$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7KHeO6tIr8HL195uy9PLTsSeHnQ.roa File: 7KHeO6tIr8HL195uy9PLTsSeHnQ.roa (raw, json) Hash identifier: 5KtXtnXYpacX/SEhJaTO5HdXFeL6XQ0RQ3eBmzF0SxQ= Subject key identifier: EC:A1:DE:3B:AB:48:AF:C1:CB:D7:DE:6E:CB:D3:CB:4E:C4:9E:1E:74 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F9B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7KHeO6tIr8HL195uy9PLTsSeHnQ.roa Signing time: Tue 10 Jun 2025 11:40:29 +0000 ROA not before: Tue 10 Jun 2025 11:40:29 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.106.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3995 (0xf9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:40:29 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=ECA1DE3BAB48AFC1CBD7DE6ECBD3CB4EC49E1E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1c:01:22:20:cc:d8:65:f0:8a:71:20:f2:e4: 6a:64:86:68:5a:35:33:5f:aa:df:22:c1:e6:66:57: 6f:e5:d6:9a:88:a9:c3:05:4f:c1:4d:6b:fe:4a:d2: 1c:eb:2d:08:82:d5:1f:1f:49:47:95:3b:8a:9c:25: 09:36:3e:83:f2:97:b6:ee:8c:65:36:76:fd:51:34: b9:e1:ee:24:68:b8:7a:ae:ad:bd:1e:0e:57:b0:26: b6:ad:ec:b0:0e:dd:90:51:7f:8b:59:c5:8d:ed:30: ad:89:f3:7f:df:9c:3b:70:9b:e5:7d:90:ee:5a:10: d2:11:f1:62:58:58:fc:b3:f8:7f:d9:00:7d:ec:5b: 46:e3:71:0e:17:a8:cb:92:46:92:86:c0:21:0c:94: 81:35:81:20:48:5a:c6:93:3a:3a:20:6d:ea:f4:e5: e3:d5:93:44:c6:d3:54:11:74:64:f6:51:ee:84:c1: f4:ab:16:a8:a6:13:60:cf:12:da:55:98:5f:a4:fb: 07:d4:9a:03:30:a0:82:c0:af:b3:45:11:f4:2c:8a: 50:76:44:bc:cf:80:86:b5:e2:13:c9:ae:f1:39:50: ee:32:c5:7b:7d:62:5a:fa:ca:28:6e:34:0e:c3:7e: 28:1b:67:38:84:a9:4f:38:96:cd:92:37:31:be:21: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A1:DE:3B:AB:48:AF:C1:CB:D7:DE:6E:CB:D3:CB:4E:C4:9E:1E:74 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7KHeO6tIr8HL195uy9PLTsSeHnQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.238.0/23 Signature Algorithm: sha256WithRSAEncryption b4:4f:73:bd:55:27:40:85:ae:45:32:39:1e:ca:4f:4f:e2:72: 0a:dd:90:7e:c0:2e:d0:5d:96:0e:d1:20:40:ea:55:5f:04:55: d3:fb:fd:29:4d:b6:f8:0a:b3:73:85:f4:9c:5f:ae:6e:20:dc: 63:e5:20:f4:5c:16:26:b9:49:9e:60:7e:49:dd:2e:99:e6:ff: c9:7c:6d:ec:4f:1e:82:7b:bb:17:a9:ab:f5:c0:a8:b7:b9:84: e3:bb:1b:83:da:65:ce:23:1c:b1:10:aa:c6:13:74:2c:58:b2: 1e:ef:3a:de:c0:26:46:a6:5b:29:85:6a:39:1e:61:a0:12:74: 80:9f:f8:05:62:18:76:66:a3:50:7e:1a:31:15:98:1c:2d:ce: 0f:b4:12:94:7a:f2:5b:90:3e:60:d4:fc:34:4b:7d:0b:cf:aa: 32:a5:68:51:f8:d9:0a:46:c0:a2:bf:18:19:45:71:0e:3b:b5: 8e:56:08:a7:be:30:66:dd:4d:a5:5f:5a:0d:48:6c:e7:c4:9b: e0:66:8e:c0:44:ce:d7:5c:6d:b1:0a:6a:05:9e:e8:25:f7:73: 73:09:a0:d8:d7:20:d3:9e:1f:f5:73:77:75:2b:2c:2a:6a:7b: f4:b0:b4:29:91:12:f6:16:43:8f:50:e3:99:6d:82:d3:43:e8: 6f:1a:24:b2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQwMjlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEVDQTFERTNCQUI0OEFG QzFDQkQ3REU2RUNCRDNDQjRFQzQ5RTFFNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3HAEiIMzYZfCKcSDy5GpkhmhaNTNfqt8iweZmV2/l1pqIqcMF T8FNa/5K0hzrLQiC1R8fSUeVO4qcJQk2PoPyl7bujGU2dv1RNLnh7iRouHqurb0e DlewJrat7LAO3ZBRf4tZxY3tMK2J83/fnDtwm+V9kO5aENIR8WJYWPyz+H/ZAH3s W0bjcQ4XqMuSRpKGwCEMlIE1gSBIWsaTOjogber05ePVk0TG01QRdGT2Ue6EwfSr FqimE2DPEtpVmF+k+wfUmgMwoILAr7NFEfQsilB2RLzPgIa14hPJrvE5UO4yxXt9 Ylr6yihuNA7DfigbZziEqU84ls2SNzG+IYxLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7KHeO6tIr8HL195uy9PLTsSeHnQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzdLSGVPNnRJcjhITDE5NXV5OVBMVHNTZUhuUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExau4wDQYJKoZIhvcNAQELBQADggEBALRPc71VJ0CFrkUyOR7KT0/icgrd kH7ALtBdlg7RIEDqVV8EVdP7/SlNtvgKs3OF9Jxfrm4g3GPlIPRcFia5SZ5gfknd Lpnm/8l8bexPHoJ7uxepq/XAqLe5hOO7G4PaZc4jHLEQqsYTdCxYsh7vOt7AJkam WymFajkeYaASdICf+AViGHZmo1B+GjEVmBwtzg+0EpR68luQPmDU/DRLfQvPqjKl aFH42QpGwKK/GBlFcQ47tY5WCKe+MGbdTaVfWg1IbOfEm+BmjsBEztdcbbEKagWe 6CX3c3MJoNjXINOeH/Vzd3UrLCpqe/SwtCmREvYWQ49Q45ltgtND6G8aJLI= -----END CERTIFICATE-----Generated at Fri Oct 24 13:42:05 2025 by rpki-client