$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4w9dBNIArHHj3UZqz8EID-Tc13g.roa File: 4w9dBNIArHHj3UZqz8EID-Tc13g.roa (raw, json) Hash identifier: swWByZ3+8rp1aJqOssehCy3EwyswYCSQtt/WnRZVEBQ= Subject key identifier: E3:0F:5D:04:D2:00:AC:71:E3:DD:46:6A:CF:C1:08:0F:E4:DC:D7:78 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B7D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4w9dBNIArHHj3UZqz8EID-Tc13g.roa Signing time: Tue 01 Apr 2025 01:36:50 +0000 ROA not before: Tue 01 Apr 2025 01:36:50 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.103.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2941 (0xb7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:36:50 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E30F5D04D200AC71E3DD466ACFC1080FE4DCD778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:23:21:b9:cc:c7:a1:ee:94:18:81:e8:ef:eb: b8:9b:2b:0b:de:f6:be:8e:3b:47:f2:78:37:f1:80: f3:52:56:14:f3:d8:12:7f:a4:f5:d6:5c:d5:d8:68: b6:ab:aa:d5:79:cd:29:3c:8d:28:ca:07:5c:3e:06: 68:f3:12:9f:fb:2e:75:d6:60:84:54:55:45:c3:31: 4f:1e:5e:69:39:ef:3b:b2:25:25:a3:08:15:79:52: 6f:97:3f:05:1d:d5:5c:95:b0:bf:ec:20:b5:df:6c: 55:b2:82:64:6c:79:13:c3:35:97:88:00:e0:21:1a: 59:11:27:34:7b:8b:b8:4a:1a:18:fb:01:a6:d7:bf: 0d:3d:1d:56:91:62:3d:e8:50:91:a4:de:3a:50:5b: d9:2e:97:45:14:9a:0e:e1:54:95:56:e2:a2:b3:a3: d4:e6:34:85:dc:8b:07:05:34:90:dd:ed:fa:c4:dc: b0:f9:60:11:59:df:27:3f:18:32:f4:0f:42:63:f7: 7b:f0:84:69:d3:a2:31:f9:ae:e8:95:b7:69:a6:af: 41:32:7e:3d:74:94:c8:9b:03:6b:13:a8:a7:42:29: 0d:4a:91:83:1d:13:fa:4c:24:de:35:db:af:3c:d8: b8:19:b8:e3:34:db:2c:be:89:a1:cd:04:08:26:b1: 0d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0F:5D:04:D2:00:AC:71:E3:DD:46:6A:CF:C1:08:0F:E4:DC:D7:78 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4w9dBNIArHHj3UZqz8EID-Tc13g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.103.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4a:92:57:4c:94:18:fa:89:60:dd:d7:2d:0b:ff:90:09:81:93: a1:1d:42:97:4d:ff:7c:74:54:86:ca:61:52:c4:71:7a:0f:d6: 4d:e5:47:e4:6a:26:34:88:76:29:88:cf:d4:d4:bd:49:eb:12: d8:eb:98:6e:df:9c:f8:80:6b:99:7a:31:17:4a:5f:b4:34:74: ea:d5:a8:28:f2:23:3f:2f:e7:84:33:17:5f:43:a1:d7:33:37: 4c:7c:76:58:5d:0c:6f:9a:17:79:6d:3c:cd:2f:f7:53:b6:87: dd:ec:28:26:64:05:34:b7:e5:c6:c2:78:62:62:91:4a:fc:35: a3:05:82:98:ef:68:b0:d0:f5:df:be:a3:6d:8e:81:2e:31:bd: 06:aa:d5:d0:60:67:ba:6f:71:06:64:87:11:4c:14:22:55:15: 86:fd:43:a4:ea:43:79:ae:3d:35:ec:01:83:3f:72:a9:e9:32: 07:10:14:95:98:bd:0a:90:23:bb:65:7f:ba:e0:c3:54:77:77: 85:5d:12:e8:e5:36:ed:2f:7b:9d:53:42:d2:9c:60:f0:51:41: 42:a8:91:c1:b9:aa:35:b5:78:39:cd:87:bc:84:09:6f:63:f2: e0:3b:84:33:17:81:a2:85:76:14:4b:2c:48:6c:9c:19:9b:7f: e9:2d:36:80 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC30wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM2NTBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUzMEY1RDA0RDIwMEFD NzFFM0RENDY2QUNGQzEwODBGRTREQ0Q3NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0IyG5zMeh7pQYgejv67ibKwve9r6OO0fyeDfxgPNSVhTz2BJ/ pPXWXNXYaLarqtV5zSk8jSjKB1w+BmjzEp/7LnXWYIRUVUXDMU8eXmk57zuyJSWj CBV5Um+XPwUd1VyVsL/sILXfbFWygmRseRPDNZeIAOAhGlkRJzR7i7hKGhj7AabX vw09HVaRYj3oUJGk3jpQW9kul0UUmg7hVJVW4qKzo9TmNIXciwcFNJDd7frE3LD5 YBFZ3yc/GDL0D0Jj93vwhGnTojH5ruiVt2mmr0Eyfj10lMibA2sTqKdCKQ1KkYMd E/pMJN4126882LgZuOM02yy+iaHNBAgmsQ0RAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4w9dBNIArHHj3UZqz8EID+Tc13gwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzR3OWRCTklBckhIajNVWnF6OEVJRC1UYzEzZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcxZ4AwDQYJKoZIhvcNAQELBQADggEBAEqSV0yUGPqJYN3XLQv/kAmBk6Ed QpdN/3x0VIbKYVLEcXoP1k3lR+RqJjSIdimIz9TUvUnrEtjrmG7fnPiAa5l6MRdK X7Q0dOrVqCjyIz8v54QzF19DodczN0x8dlhdDG+aF3ltPM0v91O2h93sKCZkBTS3 5cbCeGJikUr8NaMFgpjvaLDQ9d++o22OgS4xvQaq1dBgZ7pvcQZkhxFMFCJVFYb9 Q6TqQ3muPTXsAYM/cqnpMgcQFJWYvQqQI7tlf7rgw1R3d4VdEujlNu0ve51TQtKc YPBRQUKokcG5qjW1eDnNh7yECW9j8uA7hDMXgaKFdhRLLEhsnBmbf+ktNoA= -----END CERTIFICATE-----Generated at Fri Oct 24 13:45:11 2025 by rpki-client