$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5q-E4Xxu4XcAyX3z9e2o7U96qyY.roa File: 5q-E4Xxu4XcAyX3z9e2o7U96qyY.roa (raw, json) Hash identifier: mLBN4VD/aBALB/gDIXPTAuMpwJHNwyV0iM09eV1bG0U= Subject key identifier: E6:AF:84:E1:7C:6E:E1:77:00:C9:7D:F3:F5:ED:A8:ED:4F:7A:AB:26 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E79 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5q-E4Xxu4XcAyX3z9e2o7U96qyY.roa Signing time: Tue 10 Jun 2025 10:53:36 +0000 ROA not before: Tue 10 Jun 2025 10:53:36 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 219.114.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3705 (0xe79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:53:36 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=E6AF84E17C6EE17700C97DF3F5EDA8ED4F7AAB26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f9:76:a4:85:6e:a6:82:4f:9a:81:1e:f2:03: ac:2e:04:f4:b7:96:ab:40:e3:85:c6:66:3c:2c:82: 98:6c:02:c5:ef:fe:88:fb:1a:20:26:27:7e:16:d5: cf:d4:38:9a:0d:30:ec:c9:9c:4d:af:0b:50:f2:83: 72:49:e1:00:d5:4e:11:df:b1:21:10:8e:11:e9:bb: 56:d3:0e:68:63:d7:02:32:d1:d7:d5:8f:71:2b:66: 88:6b:98:c5:0a:a0:65:26:5b:c7:01:8c:a9:d7:c9: 4a:ac:88:03:42:fa:45:3e:df:16:02:60:a0:fb:6a: 08:56:1f:5b:7d:12:43:d7:3b:c2:14:29:8b:b4:fd: 8b:2c:f6:b8:4d:66:a6:f0:e3:54:ea:c3:96:40:a0: 13:36:cf:ce:2c:8e:ca:c3:cf:26:2d:03:47:cc:32: 44:2a:9e:11:05:25:13:7c:b9:44:75:23:08:68:4e: 78:f4:78:ad:7d:12:7b:c7:be:1b:b9:91:60:ff:f9: 9e:c3:6e:96:d6:04:78:81:64:2f:70:15:f1:69:fe: 4b:64:3f:cd:5a:45:0c:c4:84:5b:f5:05:27:9d:0d: 93:3b:19:82:5d:3b:3a:72:4a:e6:c5:4e:3a:c4:6a: ff:49:93:7f:7b:42:0c:66:02:83:80:89:04:43:09: 9e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AF:84:E1:7C:6E:E1:77:00:C9:7D:F3:F5:ED:A8:ED:4F:7A:AB:26 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5q-E4Xxu4XcAyX3z9e2o7U96qyY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.172.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:a8:d0:19:ea:e0:c1:f9:2a:89:c7:0f:13:b6:fb:73:44:1b: 2c:1a:c6:6d:1f:2d:9f:42:1d:1f:68:13:2d:2e:5f:70:e1:9c: 2d:47:08:2f:f8:98:21:38:a3:0b:fe:70:72:c7:10:c9:c0:63: f6:08:37:eb:da:81:ab:ed:6c:8e:b1:02:b0:e6:92:88:13:6d: bd:b2:88:4e:d5:8a:ff:fb:de:9c:18:08:83:5f:ef:7c:b5:15: 05:bf:01:ac:42:39:05:f3:40:5f:8f:8e:fe:6c:78:f3:8c:45: 61:ff:cb:16:d2:a6:2e:ca:48:34:00:69:84:ea:31:54:63:2d: 3b:50:82:e7:e2:27:22:3d:28:71:c9:ca:da:e6:a1:65:f8:dd: b4:c4:51:e9:0b:3d:ec:85:cf:17:cb:76:b8:a5:13:1f:a4:68: 66:5d:8f:dc:ec:52:56:9f:20:8b:f5:87:11:22:e7:42:a9:0f: 40:65:eb:9e:d9:df:07:21:46:c2:3e:15:ba:03:f9:ba:55:98: 2f:d9:2e:21:79:32:61:3e:3a:e5:1c:39:34:2c:f0:23:05:c8: 59:e4:de:8d:f0:0c:f0:64:fe:75:55:a8:a8:6e:ef:fe:2e:ed: 65:5d:f5:b0:0e:59:0a:89:db:88:5a:37:bf:33:c5:d3:28:bb: a6:7f:03:c7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDnkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDUzMzZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEU2QUY4NEUxN0M2RUUx NzcwMEM5N0RGM0Y1RURBOEVENEY3QUFCMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq+XakhW6mgk+agR7yA6wuBPS3lqtA44XGZjwsgphsAsXv/oj7 GiAmJ34W1c/UOJoNMOzJnE2vC1Dyg3JJ4QDVThHfsSEQjhHpu1bTDmhj1wIy0dfV j3ErZohrmMUKoGUmW8cBjKnXyUqsiANC+kU+3xYCYKD7aghWH1t9EkPXO8IUKYu0 /Yss9rhNZqbw41Tqw5ZAoBM2z84sjsrDzyYtA0fMMkQqnhEFJRN8uUR1IwhoTnj0 eK19EnvHvhu5kWD/+Z7DbpbWBHiBZC9wFfFp/ktkP81aRQzEhFv1BSedDZM7GYJd OzpySubFTjrEav9Jk397QgxmAoOAiQRDCZ4tAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU5q+E4Xxu4XcAyX3z9e2o7U96qyYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzVxLUU0WHh1NFhjQXlYM3o5ZTJvN1U5NnF5WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbcqwwDQYJKoZIhvcNAQELBQADggEBAI+o0Bnq4MH5KonHDxO2+3NEGywa xm0fLZ9CHR9oEy0uX3DhnC1HCC/4mCE4owv+cHLHEMnAY/YIN+vagavtbI6xArDm kogTbb2yiE7Viv/73pwYCINf73y1FQW/AaxCOQXzQF+Pjv5sePOMRWH/yxbSpi7K SDQAaYTqMVRjLTtQgufiJyI9KHHJytrmoWX43bTEUekLPeyFzxfLdrilEx+kaGZd j9zsUlafIIv1hxEi50KpD0Bl657Z3wchRsI+FboD+bpVmC/ZLiF5MmE+OuUcOTQs 8CMFyFnk3o3wDPBk/nVVqKhu7/4u7WVd9bAOWQqJ24haN78zxdMou6Z/A8c= -----END CERTIFICATE-----Generated at Wed Nov 5 17:24:44 2025 by rpki-client