$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sr7_KwyI0sr8OetEy_tjWT43Piw.roa File: Sr7_KwyI0sr8OetEy_tjWT43Piw.roa (raw, json) Hash identifier: R4TKM0TXCjtEVSWOd2r4nVgDfO+wPcH8akPZeXCeO/s= Subject key identifier: 4A:BE:FF:2B:0C:88:D2:CA:FC:39:EB:44:CB:FB:63:59:3E:37:3E:2C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FD7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sr7_KwyI0sr8OetEy_tjWT43Piw.roa Signing time: Fri 10 Oct 2025 05:05:50 +0000 ROA not before: Fri 10 Oct 2025 05:05:50 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 9605 IP address blocks: 49.96.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4055 (0xfd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Oct 10 05:05:50 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=4ABEFF2B0C88D2CAFC39EB44CBFB63593E373E2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:31:f1:aa:28:f2:6a:f5:c4:32:a7:af:39:29: 18:14:a7:41:d0:c0:d3:e7:77:e8:2d:4d:09:56:a9: c2:4c:f1:17:de:30:84:f7:a8:52:e8:63:ae:18:7e: a9:db:06:c3:2f:10:4c:ff:c5:74:e5:59:6b:98:a4: 9c:d3:cd:1e:d5:ce:d3:66:ec:57:1c:c7:65:7d:61: 8b:64:b0:62:19:7c:14:7b:8a:7a:26:90:49:bb:0f: 0c:ec:75:2f:f9:fd:c2:cb:a4:0c:b7:6f:be:fd:a8: 3c:8c:78:4b:51:05:9e:7e:28:26:ee:f8:8a:1b:88: 1b:47:65:1e:05:06:f5:02:d0:0f:cd:fb:8a:f5:fd: b5:ff:87:17:d5:fd:9f:3d:c0:c8:54:a7:9c:4f:a1: 35:41:36:d4:c0:96:59:9a:3d:83:77:76:f3:26:2c: 08:58:0f:50:51:9e:4d:0b:e2:57:18:e4:05:58:06: 60:26:41:88:c3:1e:14:c0:84:14:75:16:4d:57:54: e4:83:25:47:11:ff:8c:c4:8e:03:06:f9:23:bd:df: 56:90:6e:e2:25:d6:5e:e3:69:f8:34:0f:60:54:76: 8e:2d:b3:46:91:e3:7b:cf:d8:d3:c8:54:d2:ac:27: 7f:db:75:f4:30:19:f1:06:1d:a5:ed:ae:dc:61:75: 6c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BE:FF:2B:0C:88:D2:CA:FC:39:EB:44:CB:FB:63:59:3E:37:3E:2C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sr7_KwyI0sr8OetEy_tjWT43Piw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.135.0/24 Signature Algorithm: sha256WithRSAEncryption 47:ca:7f:ce:6e:9c:e6:f8:8e:13:e4:51:52:ad:c9:aa:56:5d: 0c:38:12:8b:a8:3e:98:0b:cc:75:d4:af:ab:bc:4b:05:f3:20: ad:b7:68:af:61:d4:06:2b:53:d7:bf:84:59:9d:68:68:40:fd: ba:77:32:f3:f5:50:24:34:65:79:bd:74:e3:c1:4f:d6:bc:17: 48:b4:ca:48:7a:a0:fe:0a:ff:6b:65:72:1b:d1:10:9e:fd:a2: 1b:6d:c3:e7:15:16:ce:78:66:c7:aa:1f:87:89:c3:ff:68:64: e9:eb:f9:ba:9d:cf:57:eb:b8:57:c3:63:08:ed:13:9a:79:91: eb:60:09:02:a3:21:81:8d:82:2c:cc:c8:49:98:d5:94:62:86: 1f:9d:7a:ac:4a:22:e1:69:61:b8:aa:54:56:7b:02:5c:d1:a5: 3a:48:fa:55:4c:7d:fc:c7:72:02:79:13:c4:c6:3d:51:27:d4: ae:b1:6a:39:7f:1d:85:7a:da:6a:c2:e3:4e:5d:2c:c9:e1:0c: 3a:ce:df:9e:cc:61:84:b3:b3:1d:22:00:34:76:8a:92:d7:12: 56:87:03:68:8e:55:b9:45:04:b5:9b:f9:33:ce:2f:83:3d:16: cb:6e:9a:46:b8:a2:d5:7d:31:28:07:8e:a6:12:02:44:6d:45: 52:dd:1d:3d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD9cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTEwMTAw NTA1NTBaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRBQkVGRjJCMEM4OEQy Q0FGQzM5RUI0NENCRkI2MzU5M0UzNzNFMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQMfGqKPJq9cQyp685KRgUp0HQwNPnd+gtTQlWqcJM8RfeMIT3 qFLoY64YfqnbBsMvEEz/xXTlWWuYpJzTzR7VztNm7Fccx2V9YYtksGIZfBR7inom kEm7DwzsdS/5/cLLpAy3b779qDyMeEtRBZ5+KCbu+IobiBtHZR4FBvUC0A/N+4r1 /bX/hxfV/Z89wMhUp5xPoTVBNtTAllmaPYN3dvMmLAhYD1BRnk0L4lcY5AVYBmAm QYjDHhTAhBR1Fk1XVOSDJUcR/4zEjgMG+SO931aQbuIl1l7jafg0D2BUdo4ts0aR 43vP2NPIVNKsJ3/bdfQwGfEGHaXtrtxhdWydAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSr7/KwyI0sr8OetEy/tjWT43PiwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1NyN19Ld3lJMHNyOE9ldEV5X3RqV1Q0M1Bpdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYIcwDQYJKoZIhvcNAQELBQADggEBAEfKf85unOb4jhPkUVKtyapWXQw4 EouoPpgLzHXUr6u8SwXzIK23aK9h1AYrU9e/hFmdaGhA/bp3MvP1UCQ0ZXm9dOPB T9a8F0i0ykh6oP4K/2tlchvREJ79ohttw+cVFs54ZseqH4eJw/9oZOnr+bqdz1fr uFfDYwjtE5p5ketgCQKjIYGNgizMyEmY1ZRihh+deqxKIuFpYbiqVFZ7AlzRpTpI +lVMffzHcgJ5E8TGPVEn1K6xajl/HYV62mrC405dLMnhDDrO357MYYSzsx0iADR2 ipLXElaHA2iOVblFBLWb+TPOL4M9Fstumka4otV9MSgHjqYSAkRtRVLdHT0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:41:11 2025 by rpki-client