$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2_ub9PVQQ0z46EOVus5qyEItPd4.roa File: 2_ub9PVQQ0z46EOVus5qyEItPd4.roa (raw, json) Hash identifier: bD9iJh8nMu+2HMXlqj94gRx7mFly2BU5APKIfD18Dvg= Subject key identifier: DB:FB:9B:F4:F5:50:43:4C:F8:E8:43:95:BA:CE:6A:C8:42:2D:3D:DE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C90 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2_ub9PVQQ0z46EOVus5qyEItPd4.roa Signing time: Tue 01 Apr 2025 02:03:21 +0000 ROA not before: Tue 01 Apr 2025 02:03:21 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.74.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3216 (0xc90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:21 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=DBFB9BF4F550434CF8E84395BACE6AC8422D3DDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:3c:4e:25:e3:af:79:83:86:64:72:8b:e1: cb:ef:c9:c6:f2:cb:8d:a8:87:f2:9e:95:99:fb:e3: 18:d1:a1:52:30:cb:0e:d8:08:33:71:c3:f3:ff:8c: 23:01:dd:2d:08:5f:59:b3:f5:4b:14:1f:c8:67:91: ec:6a:9a:df:74:1e:21:cb:f7:fb:fc:ab:2a:1b:0a: ae:ae:d7:35:d8:3f:2b:e1:34:8f:6f:bc:ea:29:d3: 4c:49:f3:2f:7c:54:82:6d:6c:cf:43:81:da:90:d3: ee:4d:45:00:bc:ee:f3:18:df:62:ee:27:a2:30:6e: b6:02:0d:d7:51:bd:fb:df:22:3f:96:20:80:5c:a6: 4b:97:86:21:a9:c0:89:22:ca:67:9d:92:2d:3f:21: ed:52:ae:84:74:45:fb:a6:2e:40:14:99:5f:14:5c: ab:5b:d9:07:d3:6f:df:8f:b2:00:22:eb:4e:89:ae: 4c:dd:d0:e1:f9:21:e9:11:6e:2a:a4:72:dd:0a:9a: 23:c4:dd:85:fa:7c:d1:92:38:6c:ca:ca:36:4a:2c: f5:2d:6a:53:00:6c:e6:28:47:a8:ee:51:9d:76:16: e8:77:e6:3e:9f:df:db:9d:b4:c6:a0:f0:1e:bb:73: 9a:c6:6e:3f:e7:8a:1f:d0:45:8e:ce:8c:e5:18:f4: 82:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FB:9B:F4:F5:50:43:4C:F8:E8:43:95:BA:CE:6A:C8:42:2D:3D:DE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2_ub9PVQQ0z46EOVus5qyEItPd4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.64.0/18 Signature Algorithm: sha256WithRSAEncryption 84:9a:84:75:c7:fd:92:6d:e5:5f:89:ab:1f:4a:00:93:18:67: c1:2d:b1:d0:4f:0d:52:85:43:0e:02:79:ba:81:62:20:01:a3: 08:64:99:b6:dd:cb:fe:1a:8d:43:d4:8a:24:27:35:86:3d:4f: c8:2d:a6:7e:a7:7f:e3:ce:33:39:d7:89:61:94:89:be:06:f9: af:3a:86:88:e8:df:50:87:d2:7e:73:aa:3f:94:6f:ce:c4:41: d7:c3:97:85:10:8e:9d:f4:f2:b3:56:84:64:45:a9:12:d2:54: 44:16:b4:43:b1:37:48:f7:ae:7a:fc:67:8f:4a:00:e8:3c:0d: 9d:88:55:be:af:9d:46:a0:b2:bb:1a:3d:3f:f7:e8:db:37:ea: 0b:8b:a3:61:7c:68:71:66:8c:52:8e:a2:cd:7f:ca:9b:d4:4b: 45:d5:f4:22:dc:85:10:33:4e:55:39:14:29:e0:8a:f2:17:06: 87:2f:ab:d5:b1:46:b9:16:65:21:bd:bd:96:70:38:8b:02:f8: 1d:44:bd:93:8c:2e:a8:69:72:c7:08:b7:03:0d:ff:8a:60:f8: 42:a7:46:83:30:22:d0:b9:79:63:4d:3f:47:ad:69:20:04:f6: 08:35:37:76:44:bb:20:e0:b0:76:1a:82:68:b8:fa:e4:21:1b: bf:7e:b8:c3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMjFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERCRkI5QkY0RjU1MDQz NENGOEU4NDM5NUJBQ0U2QUM4NDIyRDNEREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOuTxOJeOveYOGZHKL4cvvycbyy42oh/KelZn74xjRoVIwyw7Y CDNxw/P/jCMB3S0IX1mz9UsUH8hnkexqmt90HiHL9/v8qyobCq6u1zXYPyvhNI9v vOop00xJ8y98VIJtbM9DgdqQ0+5NRQC87vMY32LuJ6IwbrYCDddRvfvfIj+WIIBc pkuXhiGpwIkiymedki0/Ie1SroR0RfumLkAUmV8UXKtb2QfTb9+PsgAi606Jrkzd 0OH5IekRbiqkct0KmiPE3YX6fNGSOGzKyjZKLPUtalMAbOYoR6juUZ12Fuh35j6f 39udtMag8B67c5rGbj/nih/QRY7OjOUY9IIfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2/ub9PVQQ0z46EOVus5qyEItPd4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJfdWI5UFZRUTB6NDZFT1Z1czVxeUVJdFBkNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYBSkAwDQYJKoZIhvcNAQELBQADggEBAISahHXH/ZJt5V+Jqx9KAJMYZ8Et sdBPDVKFQw4CebqBYiABowhkmbbdy/4ajUPUiiQnNYY9T8gtpn6nf+POMznXiWGU ib4G+a86hojo31CH0n5zqj+Ub87EQdfDl4UQjp308rNWhGRFqRLSVEQWtEOxN0j3 rnr8Z49KAOg8DZ2IVb6vnUagsrsaPT/36Ns36guLo2F8aHFmjFKOos1/ypvUS0XV 9CLchRAzTlU5FCngivIXBocvq9WxRrkWZSG9vZZwOIsC+B1EvZOMLqhpcscItwMN /4pg+EKnRoMwItC5eWNNP0etaSAE9gg1N3ZEuyDgsHYagmi4+uQhG79+uMM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:26:15 2025 by rpki-client