$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2XDno_Jp41YnMC9fcDPTXPKFVdE.roa File: 2XDno_Jp41YnMC9fcDPTXPKFVdE.roa (raw, json) Hash identifier: 5+NxKuWXu5+K17z/jm0i/ksmpHD7c3LiXEEotVXcHSM= Subject key identifier: D9:70:E7:A3:F2:69:E3:56:27:30:2F:5F:70:33:D3:5C:F2:85:55:D1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D11 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2XDno_Jp41YnMC9fcDPTXPKFVdE.roa Signing time: Tue 01 Apr 2025 02:11:43 +0000 ROA not before: Tue 01 Apr 2025 02:11:43 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 219.122.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3345 (0xd11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:43 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D970E7A3F269E35627302F5F7033D35CF28555D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:39:ad:a6:b1:e5:36:50:d1:f8:5d:32:12:fd: ee:84:74:93:c7:88:4b:6d:eb:93:60:16:5f:58:d6: df:41:a9:0e:51:b7:39:02:4b:2c:2c:c2:3a:1a:db: a8:5b:59:8d:79:35:dd:4c:69:56:6e:1f:11:59:38: be:ee:38:79:a7:2b:b9:95:65:89:c1:85:e4:75:f2: 5c:2a:6c:27:36:3b:b5:26:dc:22:03:ad:c1:37:9c: 2d:9a:24:a7:98:f8:1d:e3:66:24:e9:2c:e6:97:97: 03:b4:5c:a5:71:53:0c:61:0e:25:c2:4b:1b:b4:bf: 69:22:ab:b4:d0:f3:4b:a3:9d:99:e6:a6:8d:fd:b6: 93:37:de:65:80:63:17:94:65:96:0e:1a:f3:28:8f: c6:37:9c:bc:38:8b:c6:68:58:01:14:a2:39:86:32: e1:e3:83:77:e7:a8:0b:fd:c9:78:7f:19:79:6f:17: 51:68:7c:79:3c:fe:50:9c:ef:42:86:b5:aa:35:0f: 3d:6d:6d:9f:16:34:c9:37:01:68:aa:df:29:d4:f4: 8a:f5:32:a0:3d:a1:d5:87:9f:80:93:0a:2e:52:08: 2d:cc:f4:61:0c:6b:47:d1:10:fa:e6:b1:ab:76:8a: 2a:eb:a3:dc:af:97:d1:c0:32:1c:a7:97:55:84:74: 85:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:70:E7:A3:F2:69:E3:56:27:30:2F:5F:70:33:D3:5C:F2:85:55:D1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2XDno_Jp41YnMC9fcDPTXPKFVdE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.122.64.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:93:a9:b4:3c:94:37:11:fd:8c:e5:01:24:ab:c3:3b:fd:c8: 77:85:5f:79:41:d9:cb:37:a5:c0:2c:35:5a:d3:83:14:4b:7d: c1:7e:61:e5:46:73:52:7b:47:f4:7f:4a:0b:5b:c7:e6:b4:e2: 43:9e:c8:35:fe:27:ca:79:de:3d:d4:f1:3d:ff:ee:c3:b1:21: 10:fe:76:3b:1d:ee:b6:a8:4c:46:07:e6:41:69:a0:d1:1a:30: 3f:7a:f2:d3:d0:50:15:58:93:bc:e9:f6:82:77:38:fc:f0:2e: c0:40:f0:e3:00:07:c3:00:c9:a8:ad:43:90:5d:a0:98:3d:c2: e5:c5:7e:c4:94:6f:b2:25:18:61:06:de:35:42:d2:e5:1b:9a: 21:51:b8:09:49:ab:45:f8:c7:66:2f:8b:3c:0d:c7:87:80:bd: b7:82:66:83:aa:cc:a0:ed:ff:d0:00:7d:ca:67:e8:29:82:0d: ab:3c:98:f1:da:09:df:6c:99:3a:68:65:61:bc:e7:a2:f8:46: d8:19:c4:6f:15:3e:9c:2d:5d:ca:77:b0:11:69:01:e0:0b:c4: 00:9e:15:01:df:24:f2:b5:a7:3e:0d:ae:8c:e8:df:47:b2:30: ae:ea:3b:a9:a2:11:ef:77:29:83:bb:80:c6:52:1e:b0:99:bd: 61:f2:6c:cb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExNDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ5NzBFN0EzRjI2OUUz NTYyNzMwMkY1RjcwMzNEMzVDRjI4NTU1RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNOa2mseU2UNH4XTIS/e6EdJPHiEtt65NgFl9Y1t9BqQ5RtzkC Sywswjoa26hbWY15Nd1MaVZuHxFZOL7uOHmnK7mVZYnBheR18lwqbCc2O7Um3CID rcE3nC2aJKeY+B3jZiTpLOaXlwO0XKVxUwxhDiXCSxu0v2kiq7TQ80ujnZnmpo39 tpM33mWAYxeUZZYOGvMoj8Y3nLw4i8ZoWAEUojmGMuHjg3fnqAv9yXh/GXlvF1Fo fHk8/lCc70KGtao1Dz1tbZ8WNMk3AWiq3ynU9Ir1MqA9odWHn4CTCi5SCC3M9GEM a0fREPrmsat2iirro9yvl9HAMhynl1WEdIXPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2XDno/Jp41YnMC9fcDPTXPKFVdEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJYRG5vX0pwNDFZbk1DOWZjRFBUWFBLRlZkRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPbekAwDQYJKoZIhvcNAQELBQADggEBAEyTqbQ8lDcR/YzlASSrwzv9yHeF X3lB2cs3pcAsNVrTgxRLfcF+YeVGc1J7R/R/Sgtbx+a04kOeyDX+J8p53j3U8T3/ 7sOxIRD+djsd7raoTEYH5kFpoNEaMD968tPQUBVYk7zp9oJ3OPzwLsBA8OMAB8MA yaitQ5BdoJg9wuXFfsSUb7IlGGEG3jVC0uUbmiFRuAlJq0X4x2YvizwNx4eAvbeC ZoOqzKDt/9AAfcpn6CmCDas8mPHaCd9smTpoZWG856L4RtgZxG8VPpwtXcp3sBFp AeALxACeFQHfJPK1pz4Nrozo30eyMK7qO6miEe93KYO7gMZSHrCZvWHybMs= -----END CERTIFICATE-----Generated at Wed Nov 5 13:54:02 2025 by rpki-client