$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tpfavsGO3UYc_u1UxZsH6-Ft-p8.roa File: tpfavsGO3UYc_u1UxZsH6-Ft-p8.roa (raw, json) Hash identifier: kHLio6sT+4NTZlWohZ4psdyhXB3VKyjXHIrto6sBI0w= Subject key identifier: B6:97:DA:BE:C1:8E:DD:46:1C:FE:ED:54:C5:9B:07:EB:E1:6D:FA:9F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B94 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tpfavsGO3UYc_u1UxZsH6-Ft-p8.roa Signing time: Tue 01 Apr 2025 01:39:46 +0000 ROA not before: Tue 01 Apr 2025 01:39:46 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2964 (0xb94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:39:46 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=B697DABEC18EDD461CFEED54C59B07EBE16DFA9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:2a:fd:a8:e2:e6:a7:db:bf:77:23:70:a4: 16:ee:f2:84:0a:28:81:a6:2e:f4:6a:06:69:20:9c: d3:02:1b:73:60:5c:64:4a:c9:a9:d1:9c:75:f9:bb: 12:c3:91:7d:57:0f:92:68:f9:c6:5a:f2:cc:ce:c9: 25:84:6e:fe:0b:49:e7:f8:55:8b:e6:b8:0c:6b:b5: eb:6b:f5:99:81:e5:52:eb:5a:63:39:d9:f0:22:cc: 59:06:2c:35:73:f2:54:40:a0:89:61:a7:3f:9d:bc: 72:e8:09:97:2f:2f:e7:51:d1:9c:34:a3:45:15:0b: 42:42:2d:2f:a8:ed:a5:3c:05:4b:86:c2:a3:70:36: f3:99:70:63:9c:dd:b5:22:28:39:d7:7c:ea:e9:82: 12:2e:76:ac:82:b3:c7:9f:8a:68:22:ad:7d:b7:8f: 0e:40:89:77:80:f4:ce:a9:43:d7:cc:06:c7:75:35: 7e:d9:1f:7f:94:a1:0a:d3:ad:54:2b:2b:54:5f:10: 5a:07:ec:9d:4d:b1:a9:f0:d3:7f:01:69:07:5b:b3: 40:76:58:cf:06:9d:f2:4e:3b:73:5f:31:d5:84:15: 0d:13:bf:17:55:05:41:77:b4:09:27:d2:0f:27:c2: d9:00:43:26:49:d7:fa:bc:85:ce:bc:39:b6:b8:ff: 38:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:97:DA:BE:C1:8E:DD:46:1C:FE:ED:54:C5:9B:07:EB:E1:6D:FA:9F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tpfavsGO3UYc_u1UxZsH6-Ft-p8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.35.0/24 Signature Algorithm: sha256WithRSAEncryption 14:8f:2c:b7:c5:8e:6f:0c:ab:6e:60:e4:6a:f8:8c:fd:fb:25: c8:81:22:17:15:3a:c4:90:6a:2c:4a:34:ff:d1:fe:d8:18:97: 74:91:31:18:95:2c:5b:d4:6b:23:0a:1f:6e:28:40:65:fa:5e: 51:73:13:7e:38:44:3b:b3:b2:1f:23:19:e6:de:92:50:04:47: 8c:42:de:1c:29:58:90:ec:61:2c:fd:3b:1b:8f:2f:1f:35:c3: 93:2a:c2:6b:5b:62:d9:68:ad:a1:b8:6c:24:c5:df:3b:12:1c: 0e:cd:13:51:13:a6:29:16:73:7a:fd:f5:76:9c:f4:bc:8b:b7: 61:66:e7:70:27:00:47:24:66:f9:dc:b1:65:d5:8c:31:b9:15: 0e:72:5a:53:5e:c3:ca:d5:64:f0:10:05:5f:5f:52:02:d8:6b: 6b:ef:8b:54:46:8a:d6:68:30:ec:5e:b6:a1:b1:f1:e0:41:ec: 2a:40:34:f9:53:d7:c5:42:c4:1e:fb:df:55:30:1f:cb:38:36: 25:a8:ee:6e:b4:81:e5:2c:ec:31:ce:fd:12:47:9c:81:99:cc: 60:39:12:81:08:08:e5:74:42:0c:27:01:d2:af:7a:69:2b:07: 61:0a:be:f3:e1:33:cc:a8:da:7f:8f:4d:eb:1d:c8:88:ef:c5: 13:f8:6f:3c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM5NDZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI2OTdEQUJFQzE4RURE NDYxQ0ZFRUQ1NEM1OUIwN0VCRTE2REZBOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYvCr9qOLmp9u/dyNwpBbu8oQKKIGmLvRqBmkgnNMCG3NgXGRK yanRnHX5uxLDkX1XD5Jo+cZa8szOySWEbv4LSef4VYvmuAxrtetr9ZmB5VLrWmM5 2fAizFkGLDVz8lRAoIlhpz+dvHLoCZcvL+dR0Zw0o0UVC0JCLS+o7aU8BUuGwqNw NvOZcGOc3bUiKDnXfOrpghIudqyCs8efimgirX23jw5AiXeA9M6pQ9fMBsd1NX7Z H3+UoQrTrVQrK1RfEFoH7J1Nsanw038BaQdbs0B2WM8GnfJOO3NfMdWEFQ0TvxdV BUF3tAkn0g8nwtkAQyZJ1/q8hc68Oba4/zjPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUtpfavsGO3UYc/u1UxZsH6+Ft+p8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3RwZmF2c0dPM1VZY191MVV4WnNINi1GdC1wOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYCMwDQYJKoZIhvcNAQELBQADggEBABSPLLfFjm8Mq25g5Gr4jP37JciB IhcVOsSQaixKNP/R/tgYl3SRMRiVLFvUayMKH24oQGX6XlFzE344RDuzsh8jGebe klAER4xC3hwpWJDsYSz9OxuPLx81w5MqwmtbYtloraG4bCTF3zsSHA7NE1ETpikW c3r99Xac9LyLt2Fm53AnAEckZvncsWXVjDG5FQ5yWlNew8rVZPAQBV9fUgLYa2vv i1RGitZoMOxetqGx8eBB7CpANPlT18VCxB7731UwH8s4NiWo7m60geUs7DHO/RJH nIGZzGA5EoEICOV0QgwnAdKvemkrB2EKvvPhM8yo2n+PTesdyIjvxRP4bzw= -----END CERTIFICATE-----Generated at Fri Oct 24 13:42:06 2025 by rpki-client