$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1ETKaheyu2INE-HK6g6mIK0HMyM.roa File: 1ETKaheyu2INE-HK6g6mIK0HMyM.roa (raw, json) Hash identifier: Te2iRlsX26yf4Ze1QLz0cx+x9jETGZCz2JxvW98w21Y= Subject key identifier: D4:44:CA:6A:17:B2:BB:62:0D:13:E1:CA:EA:0E:A6:20:AD:07:33:23 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B59 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1ETKaheyu2INE-HK6g6mIK0HMyM.roa Signing time: Tue 01 Apr 2025 01:33:21 +0000 ROA not before: Tue 01 Apr 2025 01:33:21 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2905 (0xb59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:33:21 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D444CA6A17B2BB620D13E1CAEA0EA620AD073323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d4:b6:25:60:58:7c:2a:13:6a:5c:93:32:b8: 98:f3:43:c1:b8:36:5b:6b:7a:7e:1f:61:d9:9a:40: 8e:bf:e8:bc:11:8b:8e:6e:49:df:d8:fc:9d:19:c5: d5:1e:36:b3:4b:9e:a1:8c:b7:6b:f9:95:0e:6c:d2: 83:1c:39:e7:4d:e5:11:c4:69:15:85:4f:b9:48:66: 86:da:58:9d:5d:02:80:2d:44:bf:e1:1c:03:87:c3: 75:34:84:19:e8:86:82:a2:23:34:e5:7b:46:43:26: cd:81:7a:22:5d:c6:55:82:ca:f6:32:b9:cb:60:e9: 14:09:da:6f:dd:ed:58:86:f2:5f:04:cc:5a:28:e4: 2e:44:1f:8c:4c:84:af:dd:66:3b:e8:7d:33:4d:d0: 1c:7d:8b:41:c8:af:9a:e6:b7:d4:75:ea:40:9a:b2: 4a:94:fd:82:42:06:b8:28:28:ac:66:fb:0b:e2:8a: a6:53:39:41:45:22:ec:81:da:df:4f:b5:f6:fe:9a: 20:08:cb:f3:a6:05:79:8b:f7:f1:40:66:9d:c6:8d: 29:40:45:c0:61:85:04:d3:66:b8:71:99:a7:be:0a: ba:87:ae:18:59:60:ad:d3:0e:27:45:53:2b:81:cd: 94:36:25:fa:01:e0:b0:d2:9c:59:6d:d2:65:85:07: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:44:CA:6A:17:B2:BB:62:0D:13:E1:CA:EA:0E:A6:20:AD:07:33:23 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1ETKaheyu2INE-HK6g6mIK0HMyM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.88.0/22 Signature Algorithm: sha256WithRSAEncryption 50:32:01:5e:73:a9:30:10:c5:47:8b:c5:21:9a:c1:76:25:f2: 1e:da:80:3f:06:ef:33:dc:6b:fd:9e:48:93:1a:6d:59:62:73: cf:db:c4:ce:6b:75:74:93:14:07:36:3a:b9:11:00:6e:2c:2e: 28:51:1a:05:aa:8f:fb:ef:ba:42:23:62:a1:4e:9d:9d:80:39: ca:f0:18:bf:a1:cb:71:0a:14:bf:67:80:d8:0f:96:a5:93:fb: db:43:49:c6:9a:b8:28:5a:a8:33:48:4f:09:92:89:bc:c4:3b: d2:62:1a:aa:34:84:26:45:fb:a5:33:fa:7d:2f:dc:12:15:50: aa:0a:6b:7d:67:dd:4c:b9:7a:86:65:f6:4e:6f:46:cb:42:f3: bb:9b:8a:36:35:85:70:5a:fe:a7:52:58:ba:68:b4:21:48:22: 73:09:02:d5:8c:a9:ab:5d:5f:c1:c1:99:68:4f:8f:b5:21:f1: 7b:a2:41:e7:f5:9f:8e:9e:13:38:f3:87:54:9b:37:58:2a:5b: ea:45:18:bb:a6:35:29:7f:1e:27:59:bf:89:5d:95:d2:f8:42: a4:b0:ee:a0:3c:85:51:04:1d:7f:7b:d3:ba:a6:da:58:b0:57: 5b:87:77:01:d7:5a:dc:78:2a:36:1e:af:ee:72:67:84:b7:2a: e4:b1:a0:e0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTMzMjFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ0NDRDQTZBMTdCMkJC NjIwRDEzRTFDQUVBMEVBNjIwQUQwNzMzMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS1LYlYFh8KhNqXJMyuJjzQ8G4Nltren4fYdmaQI6/6LwRi45u Sd/Y/J0ZxdUeNrNLnqGMt2v5lQ5s0oMcOedN5RHEaRWFT7lIZobaWJ1dAoAtRL/h HAOHw3U0hBnohoKiIzTle0ZDJs2BeiJdxlWCyvYyuctg6RQJ2m/d7ViG8l8EzFoo 5C5EH4xMhK/dZjvofTNN0Bx9i0HIr5rmt9R16kCaskqU/YJCBrgoKKxm+wviiqZT OUFFIuyB2t9Ptfb+miAIy/OmBXmL9/FAZp3GjSlARcBhhQTTZrhxmae+CrqHrhhZ YK3TDidFUyuBzZQ2JfoB4LDSnFlt0mWFB9ifAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1ETKaheyu2INE+HK6g6mIK0HMyMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzFFVEthaGV5dTJJTkUtSEs2ZzZtSUswSE15TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIb5lgwDQYJKoZIhvcNAQELBQADggEBAFAyAV5zqTAQxUeLxSGawXYl8h7a gD8G7zPca/2eSJMabVlic8/bxM5rdXSTFAc2OrkRAG4sLihRGgWqj/vvukIjYqFO nZ2AOcrwGL+hy3EKFL9ngNgPlqWT+9tDScaauChaqDNITwmSibzEO9JiGqo0hCZF +6Uz+n0v3BIVUKoKa31n3Uy5eoZl9k5vRstC87ubijY1hXBa/qdSWLpotCFIInMJ AtWMqatdX8HBmWhPj7Uh8XuiQef1n46eEzjzh1SbN1gqW+pFGLumNSl/HidZv4ld ldL4QqSw7qA8hVEEHX9707qm2liwV1uHdwHXWtx4KjYer+5yZ4S3KuSxoOA= -----END CERTIFICATE-----Generated at Wed Nov 5 17:23:52 2025 by rpki-client