$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xTITtmWTz9SDcjPWrRXSXirzcnI.roa File: xTITtmWTz9SDcjPWrRXSXirzcnI.roa (raw, json) Hash identifier: Qqb59Kd4B7yzpxsCJKTfJ8IOM2nqvZEHOvns6u75VxU= Subject key identifier: C5:32:13:B6:65:93:CF:D4:83:72:33:D6:AD:15:D2:5E:2A:F3:72:72 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FB1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xTITtmWTz9SDcjPWrRXSXirzcnI.roa Signing time: Tue 10 Jun 2025 11:44:10 +0000 ROA not before: Tue 10 Jun 2025 11:44:10 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.103.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4017 (0xfb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:44:10 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=C53213B66593CFD4837233D6AD15D25E2AF37272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:ae:23:17:1f:c7:9b:69:72:ae:a1:78:a4: 56:96:40:1a:aa:d3:61:18:9b:ab:8e:ed:7a:3a:07: 56:1f:2a:42:c4:cb:52:28:f1:e1:78:59:f5:5a:a9: e5:31:09:00:3b:b7:5a:78:48:d1:c9:5d:25:fb:58: 06:69:00:12:21:fc:77:3c:d3:e3:bb:f0:a5:54:01: 8a:a6:6e:02:c5:bb:b6:c3:4d:ea:a8:13:0f:c1:18: d1:76:8b:67:cd:59:c5:ef:e8:94:5f:3b:da:11:6c: 57:af:5e:f4:8f:76:23:27:18:ae:4e:51:00:cb:a5: 27:d3:71:5a:b1:e1:2c:b6:06:e9:7a:f8:b5:a1:bd: c7:42:a6:85:a4:dd:cd:bc:e9:a2:b1:6d:6f:9a:ac: 7b:45:c1:48:de:b8:a1:fb:22:dc:2e:b8:ab:23:a5: 30:24:d9:2f:8b:b4:47:a3:c5:21:97:c5:94:7c:f0: 9f:f1:da:24:e9:6e:e9:0e:db:78:e1:66:f5:7d:59: 37:e9:b4:f8:86:4c:c5:39:5d:6d:a6:a9:67:4d:fb: 40:b3:4a:ca:45:5f:74:29:77:56:9f:91:28:fd:80: dd:71:91:8d:f7:65:e3:55:4c:f9:76:6f:1e:f6:dc: db:21:7a:f8:cf:ad:ba:27:f1:8a:f0:5f:b3:7d:af: 04:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:32:13:B6:65:93:CF:D4:83:72:33:D6:AD:15:D2:5E:2A:F3:72:72 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xTITtmWTz9SDcjPWrRXSXirzcnI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.103.16.0/24 Signature Algorithm: sha256WithRSAEncryption a1:b3:f4:b9:c9:ad:cd:a9:2b:c9:75:7d:be:c8:44:c4:84:d5: 54:43:47:b1:31:8f:c5:ce:13:0e:3e:a9:c0:fd:a3:5f:0b:40: a8:0a:0f:90:0f:bb:7c:46:97:e3:76:27:93:35:da:2b:a0:33: c7:1c:a9:26:1b:1a:d6:7c:c7:5f:3c:84:61:db:97:7f:4c:03: 60:e9:c9:a9:47:67:72:d8:ac:22:60:50:cc:92:5e:cc:09:2a: 5d:60:d9:b4:b7:c9:98:02:4f:6a:64:21:2a:c3:02:2d:2a:98: a6:6e:1e:5c:f6:d4:b0:08:d6:f7:81:21:83:17:fd:d7:d7:51: ae:60:7c:18:f9:14:e7:5a:be:fa:70:af:4d:93:19:8d:5a:9a: 27:20:9a:0d:04:fd:da:cb:27:69:5e:25:33:a2:76:1b:26:a4: e4:97:6e:ef:20:8a:80:fa:53:3f:e6:13:bd:fe:b7:fc:de:2b: 6b:f2:fe:45:38:f9:8d:fd:fb:52:de:46:63:f1:4f:77:b7:3d: 79:6f:84:e1:70:0a:27:85:78:e9:4f:ea:24:1a:24:77:e5:83: cf:6d:d3:e7:ab:bc:2b:2b:b9:2d:3e:c9:ff:eb:89:26:12:f7: 5a:6b:cb:54:72:43:52:b1:78:8e:20:57:b9:6f:5c:f9:02:c0: ba:28:ea:92 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD7EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQ0MTBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEM1MzIxM0I2NjU5M0NG RDQ4MzcyMzNENkFEMTVEMjVFMkFGMzcyNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCurq4jFx/Hm2lyrqF4pFaWQBqq02EYm6uO7Xo6B1YfKkLEy1Io 8eF4WfVaqeUxCQA7t1p4SNHJXSX7WAZpABIh/Hc80+O78KVUAYqmbgLFu7bDTeqo Ew/BGNF2i2fNWcXv6JRfO9oRbFevXvSPdiMnGK5OUQDLpSfTcVqx4Sy2Bul6+LWh vcdCpoWk3c286aKxbW+arHtFwUjeuKH7ItwuuKsjpTAk2S+LtEejxSGXxZR88J/x 2iTpbukO23jhZvV9WTfptPiGTMU5XW2mqWdN+0CzSspFX3Qpd1afkSj9gN1xkY33 ZeNVTPl2bx723NshevjPrbon8YrwX7N9rwQtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxTITtmWTz9SDcjPWrRXSXirzcnIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3hUSVR0bVdUejlTRGNqUFdyUlhTWGlyemNuSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxZxAwDQYJKoZIhvcNAQELBQADggEBAKGz9LnJrc2pK8l1fb7IRMSE1VRD R7Exj8XOEw4+qcD9o18LQKgKD5APu3xGl+N2J5M12iugM8ccqSYbGtZ8x188hGHb l39MA2DpyalHZ3LYrCJgUMySXswJKl1g2bS3yZgCT2pkISrDAi0qmKZuHlz21LAI 1veBIYMX/dfXUa5gfBj5FOdavvpwr02TGY1amicgmg0E/drLJ2leJTOidhsmpOSX bu8gioD6Uz/mE73+t/zeK2vy/kU4+Y39+1LeRmPxT3e3PXlvhOFwCieFeOlP6iQa JHflg89t0+ervCsruS0+yf/riSYS91pry1RyQ1KxeI4gV7lvXPkCwLoo6pI= -----END CERTIFICATE-----Generated at Wed Nov 5 20:16:18 2025 by rpki-client