$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9pH_dmt3o_cZz5PL_Uyf33S9cjw.roa File: 9pH_dmt3o_cZz5PL_Uyf33S9cjw.roa (raw, json) Hash identifier: POKv0X7KUb3MsjXgmVtnNx+h5MFt7tnAaRf+v+/t8lk= Subject key identifier: F6:91:FF:76:6B:77:A3:F7:19:CF:93:CB:FD:4C:9F:DF:74:BD:72:3C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FD4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9pH_dmt3o_cZz5PL_Uyf33S9cjw.roa Signing time: Wed 03 Sep 2025 08:54:28 +0000 ROA not before: Wed 03 Sep 2025 08:54:28 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 9605 IP address blocks: 49.102.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4052 (0xfd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Sep 3 08:54:28 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=F691FF766B77A3F719CF93CBFD4C9FDF74BD723C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:f4:cc:7e:3b:49:31:80:9b:ea:dc:54:be: 79:ed:b9:8b:04:53:87:cb:15:8a:95:cd:c8:d8:bd: 52:ac:fa:59:9c:2e:eb:62:58:64:41:41:1a:c9:b5: d8:94:b1:7b:1e:e2:ef:79:88:d9:3b:7b:81:f6:cd: 03:3e:c8:41:be:8c:1c:ad:79:cc:7b:89:86:39:ab: f9:7e:2b:38:7e:98:9c:5d:dc:a4:5e:99:c4:bc:f1: a5:9c:0b:11:51:ad:db:85:78:af:05:41:ca:87:db: de:27:df:c0:5e:44:8e:32:74:2a:70:b7:e0:8a:34: e1:1b:c8:c4:cb:6f:44:c2:20:b6:81:fb:49:61:0f: 91:45:f8:e7:ef:53:10:a4:1e:fb:cf:03:ac:ef:e7: 0b:33:55:7b:2f:a0:14:af:fd:07:fe:4b:5f:b1:84: 2e:19:3b:e9:6a:b0:a7:c6:72:94:70:5c:8f:4a:5a: 46:d8:c9:9b:88:6f:c8:dd:c5:6f:92:b1:d7:45:2c: 9b:38:8d:ae:e7:ea:d4:3e:f6:54:62:36:c3:69:e4: 8b:2b:4e:ec:1c:a0:cf:0d:7a:69:19:c1:86:9d:83: 36:ea:b5:69:12:d3:3f:74:d6:33:94:c4:49:45:58: 60:2a:29:17:6f:94:0a:de:e9:06:36:d9:50:fa:4c: 1d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:91:FF:76:6B:77:A3:F7:19:CF:93:CB:FD:4C:9F:DF:74:BD:72:3C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9pH_dmt3o_cZz5PL_Uyf33S9cjw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.176.0/20 Signature Algorithm: sha256WithRSAEncryption 58:31:6d:33:18:b3:9a:91:ea:6a:c1:70:69:84:05:65:96:69: 73:27:af:eb:70:08:68:fe:56:ba:5a:fa:6c:64:49:e0:e0:6d: 54:7d:a1:20:a6:9b:39:8a:e3:cd:32:6b:a1:d5:ae:42:1f:5a: 48:1c:93:8a:c8:41:d5:c5:e7:84:0f:70:43:81:3d:b6:44:30: bf:cf:fa:47:77:0d:29:1e:8c:cd:be:3a:83:da:4b:af:a0:db: d4:4e:99:38:cc:ae:91:53:98:a6:a6:8c:02:ee:5b:7c:c2:61: 7d:65:fc:0b:c0:b9:89:ae:26:8e:8e:c9:76:2d:b1:44:b8:52: d5:53:3e:fe:b3:cd:29:db:46:d7:21:26:c4:86:4e:e9:24:1e: 1c:cf:c1:77:32:b4:eb:67:5c:28:4b:e9:a4:2f:03:c4:42:d1: 7c:00:57:f9:ac:c9:b2:03:9b:02:fb:b0:05:ef:38:ef:77:06: 73:c3:8b:29:b0:dd:b3:2d:ca:7e:7c:06:a9:1b:70:30:82:91: 40:9a:24:ec:81:dc:f9:73:c6:9e:e4:8b:cf:fa:c3:89:5b:b3: f4:d9:e1:d7:f7:48:d6:a7:0c:ec:1a:94:eb:87:b5:36:97:e7: 17:f2:81:7d:8a:04:6f:3a:ca:06:05:10:40:74:21:34:e0:7b: 7d:77:2b:3e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD9QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA5MDMw ODU0MjhaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY2OTFGRjc2NkI3N0Ez RjcxOUNGOTNDQkZENEM5RkRGNzRCRDcyM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/w/TMfjtJMYCb6txUvnntuYsEU4fLFYqVzcjYvVKs+lmcLuti WGRBQRrJtdiUsXse4u95iNk7e4H2zQM+yEG+jBytecx7iYY5q/l+Kzh+mJxd3KRe mcS88aWcCxFRrduFeK8FQcqH294n38BeRI4ydCpwt+CKNOEbyMTLb0TCILaB+0lh D5FF+OfvUxCkHvvPA6zv5wszVXsvoBSv/Qf+S1+xhC4ZO+lqsKfGcpRwXI9KWkbY yZuIb8jdxW+SsddFLJs4ja7n6tQ+9lRiNsNp5IsrTuwcoM8NemkZwYadgzbqtWkS 0z901jOUxElFWGAqKRdvlAre6QY22VD6TB1PAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU9pH/dmt3o/cZz5PL/Uyf33S9cjwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzlwSF9kbXQzb19jWno1UExfVXlmMzNTOWNqdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQxZrAwDQYJKoZIhvcNAQELBQADggEBAFgxbTMYs5qR6mrBcGmEBWWWaXMn r+twCGj+Vrpa+mxkSeDgbVR9oSCmmzmK480ya6HVrkIfWkgck4rIQdXF54QPcEOB PbZEML/P+kd3DSkejM2+OoPaS6+g29ROmTjMrpFTmKamjALuW3zCYX1l/AvAuYmu Jo6OyXYtsUS4UtVTPv6zzSnbRtchJsSGTukkHhzPwXcytOtnXChL6aQvA8RC0XwA V/msybIDmwL7sAXvOO93BnPDiymw3bMtyn58BqkbcDCCkUCaJOyB3Plzxp7ki8/6 w4lbs/TZ4df3SNanDOwalOuHtTaX5xfygX2KBG86ygYFEEB0ITTge313Kz4= -----END CERTIFICATE-----Generated at Sun Sep 7 03:31:42 2025 by rpki-client