$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0ExipmflIAmQVj7YR6UN4epTvyM.roa File: 0ExipmflIAmQVj7YR6UN4epTvyM.roa (raw, json) Hash identifier: 26kCQKYGiI/oDuj2h9VfuGHT2QqPJALqh3V8PsEXvxM= Subject key identifier: D0:4C:62:A6:67:E5:20:09:90:56:3E:D8:47:A5:0D:E1:EA:53:BF:23 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DA8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0ExipmflIAmQVj7YR6UN4epTvyM.roa Signing time: Tue 01 Apr 2025 02:24:39 +0000 ROA not before: Tue 01 Apr 2025 02:24:39 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3496 (0xda8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:39 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D04C62A667E5200990563ED847A50DE1EA53BF23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:5f:ee:00:2f:e4:f2:b3:27:9f:ba:21:33: f1:ba:b0:02:07:a5:b6:b4:10:dc:4e:ba:ff:99:05: 31:01:f6:47:ce:b5:66:84:83:3c:a4:18:cc:f4:1e: bb:53:6d:aa:aa:84:bc:4d:7a:62:3e:69:4a:bb:a7: 9f:77:d6:06:42:76:c0:3c:20:84:f0:47:56:9e:19: 0f:ba:77:f7:be:1e:99:2c:3b:2d:24:00:9e:e9:81: 5e:cd:49:35:13:dc:79:36:e3:47:03:5b:8f:0a:38: 2c:42:91:77:b9:4e:14:c5:b8:9d:ed:02:1f:df:8a: e6:ef:f6:2c:6d:e7:fb:85:ba:c8:5d:eb:a2:2d:17: 54:c3:90:80:58:60:95:a8:13:13:23:17:0d:1b:86: a8:2f:d7:f5:63:64:a3:a4:58:a0:a0:1e:94:b4:bb: 42:11:8b:a5:93:e1:ee:4c:33:46:56:77:87:00:c2: 8a:e3:55:80:93:ec:bd:be:53:4f:8a:23:ff:fb:c0: 62:63:32:24:36:26:07:1a:29:94:90:fb:43:29:be: ed:e1:c2:ad:26:e2:4d:50:43:02:73:71:1b:75:5e: 76:80:e0:0c:6f:89:5d:8d:5c:ae:e0:78:66:2c:42: 1b:c2:83:30:c4:89:58:51:5d:42:96:f6:1d:f2:0a: 71:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4C:62:A6:67:E5:20:09:90:56:3E:D8:47:A5:0D:E1:EA:53:BF:23 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0ExipmflIAmQVj7YR6UN4epTvyM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.38.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:44:94:f5:b8:32:9e:40:62:84:2c:a1:71:33:fc:8f:5f:cd: ef:df:9a:bf:d4:5a:f6:fb:de:85:23:46:98:b5:08:21:6c:8f: 57:09:d9:d5:40:1b:43:4c:08:3d:d1:4d:ac:51:fb:1d:be:aa: c4:d3:bd:9d:b5:ad:57:21:bb:5b:25:2f:8d:09:59:8d:35:2e: c9:f9:c5:9f:97:d0:5f:56:0e:3a:64:e9:5c:7c:8d:9f:e8:8c: 4b:f0:83:2c:79:78:4d:ab:dd:db:fe:4d:78:7e:c9:e7:4b:df: cb:e7:a4:2f:93:4a:1b:9d:a6:1f:d0:ef:ae:df:24:7a:db:c6: 5b:ca:26:ac:f3:dc:83:d9:fa:02:ea:9b:a1:10:be:03:3f:b0: 50:4c:6e:b1:ec:2d:94:57:54:4e:00:a3:c0:13:23:db:7e:ff: d3:5e:e5:25:51:30:15:56:45:6d:8b:b0:ff:23:e2:ec:5a:43: 1f:7d:9a:c7:d1:3e:54:b7:77:27:07:2e:b3:90:90:16:c2:1b: 8b:83:55:7f:c8:c6:ac:2b:06:88:67:6a:6f:48:06:f8:53:19: fc:e5:da:54:07:ab:5d:9b:87:82:27:2f:28:20:7f:bd:11:b3: 96:74:23:67:8c:94:e3:30:22:a9:26:74:6a:3e:46:28:da:36: 2f:ea:1c:09 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0MzlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQwNEM2MkE2NjdFNTIw MDk5MDU2M0VEODQ3QTUwREUxRUE1M0JGMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAs1/uAC/k8rMnn7ohM/G6sAIHpba0ENxOuv+ZBTEB9kfOtWaE gzykGMz0HrtTbaqqhLxNemI+aUq7p5931gZCdsA8IITwR1aeGQ+6d/e+HpksOy0k AJ7pgV7NSTUT3Hk240cDW48KOCxCkXe5ThTFuJ3tAh/fiubv9ixt5/uFushd66It F1TDkIBYYJWoExMjFw0bhqgv1/VjZKOkWKCgHpS0u0IRi6WT4e5MM0ZWd4cAworj VYCT7L2+U0+KI//7wGJjMiQ2JgcaKZSQ+0Mpvu3hwq0m4k1QQwJzcRt1XnaA4Axv iV2NXK7geGYsQhvCgzDEiVhRXUKW9h3yCnFRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0ExipmflIAmQVj7YR6UN4epTvyMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzBFeGlwbWZsSUFtUVZqN1lSNlVONGVwVHZ5TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTyYwDQYJKoZIhvcNAQELBQADggEBAG1ElPW4Mp5AYoQsoXEz/I9fze/f mr/UWvb73oUjRpi1CCFsj1cJ2dVAG0NMCD3RTaxR+x2+qsTTvZ21rVchu1slL40J WY01Lsn5xZ+X0F9WDjpk6Vx8jZ/ojEvwgyx5eE2r3dv+TXh+yedL38vnpC+TShud ph/Q767fJHrbxlvKJqzz3IPZ+gLqm6EQvgM/sFBMbrHsLZRXVE4Ao8ATI9t+/9Ne 5SVRMBVWRW2LsP8j4uxaQx99msfRPlS3dycHLrOQkBbCG4uDVX/IxqwrBohnam9I BvhTGfzl2lQHq12bh4InLyggf70Rs5Z0I2eMlOMwIqkmdGo+RijaNi/qHAk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:53 2025 by rpki-client