$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nGQkKlqRLBrRYaHoatU6zK_ZFUU.roa File: nGQkKlqRLBrRYaHoatU6zK_ZFUU.roa (raw, json) Hash identifier: eUmGoJX4LQsUhlIjxCYsze4rb/5LZLLDf3PBeffXK/k= Subject key identifier: 9C:64:24:2A:5A:91:2C:1A:D1:61:A1:E8:6A:D5:3A:CC:AF:D9:15:45 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B60 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nGQkKlqRLBrRYaHoatU6zK_ZFUU.roa Signing time: Tue 01 Apr 2025 01:33:24 +0000 ROA not before: Tue 01 Apr 2025 01:33:24 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2912 (0xb60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:33:24 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=9C64242A5A912C1AD161A1E86AD53ACCAFD91545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:68:3b:50:63:e6:ed:c2:08:45:dc:75:f5: 35:5f:8f:72:ef:9b:cc:d7:15:39:cf:09:f7:06:dd: 00:75:db:d2:92:85:c8:1f:8d:0d:01:c3:3c:74:67: ca:a8:d9:84:d2:bb:b1:fd:50:11:42:8d:41:23:49: 36:93:2b:be:dc:61:ff:ef:38:6a:40:c8:30:9a:53: 13:b9:a0:14:52:f8:b4:37:f7:a6:44:85:3f:0b:f2: 66:c9:59:e6:29:bd:e9:a8:d7:5d:35:d8:03:94:1d: 1b:a5:fb:3b:20:b4:57:f3:36:f2:d9:ca:39:ea:07: 89:d3:b0:e7:da:ff:f9:1f:9e:ca:0a:2c:7e:d3:e7: a4:99:f7:75:05:c8:f6:c9:81:d3:94:65:9e:a0:5e: 2c:13:db:35:62:11:53:0d:4f:f7:55:30:5c:a6:15: e1:6f:4b:f6:80:95:2b:c3:8c:f1:d9:e4:31:69:bd: ca:b2:8b:1a:c3:b1:11:e2:94:25:c7:56:9c:13:43: 7b:66:5f:34:a0:26:e5:fd:9a:bb:0e:57:c9:6a:6a: 40:8c:af:65:28:e5:06:98:7a:a4:a9:c0:9a:c5:17: 06:47:7e:39:76:42:b7:ba:ea:4c:ec:72:c9:94:26: 86:f8:5d:13:b5:93:38:f8:ee:d2:63:16:5c:fb:f0: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:64:24:2A:5A:91:2C:1A:D1:61:A1:E8:6A:D5:3A:CC:AF:D9:15:45 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nGQkKlqRLBrRYaHoatU6zK_ZFUU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.60.0/22 Signature Algorithm: sha256WithRSAEncryption cd:1c:cd:8f:7e:c7:f6:08:81:c6:e4:25:c8:8c:96:4d:df:de: 78:ec:97:de:26:ac:94:79:d4:39:94:54:bf:b2:83:2b:00:ad: c8:5d:e1:8e:4b:43:2c:05:5d:c6:15:ff:21:11:13:26:7b:a9: 8d:97:02:e1:f5:10:cc:a0:47:15:52:05:2f:3d:b1:83:76:88: 81:51:d6:b3:07:65:8d:66:4a:d8:08:da:f3:b4:56:d4:e7:2f: 1e:fb:5d:a9:97:d1:e0:66:1e:91:48:d2:88:eb:48:46:36:c8: c1:b2:ad:75:51:ae:9c:cc:e5:0b:ac:de:f9:7e:04:05:52:42: 3e:2d:cb:bd:8c:00:63:14:af:78:18:59:55:74:5a:a8:23:f3: 75:71:54:48:96:54:99:59:29:59:33:e7:0d:a7:0c:9f:c1:af: e4:ac:bd:a1:4b:1c:78:96:6b:39:05:2d:cb:a7:57:4f:41:a9: 56:cc:61:12:34:7c:8b:97:1f:9a:74:a9:13:06:4a:08:c6:5a: 27:23:17:53:fe:d6:14:d9:9b:1f:a9:76:27:0b:e1:4e:81:f5: 6e:ff:1b:a9:b1:2f:2b:77:ef:9e:1e:cd:bc:14:6d:42:46:c6: 24:0a:45:de:10:13:ca:eb:3f:67:a7:ce:7e:d1:df:f5:cf:6f: 14:06:f4:9e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTMzMjRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlDNjQyNDJBNUE5MTJD MUFEMTYxQTFFODZBRDUzQUNDQUZEOTE1NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJC2g7UGPm7cIIRdx19TVfj3Lvm8zXFTnPCfcG3QB129KShcgf jQ0Bwzx0Z8qo2YTSu7H9UBFCjUEjSTaTK77cYf/vOGpAyDCaUxO5oBRS+LQ396ZE hT8L8mbJWeYpvemo11012AOUHRul+zsgtFfzNvLZyjnqB4nTsOfa//kfnsoKLH7T 56SZ93UFyPbJgdOUZZ6gXiwT2zViEVMNT/dVMFymFeFvS/aAlSvDjPHZ5DFpvcqy ixrDsRHilCXHVpwTQ3tmXzSgJuX9mrsOV8lqakCMr2Uo5QaYeqSpwJrFFwZHfjl2 Qre66kzscsmUJob4XRO1kzj47tJjFlz78IlXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnGQkKlqRLBrRYaHoatU6zK/ZFUUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L25HUWtLbHFSTEJyUllhSG9hdFU2ektfWkZVVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYjwwDQYJKoZIhvcNAQELBQADggEBAM0czY9+x/YIgcbkJciMlk3f3njs l94mrJR51DmUVL+ygysArchd4Y5LQywFXcYV/yEREyZ7qY2XAuH1EMygRxVSBS89 sYN2iIFR1rMHZY1mStgI2vO0VtTnLx77XamX0eBmHpFI0ojrSEY2yMGyrXVRrpzM 5Qus3vl+BAVSQj4ty72MAGMUr3gYWVV0Wqgj83VxVEiWVJlZKVkz5w2nDJ/Br+Ss vaFLHHiWazkFLcunV09BqVbMYRI0fIuXH5p0qRMGSgjGWicjF1P+1hTZmx+pdicL 4U6B9W7/G6mxLyt3754ezbwUbUJGxiQKRd4QE8rrP2enzn7R3/XPbxQG9J4= -----END CERTIFICATE-----Generated at Fri Oct 24 13:43:58 2025 by rpki-client