$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LXS8fHCwTHo3fX8xX3-t5BbIfEs.roa File: LXS8fHCwTHo3fX8xX3-t5BbIfEs.roa (raw, json) Hash identifier: FPC0yEo/zFmKhE+bPPFME3mWOe+NhKpFUqdlHugrGwk= Subject key identifier: 2D:74:BC:7C:70:B0:4C:7A:37:7D:7F:31:5F:7F:AD:E4:16:C8:7C:4B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FC2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LXS8fHCwTHo3fX8xX3-t5BbIfEs.roa Signing time: Tue 10 Jun 2025 11:44:18 +0000 ROA not before: Tue 10 Jun 2025 11:44:18 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.102.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4034 (0xfc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:44:18 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=2D74BC7C70B04C7A377D7F315F7FADE416C87C4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6e:61:ce:da:7b:a9:2c:73:d7:9b:37:d1:9d: 24:9a:19:a8:44:92:6c:ac:c8:13:37:69:02:05:4e: 39:55:41:06:0d:ce:08:66:01:6b:2c:78:2a:c7:dd: e0:21:7b:f9:52:09:68:85:b1:77:32:60:aa:e4:4f: cc:a5:09:02:a7:02:f2:d1:0b:fa:02:f1:92:54:36: 5a:e9:d5:76:0b:73:79:e1:b2:50:7d:d6:64:6b:41: c9:ad:1b:f3:3e:40:0b:d6:02:2f:f0:d4:90:53:8e: 25:0f:db:44:f5:83:16:b0:4f:61:f7:32:ee:4e:4c: 72:44:44:79:a3:01:ac:3f:b7:e6:7c:f6:9c:2f:47: 74:22:ed:e7:c0:5c:cb:11:32:0b:da:78:a4:76:23: ca:bc:be:25:cb:37:63:95:de:5d:6c:17:d6:ea:ba: 27:1f:e1:66:ab:e4:32:8d:13:99:ff:50:ed:09:69: 2a:84:b3:b7:4a:af:a2:e7:21:b0:53:a8:1c:36:31: 23:97:ba:a0:83:1f:bc:73:3f:1d:51:f0:6a:41:e2: 3e:c6:71:3b:44:06:7d:bf:b7:43:eb:6a:0d:88:23: 24:2f:c8:01:a4:39:a6:99:0c:71:5e:ed:f5:7c:df: cb:61:6e:5c:a0:63:8e:1f:70:7f:8b:23:9e:cc:95: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:74:BC:7C:70:B0:4C:7A:37:7D:7F:31:5F:7F:AD:E4:16:C8:7C:4B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LXS8fHCwTHo3fX8xX3-t5BbIfEs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.161.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:63:cd:5c:7f:be:70:c9:f8:70:0e:d1:2f:de:b0:34:fd:8f: ae:92:9b:54:4b:db:35:b4:3b:b1:0f:2c:78:e8:c1:7f:c1:22: 0e:a7:ba:fa:1c:d5:5a:20:b3:e5:65:e1:81:ba:bd:67:6f:2e: f9:02:57:72:7f:95:72:ef:d0:19:10:1f:50:b0:5d:41:d3:4d: 61:f5:cd:18:c4:b8:73:f8:2c:f3:77:94:04:b7:71:7d:63:11: f6:47:1b:89:26:49:61:72:0f:c4:7c:57:8b:6e:4e:25:53:4d: e0:32:0c:07:49:f5:58:42:ae:40:3f:e2:ff:fd:b8:a6:c9:95: a6:bc:72:2d:00:76:30:7d:a0:35:00:83:b5:f2:a9:fc:6b:c8: 1d:85:b1:93:81:a4:0a:76:11:49:7d:f0:8d:4b:2f:00:37:14: c1:f9:04:5c:d0:ec:86:b2:fc:c9:ac:4b:97:a3:f8:b7:02:f6: b1:62:dd:ee:35:71:72:bc:d4:ce:ea:83:e4:d4:ff:af:b2:a9: 76:81:c7:67:80:23:03:72:8a:77:fe:48:51:fc:9c:01:af:94: e2:dd:b3:20:00:ad:45:9b:3b:7a:8a:58:ac:18:b7:eb:da:21: 39:d8:0d:b9:e1:ad:dd:bd:9b:26:b5:47:de:ff:0b:3e:c9:c8: 6b:e1:5b:9a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQ0MThaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDJENzRCQzdDNzBCMDRD N0EzNzdEN0YzMTVGN0ZBREU0MTZDODdDNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHbmHO2nupLHPXmzfRnSSaGahEkmysyBM3aQIFTjlVQQYNzghm AWsseCrH3eAhe/lSCWiFsXcyYKrkT8ylCQKnAvLRC/oC8ZJUNlrp1XYLc3nhslB9 1mRrQcmtG/M+QAvWAi/w1JBTjiUP20T1gxawT2H3Mu5OTHJERHmjAaw/t+Z89pwv R3Qi7efAXMsRMgvaeKR2I8q8viXLN2OV3l1sF9bquicf4War5DKNE5n/UO0JaSqE s7dKr6LnIbBTqBw2MSOXuqCDH7xzPx1R8GpB4j7GcTtEBn2/t0Prag2IIyQvyAGk OaaZDHFe7fV838thblygY44fcH+LI57MldY1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULXS8fHCwTHo3fX8xX3+t5BbIfEswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xYUzhmSEN3VEhvM2ZYOHhYMy10NUJiSWZFcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxZqEwDQYJKoZIhvcNAQELBQADggEBAG5jzVx/vnDJ+HAO0S/esDT9j66S m1RL2zW0O7EPLHjowX/BIg6nuvoc1Vogs+Vl4YG6vWdvLvkCV3J/lXLv0BkQH1Cw XUHTTWH1zRjEuHP4LPN3lAS3cX1jEfZHG4kmSWFyD8R8V4tuTiVTTeAyDAdJ9VhC rkA/4v/9uKbJlaa8ci0AdjB9oDUAg7XyqfxryB2FsZOBpAp2EUl98I1LLwA3FMH5 BFzQ7Iay/MmsS5ej+LcC9rFi3e41cXK81M7qg+TU/6+yqXaBx2eAIwNyinf+SFH8 nAGvlOLdsyAArUWbO3qKWKwYt+vaITnYDbnhrd29mya1R97/Cz7JyGvhW5o= -----END CERTIFICATE-----Generated at Fri Oct 24 13:47:58 2025 by rpki-client