$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4YQYTfwF2GnzXxhhaByUsa4SN4s.roa File: 4YQYTfwF2GnzXxhhaByUsa4SN4s.roa (raw, json) Hash identifier: SXZ/u4c/YmuiLM19N8qZvm3vgF8dl53d+7zf1W9X8Y4= Subject key identifier: E1:84:18:4D:FC:05:D8:69:F3:5F:18:61:68:1C:94:B1:AE:12:37:8B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F4D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4YQYTfwF2GnzXxhhaByUsa4SN4s.roa Signing time: Tue 10 Jun 2025 11:28:25 +0000 ROA not before: Tue 10 Jun 2025 11:28:25 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.161.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3917 (0xf4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:28:25 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=E184184DFC05D869F35F1861681C94B1AE12378B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:49:b3:c1:ce:b6:04:a2:6d:9c:18:e6:66:0a: 23:af:e7:f1:17:68:05:57:a7:b5:67:d6:9a:9a:df: ad:2f:f0:be:6f:94:c1:3a:52:c2:54:25:37:4f:aa: b0:1b:68:d5:7c:b9:5c:14:9b:6f:47:0d:6a:f4:ac: 17:e4:5b:46:8a:21:3f:da:8c:73:5d:9e:d3:1d:1e: c6:ce:d4:f6:31:7b:48:62:32:4c:b8:0b:be:c8:78: 29:b4:53:c6:6f:b6:b9:91:29:7d:06:bd:6c:ae:1c: 75:7e:03:ae:e1:98:63:70:f1:fd:cd:85:bc:b9:14: ac:1d:49:ec:42:a8:12:a3:51:11:5d:c7:3b:3e:9e: f9:18:db:6a:39:24:64:5d:ae:07:62:d8:ef:5c:b1: 69:d9:30:cf:41:76:5e:09:ac:bf:4a:c8:e7:a6:ab: 54:27:c7:d5:46:df:85:0b:90:3b:18:79:09:41:29: af:48:24:60:49:5a:10:5c:b5:ec:e8:93:ab:61:76: 99:9c:0b:e3:c1:bc:2e:00:8c:e4:30:f6:e8:2c:22: 28:bc:a6:88:5f:42:44:3f:78:e0:73:d4:d8:81:e3: b9:f6:fa:c2:93:6c:0b:03:2a:84:cf:ec:30:b0:1d: b0:0f:db:9a:d1:55:d2:cc:5e:e2:63:69:b8:79:56: 59:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:84:18:4D:FC:05:D8:69:F3:5F:18:61:68:1C:94:B1:AE:12:37:8B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4YQYTfwF2GnzXxhhaByUsa4SN4s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.128.0/19 Signature Algorithm: sha256WithRSAEncryption 0e:b1:d3:eb:1c:5f:8d:15:7c:ff:be:95:0b:52:db:c1:10:7a: 02:99:7e:51:81:97:a3:8b:9f:19:2d:18:81:31:20:16:9f:95: de:40:8b:6a:12:7e:66:84:c7:3a:18:cc:d4:af:9e:9e:50:93: a6:c3:21:3c:8c:be:62:e9:ad:a1:10:31:87:4a:78:dd:98:17: 50:99:ed:42:83:36:87:28:53:a5:aa:17:e5:83:21:db:ce:1d: d3:57:d3:f4:e0:1e:e1:49:20:ce:5b:64:39:c1:d9:62:6b:6c: 1e:61:22:34:4f:77:9a:c5:fe:5e:98:7f:05:d0:4c:36:94:20: 50:6c:8f:54:6e:53:0b:55:a7:a1:a6:32:15:b9:25:f8:d4:08: c4:5c:05:94:65:cf:42:59:e4:05:39:43:ce:4a:ad:50:fd:49: 43:a7:91:98:42:56:b9:06:c8:ba:63:71:47:a2:6f:90:22:9e: b1:62:83:cb:9e:52:2e:a5:c1:c9:ac:46:2a:3d:6b:b6:83:55: 41:f1:8d:3f:e2:c6:a9:c7:34:d5:18:97:e7:25:fc:70:94:ee: 15:9e:ce:d5:ae:58:3d:fb:7b:07:b6:c8:37:2a:fa:d6:98:64: 73:81:92:e6:6c:69:62:c5:86:92:c6:5f:b7:cf:76:ec:06:89: 1f:b9:ba:9b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD00wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI4MjVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEUxODQxODRERkMwNUQ4 NjlGMzVGMTg2MTY4MUM5NEIxQUUxMjM3OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3SbPBzrYEom2cGOZmCiOv5/EXaAVXp7Vn1pqa360v8L5vlME6 UsJUJTdPqrAbaNV8uVwUm29HDWr0rBfkW0aKIT/ajHNdntMdHsbO1PYxe0hiMky4 C77IeCm0U8ZvtrmRKX0GvWyuHHV+A67hmGNw8f3Nhby5FKwdSexCqBKjURFdxzs+ nvkY22o5JGRdrgdi2O9csWnZMM9Bdl4JrL9KyOemq1Qnx9VG34ULkDsYeQlBKa9I JGBJWhBctezok6thdpmcC+PBvC4AjOQw9ugsIii8pohfQkQ/eOBz1NiB47n2+sKT bAsDKoTP7DCwHbAP25rRVdLMXuJjabh5VlmhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4YQYTfwF2GnzXxhhaByUsa4SN4swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzRZUVlUZndGMkduelh4aGhhQnlVc2E0U040cy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVuoYAwDQYJKoZIhvcNAQELBQADggEBAA6x0+scX40VfP++lQtS28EQegKZ flGBl6OLnxktGIExIBafld5Ai2oSfmaExzoYzNSvnp5Qk6bDITyMvmLpraEQMYdK eN2YF1CZ7UKDNocoU6WqF+WDIdvOHdNX0/TgHuFJIM5bZDnB2WJrbB5hIjRPd5rF /l6YfwXQTDaUIFBsj1RuUwtVp6GmMhW5JfjUCMRcBZRlz0JZ5AU5Q85KrVD9SUOn kZhCVrkGyLpjcUeib5AinrFig8ueUi6lwcmsRio9a7aDVUHxjT/ixqnHNNUYl+cl /HCU7hWeztWuWD37ewe2yDcq+taYZHOBkuZsaWLFhpLGX7fPduwGiR+5ups= -----END CERTIFICATE-----Generated at Wed Nov 5 13:52:43 2025 by rpki-client