$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mK3zDX3KuROCw56EJj-LUdpzZxc.roa File: mK3zDX3KuROCw56EJj-LUdpzZxc.roa (raw, json) Hash identifier: tP6bd+YqAyARfVOham4cNxtJgkQJISoYeTCur4iJpVM= Subject key identifier: 98:AD:F3:0D:7D:CA:B9:13:82:C3:9E:84:26:3F:8B:51:DA:73:67:17 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C24 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mK3zDX3KuROCw56EJj-LUdpzZxc.roa Signing time: Tue 01 Apr 2025 01:54:02 +0000 ROA not before: Tue 01 Apr 2025 01:54:02 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3108 (0xc24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:54:02 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=98ADF30D7DCAB91382C39E84263F8B51DA736717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:e4:c0:56:1d:6c:1e:e5:aa:07:52:de:15: f1:9c:d4:5b:76:90:3c:42:23:60:97:79:6b:ed:5a: d5:8f:f2:93:23:e6:db:14:98:5d:bb:c4:fe:2f:17: ec:03:5c:fc:e8:c7:24:7e:6c:5e:de:a6:cb:6b:fd: 64:89:a4:70:15:34:19:fb:15:dc:a7:44:38:07:22: 30:de:2f:95:43:4f:ea:50:ee:52:92:fb:00:b7:40: 2d:94:4d:55:23:25:0f:e4:f3:7f:c2:f7:8f:79:48: 50:25:9c:ec:4e:35:87:fb:66:a6:d4:44:4e:ed:8f: 11:1b:b8:b8:f7:c4:69:71:70:d3:fb:b2:b4:53:f5: 6b:f1:06:b2:94:32:63:ff:d2:2e:bb:3e:f1:41:d9: d6:46:1b:f5:47:69:71:12:37:97:9c:0c:8c:fb:a5: 9d:f3:be:1d:a1:6b:20:12:5e:19:c3:4c:a9:23:d0: d3:e6:81:ef:14:e6:98:a2:73:30:f5:7e:b9:a7:63: 30:5f:94:f7:8f:17:e7:09:d2:5b:2a:c1:47:e8:64: 7c:0d:ee:29:91:5c:d8:20:ee:79:b0:04:e8:52:9e: 37:00:12:ce:52:2f:04:98:c9:7d:1d:7f:6d:63:12: 4a:4c:0a:52:18:ed:59:9f:ac:15:a1:f8:1b:20:f0: 8a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AD:F3:0D:7D:CA:B9:13:82:C3:9E:84:26:3F:8B:51:DA:73:67:17 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mK3zDX3KuROCw56EJj-LUdpzZxc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.36.0/22 Signature Algorithm: sha256WithRSAEncryption b5:bf:cf:d7:23:d3:38:53:01:32:50:ec:66:9f:d0:65:4b:2e: 8a:e6:66:47:1a:5c:3f:3f:18:92:76:12:c6:e3:6d:a4:73:7c: 2a:7e:0c:d9:9b:54:23:d8:c9:8c:bc:85:ad:7c:1f:d9:db:8b: 62:9f:f4:d4:24:8e:c2:b0:c4:7d:5b:a7:42:95:c0:b6:b1:6a: 97:04:f5:93:06:28:58:54:2f:0b:a7:6b:74:ff:0c:09:cc:cb: 9a:d4:c7:4a:09:29:6c:4d:0d:f1:6c:3e:59:25:2f:e8:d8:92: 60:83:7b:79:fa:0f:26:a2:dd:58:c1:14:ab:7f:ca:70:56:91: 10:7c:90:9f:f9:63:8c:61:19:d6:c9:91:12:d5:73:20:07:26: 1d:b9:a3:e5:09:d7:04:bf:5f:91:b2:54:41:8a:f5:c2:ab:3f: c0:1e:cf:d3:84:c2:49:43:93:69:58:50:8a:01:a3:1d:cc:93: 4b:6d:31:ef:19:f7:87:c7:4c:da:2f:95:8c:e9:25:92:5f:59: dc:68:db:46:5e:43:29:1c:0e:4d:ae:ed:07:92:a3:1f:12:3e: c5:8e:02:05:d2:9f:09:01:a8:89:0f:4b:95:17:6a:e0:56:a8: 18:f0:99:f4:fc:a5:50:47:96:27:59:a3:1c:c6:3b:5b:3e:8d: 37:95:8f:4f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU0MDJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk4QURGMzBEN0RDQUI5 MTM4MkMzOUU4NDI2M0Y4QjUxREE3MzY3MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAWuTAVh1sHuWqB1LeFfGc1Ft2kDxCI2CXeWvtWtWP8pMj5tsU mF27xP4vF+wDXPzoxyR+bF7epstr/WSJpHAVNBn7FdynRDgHIjDeL5VDT+pQ7lKS +wC3QC2UTVUjJQ/k83/C9495SFAlnOxONYf7ZqbURE7tjxEbuLj3xGlxcNP7srRT 9WvxBrKUMmP/0i67PvFB2dZGG/VHaXESN5ecDIz7pZ3zvh2hayASXhnDTKkj0NPm ge8U5piiczD1frmnYzBflPePF+cJ0lsqwUfoZHwN7imRXNgg7nmwBOhSnjcAEs5S LwSYyX0df21jEkpMClIY7VmfrBWh+Bsg8IpHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmK3zDX3KuROCw56EJj+LUdpzZxcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L21LM3pEWDNLdVJPQ3c1NkVKai1MVWRwelp4Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxaCQwDQYJKoZIhvcNAQELBQADggEBALW/z9cj0zhTATJQ7Gaf0GVLLorm ZkcaXD8/GJJ2EsbjbaRzfCp+DNmbVCPYyYy8ha18H9nbi2Kf9NQkjsKwxH1bp0KV wLaxapcE9ZMGKFhULwuna3T/DAnMy5rUx0oJKWxNDfFsPlklL+jYkmCDe3n6Dyai 3VjBFKt/ynBWkRB8kJ/5Y4xhGdbJkRLVcyAHJh25o+UJ1wS/X5GyVEGK9cKrP8Ae z9OEwklDk2lYUIoBox3Mk0ttMe8Z94fHTNovlYzpJZJfWdxo20ZeQykcDk2u7QeS ox8SPsWOAgXSnwkBqIkPS5UXauBWqBjwmfT8pVBHlidZoxzGO1s+jTeVj08= -----END CERTIFICATE-----Generated at Fri Oct 24 13:48:02 2025 by rpki-client