$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oyu_XwI4UyGacb9JFEGvMpimAoA.roa File: oyu_XwI4UyGacb9JFEGvMpimAoA.roa (raw, json) Hash identifier: xtKrymSa6wX9Fws+x2oVIURcpPZOUeq4kNdnrrjDSE8= Subject key identifier: A3:2B:BF:5F:02:38:53:21:9A:71:BF:49:14:41:AF:32:98:A6:02:80 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BAF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oyu_XwI4UyGacb9JFEGvMpimAoA.roa Signing time: Tue 01 Apr 2025 01:43:35 +0000 ROA not before: Tue 01 Apr 2025 01:43:35 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2991 (0xbaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:43:35 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=A32BBF5F023853219A71BF491441AF3298A60280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:b4:d5:8e:b5:54:06:cf:7d:31:01:81:a3: de:bd:d7:45:7d:4d:a4:90:c8:ae:f5:ac:62:da:ba: 53:24:48:0c:57:10:d6:a7:ca:78:8c:1d:4f:7e:a8: 50:e9:89:bc:4f:b4:42:4d:f6:a0:d0:5c:e0:4f:60: f7:50:aa:a0:43:50:6d:79:09:eb:6e:a8:0b:56:3f: 54:b6:58:56:fd:48:62:74:e6:e6:85:07:a3:4c:6b: bb:2b:c6:9d:c9:56:72:89:50:11:d0:89:39:77:4b: 67:26:60:74:f0:1a:e0:e1:04:79:2f:4c:6a:a1:2e: a4:60:89:87:ec:1b:8a:d3:28:46:5a:ff:d3:7a:5b: 94:c7:73:c6:39:6b:b2:dc:10:9f:ad:df:44:f7:9a: e7:64:d9:ab:81:92:e1:66:ae:47:89:00:1a:e9:43: 39:51:d2:4f:32:27:64:84:70:6d:94:6b:25:8a:66: 9c:ed:78:ce:97:2c:30:57:38:3b:d0:84:c8:a8:37: 84:3d:4a:69:1b:65:ea:3d:af:69:c6:3a:1c:ad:42: 01:26:ca:e6:4e:00:45:b8:af:9e:b3:c0:34:f6:54: ad:74:59:e5:e2:35:c2:52:ce:a6:ed:26:fd:f7:47: cb:29:0d:79:50:57:85:8d:43:6d:bd:5a:61:6f:ef: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2B:BF:5F:02:38:53:21:9A:71:BF:49:14:41:AF:32:98:A6:02:80 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oyu_XwI4UyGacb9JFEGvMpimAoA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.46.0/24 Signature Algorithm: sha256WithRSAEncryption da:d5:e1:14:8f:88:f4:82:df:e0:00:0d:c8:e5:7e:a3:0d:e0: 3b:b5:b4:45:3b:1e:34:d2:40:7d:b5:4f:64:fa:b2:dc:01:e5: 4b:f3:ad:10:2a:13:ef:b9:0b:4a:43:1d:78:fe:8e:01:59:6b: 21:51:ca:de:bf:04:18:7f:5e:9b:8a:1e:5d:bb:15:4b:46:a6: 3f:90:8a:c1:b7:19:fb:0f:85:7d:a6:66:a4:e7:e9:e5:c7:18: a6:2c:9d:8d:b5:ec:c6:92:95:4f:03:14:d3:48:6c:be:36:dc: be:8d:f5:4f:7f:d4:c8:74:aa:be:73:68:1e:40:54:2e:bb:af: 3a:b0:8f:cb:71:a7:fb:a9:3e:82:32:44:da:89:71:39:5f:11: b6:b2:2f:e6:21:82:c9:6d:0a:db:7b:cf:8c:ef:f0:a8:c0:13: 04:c5:c2:f1:78:83:b8:7d:a0:57:8d:4e:79:4f:b7:15:a1:a7: 61:e9:52:eb:b8:54:e8:46:6f:1e:70:e4:07:b8:0b:4c:80:6f: 94:30:cb:10:71:e4:2b:75:aa:a0:02:11:d3:c2:44:7d:2f:9e: 22:b9:3c:6b:12:31:33:7a:2d:b3:00:5e:06:6a:dd:dd:85:b8: 30:2b:9c:60:d5:a1:1f:62:c5:58:79:d7:8a:f9:94:93:73:23: a4:0e:32:4f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC68wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQzMzVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEEzMkJCRjVGMDIzODUz MjE5QTcxQkY0OTE0NDFBRjMyOThBNjAyODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx2bTVjrVUBs99MQGBo96910V9TaSQyK71rGLaulMkSAxXENan yniMHU9+qFDpibxPtEJN9qDQXOBPYPdQqqBDUG15CetuqAtWP1S2WFb9SGJ05uaF B6NMa7srxp3JVnKJUBHQiTl3S2cmYHTwGuDhBHkvTGqhLqRgiYfsG4rTKEZa/9N6 W5THc8Y5a7LcEJ+t30T3mudk2auBkuFmrkeJABrpQzlR0k8yJ2SEcG2UayWKZpzt eM6XLDBXODvQhMioN4Q9SmkbZeo9r2nGOhytQgEmyuZOAEW4r56zwDT2VK10WeXi NcJSzqbtJv33R8spDXlQV4WNQ229WmFv71OZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoyu/XwI4UyGacb9JFEGvMpimAoAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L295dV9Yd0k0VXlHYWNiOUpGRUd2TXBpbUFvQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYS4wDQYJKoZIhvcNAQELBQADggEBANrV4RSPiPSC3+AADcjlfqMN4Du1 tEU7HjTSQH21T2T6stwB5UvzrRAqE++5C0pDHXj+jgFZayFRyt6/BBh/XpuKHl27 FUtGpj+QisG3GfsPhX2mZqTn6eXHGKYsnY217MaSlU8DFNNIbL423L6N9U9/1Mh0 qr5zaB5AVC67rzqwj8txp/upPoIyRNqJcTlfEbayL+YhgsltCtt7z4zv8KjAEwTF wvF4g7h9oFeNTnlPtxWhp2HpUuu4VOhGbx5w5Ae4C0yAb5QwyxBx5Ct1qqACEdPC RH0vniK5PGsSMTN6LbMAXgZq3d2FuDArnGDVoR9ixVh514r5lJNzI6QOMk8= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:13 2025 by rpki-client