$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GYi_RBZJ-l_Iz8yHSVQmve7QByA.roa File: GYi_RBZJ-l_Iz8yHSVQmve7QByA.roa (raw, json) Hash identifier: iuZGENPLeUTRnP/d+Co7bKhKpN55uKPml4wPz2GdYSs= Subject key identifier: 19:88:BF:44:16:49:FA:5F:C8:CF:CC:87:49:54:26:BD:EE:D0:07:20 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CE7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GYi_RBZJ-l_Iz8yHSVQmve7QByA.roa Signing time: Tue 01 Apr 2025 02:09:22 +0000 ROA not before: Tue 01 Apr 2025 02:09:22 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3303 (0xce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:22 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1988BF441649FA5FC8CFCC87495426BDEED00720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:c9:7f:f9:db:db:96:8c:de:4c:b6:ed:64: 2d:2b:36:00:94:f8:cd:ae:90:d9:4b:d8:b7:b5:3c: 08:d3:df:a5:c6:3a:6f:ba:42:c8:4f:03:64:5a:70: 55:ae:a3:00:62:9a:26:28:6e:26:c3:e4:be:c5:51: b0:01:9d:28:bd:4e:b4:d2:7f:1a:9f:c3:78:48:a7: 8b:b4:0c:e1:d3:82:57:f8:7a:19:d3:a3:aa:8c:27: 4a:c3:5d:7d:b1:25:d5:95:bc:e2:bc:cf:1b:9c:87: 06:6c:04:2e:91:b7:23:b9:b1:dc:5b:21:17:b9:1e: ce:4a:fa:2a:f1:91:30:b5:ef:ed:f4:76:58:c2:40: 4a:74:a8:af:40:32:23:a9:47:20:8b:36:88:f7:97: 51:91:40:d1:f6:d2:77:64:3b:87:ce:cc:2a:b2:07: 05:27:5c:b5:50:e0:cc:ab:a4:b2:40:57:db:95:fb: 50:f0:0d:7f:62:cb:8c:77:28:cc:2d:93:16:18:da: c2:85:9a:5c:61:1d:aa:f8:7f:f6:50:fb:22:69:66: a7:bb:39:00:44:4f:2a:a8:05:73:9f:e0:fa:ff:5a: 89:19:11:9a:7f:d2:c1:2f:78:aa:85:f3:37:1b:09: 2c:be:b1:45:0b:f7:83:fb:f4:96:41:10:56:e3:b5: 1e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:88:BF:44:16:49:FA:5F:C8:CF:CC:87:49:54:26:BD:EE:D0:07:20 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GYi_RBZJ-l_Iz8yHSVQmve7QByA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.16.0/23 Signature Algorithm: sha256WithRSAEncryption 77:6f:b5:29:53:c1:08:d3:fe:42:67:03:60:b2:34:a7:3f:43: f8:52:7f:57:b0:a7:51:fb:07:60:6f:77:2f:83:57:94:e6:4a: cc:2f:30:cb:d3:00:a0:6c:91:54:c4:43:89:48:cd:6a:fc:b8: e5:c7:cc:a3:82:f8:33:34:2e:14:bc:10:6e:f5:a3:94:0d:ca: ab:cd:dc:1e:3e:6c:e5:7f:13:5e:35:4d:80:49:a7:48:68:1f: 60:65:17:90:fe:90:ab:dd:26:94:78:df:c4:7b:88:98:a8:e5: d9:a9:31:68:f4:71:6d:23:40:43:1c:57:71:47:7f:48:3c:ec: 84:d5:a2:58:0c:83:4a:25:12:55:75:6f:d2:bc:57:13:81:7b: 65:3a:47:3b:c1:62:57:b9:eb:7c:04:26:56:85:21:50:b1:e7: 17:84:ed:0c:db:47:9c:f2:80:2b:29:d4:0b:b5:eb:bd:f0:cb: f9:ed:c7:70:9a:b3:54:a1:f6:26:02:84:58:00:02:90:12:47: a0:27:69:76:0c:75:00:64:17:d5:b8:48:fd:8c:59:52:03:46: ca:76:68:cb:e5:85:b1:73:a5:96:db:81:3d:48:50:1e:18:58: c1:56:5e:87:41:74:08:76:67:d5:fe:10:d0:b2:45:14:ef:0d: 3c:29:4d:ea -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MjJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE5ODhCRjQ0MTY0OUZB NUZDOENGQ0M4NzQ5NTQyNkJERUVEMDA3MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr0cl/+dvblozeTLbtZC0rNgCU+M2ukNlL2Le1PAjT36XGOm+6 QshPA2RacFWuowBimiYobibD5L7FUbABnSi9TrTSfxqfw3hIp4u0DOHTglf4ehnT o6qMJ0rDXX2xJdWVvOK8zxuchwZsBC6RtyO5sdxbIRe5Hs5K+irxkTC17+30dljC QEp0qK9AMiOpRyCLNoj3l1GRQNH20ndkO4fOzCqyBwUnXLVQ4MyrpLJAV9uV+1Dw DX9iy4x3KMwtkxYY2sKFmlxhHar4f/ZQ+yJpZqe7OQBETyqoBXOf4Pr/WokZEZp/ 0sEveKqF8zcbCSy+sUUL94P79JZBEFbjtR4zAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGYi/RBZJ+l/Iz8yHSVQmve7QByAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0dZaV9SQlpKLWxfSXo4eUhTVlFtdmU3UUJ5QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYBAwDQYJKoZIhvcNAQELBQADggEBAHdvtSlTwQjT/kJnA2CyNKc/Q/hS f1ewp1H7B2Bvdy+DV5TmSswvMMvTAKBskVTEQ4lIzWr8uOXHzKOC+DM0LhS8EG71 o5QNyqvN3B4+bOV/E141TYBJp0hoH2BlF5D+kKvdJpR438R7iJio5dmpMWj0cW0j QEMcV3FHf0g87ITVolgMg0olElV1b9K8VxOBe2U6RzvBYle563wEJlaFIVCx5xeE 7QzbR5zygCsp1Au1673wy/ntx3Cas1Sh9iYChFgAApASR6AnaXYMdQBkF9W4SP2M WVIDRsp2aMvlhbFzpZbbgT1IUB4YWMFWXodBdAh2Z9X+ENCyRRTvDTwpTeo= -----END CERTIFICATE-----Generated at Fri Oct 24 13:43:59 2025 by rpki-client