$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ydcV7VQPr9CgCvmxGiHmqzwwf-s.roa File: ydcV7VQPr9CgCvmxGiHmqzwwf-s.roa (raw, json) Hash identifier: PtG34rRc3eVyMxkf+Io/0YA9fZIhSFEGpZmyNEhaT3Y= Subject key identifier: C9:D7:15:ED:54:0F:AF:D0:A0:0A:F9:B1:1A:21:E6:AB:3C:30:7F:EB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B37 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ydcV7VQPr9CgCvmxGiHmqzwwf-s.roa Signing time: Fri 21 Feb 2025 04:15:19 +0000 ROA not before: Fri 21 Feb 2025 04:15:19 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 21 04:15:19 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=C9D715ED540FAFD0A00AF9B11A21E6AB3C307FEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:88:bf:d2:69:b7:47:00:19:e6:0b:01:a4: 5c:75:74:e8:a9:6b:7c:86:9a:76:58:43:eb:20:f5: ff:14:af:ef:98:14:b7:60:3a:1b:dc:17:ab:f4:43: cb:df:83:8a:ae:f4:2d:d4:5d:e9:38:09:4e:9b:80: c6:23:b5:12:cd:72:d8:0a:62:f1:c1:8d:bf:62:75: 42:e4:48:c7:81:84:71:d4:11:54:18:8e:d2:f3:6f: 15:ec:92:b9:29:42:75:e2:18:99:ad:b1:fb:d1:a2: 3e:16:d3:7e:3c:13:8c:ae:ab:78:9d:af:d8:43:2b: dc:2d:e5:cd:cd:98:7e:9d:9e:25:cd:fc:84:8e:a5: fb:69:f2:ec:9f:0f:14:53:90:c0:b9:90:27:38:c3: 4a:65:f4:48:9e:82:70:dc:94:bc:5a:29:ac:51:2b: ce:b8:01:ff:1e:c1:cf:d3:4a:f6:10:c2:a4:2c:89: 65:ec:4e:fe:52:88:0e:83:3d:53:47:a1:bf:a1:fb: ef:a7:25:a5:12:7d:81:8e:4f:1c:1f:14:42:b7:73: bb:f2:cf:f7:af:16:b3:69:a4:87:2f:92:0a:9e:56: a9:77:ee:99:2a:bd:96:34:27:6a:ce:ee:02:48:ca: 45:98:37:f6:ef:7a:6a:40:a7:14:f7:6d:24:5b:b1: 9c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D7:15:ED:54:0F:AF:D0:A0:0A:F9:B1:1A:21:E6:AB:3C:30:7F:EB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ydcV7VQPr9CgCvmxGiHmqzwwf-s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.147.0/24 Signature Algorithm: sha256WithRSAEncryption 09:b1:aa:4c:4f:67:5c:17:12:7a:cf:55:7d:07:99:db:fc:ba: 24:69:b6:66:29:3e:c5:bc:d3:2c:3c:e6:b0:43:93:3d:a1:61: 08:b1:9f:a8:2b:a4:36:b8:eb:34:c7:3a:e2:9b:bb:39:57:e1: 8d:02:a0:8f:6d:6d:e2:ee:41:90:4f:56:d5:67:33:d7:d3:ee: 8f:ad:19:82:d1:32:a8:a2:90:d4:99:72:a4:29:0f:b5:bb:d6: 1b:f1:d5:df:73:8d:5c:e8:ab:4e:49:01:6b:e5:88:c0:a9:c3: 51:27:d2:27:b1:37:6f:a9:0c:5b:76:73:71:db:41:bf:0c:8d: b8:4d:42:6e:d9:c7:8a:1b:c4:66:80:99:6d:00:6f:17:21:e4: 8a:76:84:6c:dd:04:76:05:5b:60:96:23:ba:4a:f1:83:3e:b3: d0:90:43:82:37:02:77:b5:79:19:21:5c:55:b6:44:a5:6a:a4: dc:c1:b4:38:c9:fb:dd:e5:d2:44:6d:02:48:e6:17:39:56:25: b1:7a:94:3f:75:b0:c5:fc:42:78:ff:64:58:23:d2:a6:27:a3: 7a:19:3a:2b:62:a5:65:8a:55:1c:5f:50:e7:2e:77:8b:f1:87: c1:d9:67:3a:84:dc:b3:b3:cf:cb:d1:70:62:28:12:31:3f:b4: 54:45:42:bf -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAyMjEw NDE1MTlaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM5RDcxNUVENTQwRkFG RDBBMDBBRjlCMTFBMjFFNkFCM0MzMDdGRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMhIi/0mm3RwAZ5gsBpFx1dOipa3yGmnZYQ+sg9f8Ur++YFLdg OhvcF6v0Q8vfg4qu9C3UXek4CU6bgMYjtRLNctgKYvHBjb9idULkSMeBhHHUEVQY jtLzbxXskrkpQnXiGJmtsfvRoj4W0348E4yuq3idr9hDK9wt5c3NmH6dniXN/ISO pftp8uyfDxRTkMC5kCc4w0pl9EiegnDclLxaKaxRK864Af8ewc/TSvYQwqQsiWXs Tv5SiA6DPVNHob+h+++nJaUSfYGOTxwfFEK3c7vyz/evFrNppIcvkgqeVql37pkq vZY0J2rO7gJIykWYN/bvempApxT3bSRbsZzLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUydcV7VQPr9CgCvmxGiHmqzwwf+swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3lkY1Y3VlFQcjlDZ0N2bXhHaUhtcXp3d2Ytcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYJMwDQYJKoZIhvcNAQELBQADggEBAAmxqkxPZ1wXEnrPVX0Hmdv8uiRp tmYpPsW80yw85rBDkz2hYQixn6grpDa46zTHOuKbuzlX4Y0CoI9tbeLuQZBPVtVn M9fT7o+tGYLRMqiikNSZcqQpD7W71hvx1d9zjVzoq05JAWvliMCpw1En0iexN2+p DFt2c3HbQb8MjbhNQm7Zx4obxGaAmW0Abxch5Ip2hGzdBHYFW2CWI7pK8YM+s9CQ Q4I3Ane1eRkhXFW2RKVqpNzBtDjJ+93l0kRtAkjmFzlWJbF6lD91sMX8Qnj/ZFgj 0qYno3oZOitipWWKVRxfUOcud4vxh8HZZzqE3LOzz8vRcGIoEjE/tFRFQr8= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:28 2025 by rpki-client