmERYRHQW6DfYjT+3ehW0WEq0JW8ItMSkQY 2nKs+DsrSgNUwKA+KZD+zsQ3GTnleYb1Gt22FcIYaIizBICoFjZLW7CJepT8LuVr 8MOfvFeZGzM2WRKotOybyL3Rowu1ZbfdcQKRjVnxqzi5SoVm6qpBBpUibT0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:35 2025 by rpki-client