$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/36-JR3GBlhnZ0J6DV1xI9mUDocU.roa File: 36-JR3GBlhnZ0J6DV1xI9mUDocU.roa (raw, json) Hash identifier: 1DzB4Gj70VS+aQYbnOKVepax7FzdS17RXUQYh9bH6sI= Subject key identifier: DF:AF:89:47:71:81:96:19:D9:D0:9E:83:57:5C:48:F6:65:03:A1:C5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D01 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/36-JR3GBlhnZ0J6DV1xI9mUDocU.roa Signing time: Tue 01 Apr 2025 02:11:37 +0000 ROA not before: Tue 01 Apr 2025 02:11:37 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3329 (0xd01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:37 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=DFAF894771819619D9D09E83575C48F66503A1C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:69:1a:47:dd:a3:77:8e:05:9d:d8:ed:ba: 1e:77:41:5f:6d:8c:71:8f:4d:6f:1b:68:e0:a9:9e: 33:86:cc:4f:c8:42:eb:21:5b:2d:c1:f9:71:22:87: 45:18:19:06:38:5f:70:cd:c2:df:0a:b7:82:22:3d: 3b:a2:3f:ee:4c:da:27:62:ec:56:4f:d0:fe:80:3b: 01:f5:43:0e:08:8c:35:5b:37:30:f3:5e:7e:02:03: 77:8d:34:06:c6:fc:7a:aa:43:10:17:f4:59:3b:9b: f5:95:cd:01:f7:8e:3e:96:85:59:f4:a9:3d:4d:70: 77:0f:cf:cf:9a:b1:05:bc:61:f7:aa:7e:dc:7e:91: bc:7b:2f:a6:7a:93:10:9c:74:23:d5:06:20:9b:72: 37:2e:6c:f5:a1:b2:25:b3:e3:98:ad:b8:b0:88:d3: 22:b3:d7:4b:b2:55:f8:40:e0:fb:c0:d6:bb:95:e4: 68:0d:2d:b2:82:10:cd:7d:6f:1b:fc:8c:d0:c3:43: ea:f1:5f:4a:98:02:7b:eb:16:f6:87:a5:8b:41:e3: 49:ee:a5:84:0f:35:58:78:4d:41:52:a8:84:a0:ab: ae:53:f0:15:ce:0d:0a:d7:ea:c1:31:d9:53:ec:82: ed:a2:e0:e8:f9:95:6f:fb:65:0c:8e:69:10:05:37: 75:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AF:89:47:71:81:96:19:D9:D0:9E:83:57:5C:48:F6:65:03:A1:C5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/36-JR3GBlhnZ0J6DV1xI9mUDocU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.28.0/23 Signature Algorithm: sha256WithRSAEncryption 37:b3:98:87:15:72:e7:18:61:fe:f9:01:16:1e:5f:e8:a4:f6: 26:6e:10:fe:9d:b9:4d:da:1b:9c:88:5c:97:78:2c:18:39:bc: 8a:d5:0a:f3:21:b8:68:c9:42:77:67:31:08:cf:a4:68:ed:e5: 8b:81:ab:54:31:2d:5f:5c:9c:94:39:1e:8f:16:9b:e6:50:3c: a6:02:4f:77:74:53:0c:2e:4d:b9:46:d4:cf:c7:00:dd:5d:68: 55:65:f2:52:c2:2b:97:50:45:65:99:77:74:cf:88:3d:de:08: 5a:10:1a:d3:9c:2a:71:b7:05:c2:c8:0e:f7:49:01:90:12:23: 3d:68:4d:1b:ad:fb:d1:08:af:41:53:8c:16:d2:85:5a:c8:9e: c4:c2:8a:b0:74:bb:46:07:e6:1e:6e:e4:d3:ab:bd:2a:a2:94: 62:90:94:74:e0:0b:63:1e:c6:48:12:82:e0:85:19:1e:ca:85: 86:c2:4d:5e:a9:93:07:cc:cf:5d:cb:6d:9a:63:aa:4b:a9:92: ea:d4:81:6d:24:cf:eb:1a:ff:df:02:f4:a5:a9:4d:2c:5a:65: b4:6b:10:8c:78:91:78:91:4c:38:7a:46:10:7d:53:00:e1:a3: fc:11:23:c8:a2:79:ef:53:6e:51:e5:6a:71:64:a7:cb:71:5a: 59:07:fc:58 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExMzdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERGQUY4OTQ3NzE4MTk2 MTlEOUQwOUU4MzU3NUM0OEY2NjUwM0ExQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCydWkaR92jd44Fndjtuh53QV9tjHGPTW8baOCpnjOGzE/IQush Wy3B+XEih0UYGQY4X3DNwt8Kt4IiPTuiP+5M2idi7FZP0P6AOwH1Qw4IjDVbNzDz Xn4CA3eNNAbG/HqqQxAX9Fk7m/WVzQH3jj6WhVn0qT1NcHcPz8+asQW8Yfeqftx+ kbx7L6Z6kxCcdCPVBiCbcjcubPWhsiWz45ituLCI0yKz10uyVfhA4PvA1ruV5GgN LbKCEM19bxv8jNDDQ+rxX0qYAnvrFvaHpYtB40nupYQPNVh4TUFSqISgq65T8BXO DQrX6sEx2VPsgu2i4Oj5lW/7ZQyOaRAFN3W1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU36+JR3GBlhnZ0J6DV1xI9mUDocUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzM2LUpSM0dCbGhuWjBKNkRWMXhJOW1VRG9jVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTxwwDQYJKoZIhvcNAQELBQADggEBADezmIcVcucYYf75ARYeX+ik9iZu EP6duU3aG5yIXJd4LBg5vIrVCvMhuGjJQndnMQjPpGjt5YuBq1QxLV9cnJQ5Ho8W m+ZQPKYCT3d0UwwuTblG1M/HAN1daFVl8lLCK5dQRWWZd3TPiD3eCFoQGtOcKnG3 BcLIDvdJAZASIz1oTRut+9EIr0FTjBbShVrInsTCirB0u0YH5h5u5NOrvSqilGKQ lHTgC2MexkgSguCFGR7KhYbCTV6pkwfMz13LbZpjqkupkurUgW0kz+sa/98C9KWp TSxaZbRrEIx4kXiRTDh6RhB9UwDho/wRI8iiee9TblHlanFkp8txWlkH/Fg= -----END CERTIFICATE-----Generated at Wed Nov 5 18:52:58 2025 by rpki-client