$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5fhuKUVqAeCO42156VPxZHpO6MI.roa File: 5fhuKUVqAeCO42156VPxZHpO6MI.roa (raw, json) Hash identifier: ulvpQd/olrkJQ8DZGWhhE3INXxvges+nrhJ8wZwRqss= Subject key identifier: E5:F8:6E:29:45:6A:01:E0:8E:E3:6D:79:E9:53:F1:64:7A:4E:E8:C2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F8A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5fhuKUVqAeCO42156VPxZHpO6MI.roa Signing time: Tue 10 Jun 2025 11:36:17 +0000 ROA not before: Tue 10 Jun 2025 11:36:17 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.72.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3978 (0xf8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:36:17 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=E5F86E29456A01E08EE36D79E953F1647A4EE8C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9b:52:01:21:aa:a4:f3:b4:4c:e3:90:9b:16: 65:71:6f:b8:74:ae:d4:0c:a3:45:32:45:0f:e9:34: ee:df:64:6c:0e:52:39:7e:6a:22:67:9e:ed:ef:bf: 00:71:79:fb:d4:4b:13:92:81:94:33:06:08:7d:c4: f3:7e:d0:de:b7:3d:01:e7:f8:36:14:53:3e:82:64: 7e:b7:42:8e:af:e1:1a:21:a2:dc:0e:60:3e:da:57: f6:df:71:30:cc:39:3e:c8:85:f1:6d:64:f2:8c:01: 5c:f4:b5:ad:5a:87:f6:59:f8:06:f3:56:f7:67:34: 72:ac:02:d3:74:38:8b:9e:9b:16:42:e3:af:a4:ba: aa:55:30:ec:0c:7a:cb:7e:90:3c:54:45:05:b9:ed: ab:68:2b:99:fe:54:0b:ce:b5:3d:e8:d1:b2:62:0d: 06:97:8f:57:21:a5:e1:ad:44:85:88:af:70:16:5e: 43:b6:ce:b2:1e:73:41:56:20:c8:37:63:ad:00:8d: 86:09:14:65:f8:b8:86:34:5d:d6:be:6e:5c:bc:8f: 05:57:af:04:c5:4f:cc:12:82:08:34:23:c6:87:fc: 8c:60:cd:01:d0:5d:99:ef:51:14:06:32:ff:79:96: c4:da:26:37:1d:03:41:50:b5:6a:57:23:3a:15:12: 63:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F8:6E:29:45:6A:01:E0:8E:E3:6D:79:E9:53:F1:64:7A:4E:E8:C2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5fhuKUVqAeCO42156VPxZHpO6MI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.14.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:56:e0:2c:66:c7:c5:a3:aa:6d:2e:bd:a2:54:2e:8e:c1:43: ef:3e:b7:cb:b4:00:87:1e:ae:d6:0b:e8:f5:58:b9:8b:b2:90: 1c:16:d9:78:b9:b3:90:d1:23:95:03:23:3b:58:a6:e4:f1:71: 3e:f6:6d:87:b9:68:86:da:8c:b8:ea:ce:ba:5e:17:65:d8:30: ca:d3:74:52:ed:87:56:0d:bc:c5:8a:13:3c:7f:66:ac:6e:f9: 50:dd:b8:75:80:c4:fe:34:78:9a:3b:12:d3:10:a2:1d:01:08: c7:ec:a5:28:61:25:72:8b:91:7b:37:08:90:98:14:a8:67:eb: 09:4a:c7:d6:b2:11:59:bd:cd:ab:5b:39:04:50:6b:10:7a:eb: fd:f7:4c:e9:ea:10:b8:72:37:73:db:6f:c7:1a:50:af:f6:5d: 2c:cc:d5:c8:13:cc:d5:89:48:6f:7a:21:c1:40:59:84:3b:fe: 2a:c1:20:6b:aa:69:16:1e:6f:66:45:74:83:ad:00:44:98:7c: 83:28:e7:9b:93:cf:76:ea:ed:31:78:92:14:cd:8b:80:0f:a7: 20:31:47:78:be:5d:73:b7:c0:60:e9:11:b2:36:56:37:c5:8f: ff:a5:5a:b9:a3:b9:00:03:b0:8a:24:d7:3c:cb:a5:b5:80:36: a2:03:92:a4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTM2MTdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEU1Rjg2RTI5NDU2QTAx RTA4RUUzNkQ3OUU5NTNGMTY0N0E0RUU4QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzm1IBIaqk87RM45CbFmVxb7h0rtQMo0UyRQ/pNO7fZGwOUjl+ aiJnnu3vvwBxefvUSxOSgZQzBgh9xPN+0N63PQHn+DYUUz6CZH63Qo6v4RohotwO YD7aV/bfcTDMOT7IhfFtZPKMAVz0ta1ah/ZZ+AbzVvdnNHKsAtN0OIuemxZC46+k uqpVMOwMest+kDxURQW57atoK5n+VAvOtT3o0bJiDQaXj1chpeGtRIWIr3AWXkO2 zrIec0FWIMg3Y60AjYYJFGX4uIY0Xda+bly8jwVXrwTFT8wSggg0I8aH/IxgzQHQ XZnvURQGMv95lsTaJjcdA0FQtWpXIzoVEmMLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU5fhuKUVqAeCO42156VPxZHpO6MIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzVmaHVLVVZxQWVDTzQyMTU2VlB4WkhwTzZNSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSA4wDQYJKoZIhvcNAQELBQADggEBAE1W4Cxmx8Wjqm0uvaJULo7BQ+8+ t8u0AIcertYL6PVYuYuykBwW2Xi5s5DRI5UDIztYpuTxcT72bYe5aIbajLjqzrpe F2XYMMrTdFLth1YNvMWKEzx/Zqxu+VDduHWAxP40eJo7EtMQoh0BCMfspShhJXKL kXs3CJCYFKhn6wlKx9ayEVm9zatbOQRQaxB66/33TOnqELhyN3Pbb8caUK/2XSzM 1cgTzNWJSG96IcFAWYQ7/irBIGuqaRYeb2ZFdIOtAESYfIMo55uTz3bq7TF4khTN i4APpyAxR3i+XXO3wGDpEbI2VjfFj/+lWrmjuQADsIok1zzLpbWANqIDkqQ= -----END CERTIFICATE-----Generated at Wed Nov 5 17:23:17 2025 by rpki-client