$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7RFj9kS1_YFYbwNV8D3c2sCjGUc.roa File: 7RFj9kS1_YFYbwNV8D3c2sCjGUc.roa (raw, json) Hash identifier: k7VsmPKu6JUEFQcS8G7hUMBH1/mRCJLZVQN7Jhpp26Y= Subject key identifier: ED:11:63:F6:44:B5:FD:81:58:6F:03:55:F0:3D:DC:DA:C0:A3:19:47 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E34 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7RFj9kS1_YFYbwNV8D3c2sCjGUc.roa Signing time: Tue 01 Apr 2025 02:33:35 +0000 ROA not before: Tue 01 Apr 2025 02:33:35 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3636 (0xe34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:33:35 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=ED1163F644B5FD81586F0355F03DDCDAC0A31947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:d5:da:c7:f8:74:33:b2:8c:66:6c:bf:30: 04:72:14:ab:3d:c9:0e:eb:9a:72:fb:85:97:cf:b9: 9e:21:61:0a:e5:60:af:fb:ab:85:ef:bb:79:1d:5a: ea:f1:08:52:75:32:a3:1d:7f:00:76:0e:3b:56:0d: c4:5b:fe:76:b5:92:ff:1c:2c:1a:ce:80:77:37:d0: 45:50:fb:eb:6f:19:3f:2c:d6:34:4e:f6:d3:b3:f0: 55:dc:b6:79:36:4e:6b:da:34:54:1d:ca:d4:d4:c7: 50:3b:aa:19:df:08:6c:25:90:e0:55:b2:6e:2f:12: 7c:52:ea:4a:c6:76:23:14:c2:68:46:33:2f:f8:06: d8:53:dd:ee:30:4d:d1:da:2a:e9:4d:d7:5d:1a:35: be:b1:07:43:c5:d5:f2:ed:01:20:5f:05:d9:44:7a: b5:ab:33:4e:95:6f:a3:21:25:af:5d:a2:63:89:58: 54:e1:21:f8:d2:03:c4:c2:24:af:c2:d3:e8:9e:a5: a3:88:e1:19:7b:08:c8:62:d6:9b:8e:a1:28:f1:dc: 47:0d:4e:cb:81:26:74:64:9f:61:77:bf:8c:58:c7: 4a:50:a9:c8:bc:7e:3a:b2:5e:28:63:83:78:ac:c4: 85:1f:f9:3b:ca:77:f6:10:25:c1:2c:d7:5b:6a:52: 92:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:11:63:F6:44:B5:FD:81:58:6F:03:55:F0:3D:DC:DA:C0:A3:19:47 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7RFj9kS1_YFYbwNV8D3c2sCjGUc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.96.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:3e:4e:5a:8b:f6:b6:67:d6:dd:3f:89:d8:74:13:dd:bf:34: 78:2e:68:8c:ea:4c:ff:c8:b7:69:e5:97:71:9c:6e:00:c2:69: 53:a4:95:e7:54:b0:a2:f2:58:0c:04:08:f5:0f:0a:80:51:8a: 79:9e:e5:29:82:4c:62:87:83:4e:14:8d:47:70:7b:30:7d:28: cb:cb:d5:7d:6f:a8:c0:df:43:84:0f:ec:a7:81:df:c4:92:7e: 39:39:07:df:e7:01:e1:b3:b9:78:a6:50:62:e4:5e:a9:43:5d: e9:03:31:b2:f9:4e:2a:84:ff:8b:1c:92:72:73:da:cf:56:35: e4:8f:73:dd:f6:92:cd:67:cf:18:db:8b:b3:0d:30:df:66:75: 78:10:e7:78:56:0d:3a:3a:4b:d6:8f:79:6d:31:ff:c6:ee:88: 67:6e:c0:a8:7f:35:b4:3f:89:8c:72:80:10:f0:44:f8:53:53: b3:34:9e:8b:30:e2:92:43:76:7a:31:d4:14:40:9b:32:98:37: 1e:7c:d8:0c:fe:9e:fd:f3:56:00:c3:ff:3f:e8:2e:c8:81:db: 7f:cd:45:a3:fb:53:a5:32:cd:98:31:41:21:d7:5c:06:72:75: 27:90:b7:90:d3:15:1c:5e:1a:5e:17:be:a2:cb:97:86:2b:5f: a7:5f:d3:43 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMzMzVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVEMTE2M0Y2NDRCNUZE ODE1ODZGMDM1NUYwM0REQ0RBQzBBMzE5NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmldXax/h0M7KMZmy/MARyFKs9yQ7rmnL7hZfPuZ4hYQrlYK/7 q4Xvu3kdWurxCFJ1MqMdfwB2DjtWDcRb/na1kv8cLBrOgHc30EVQ++tvGT8s1jRO 9tOz8FXctnk2TmvaNFQdytTUx1A7qhnfCGwlkOBVsm4vEnxS6krGdiMUwmhGMy/4 BthT3e4wTdHaKulN110aNb6xB0PF1fLtASBfBdlEerWrM06Vb6MhJa9domOJWFTh IfjSA8TCJK/C0+iepaOI4Rl7CMhi1puOoSjx3EcNTsuBJnRkn2F3v4xYx0pQqci8 fjqyXihjg3isxIUf+TvKd/YQJcEs11tqUpI9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7RFj9kS1/YFYbwNV8D3c2sCjGUcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzdSRmo5a1MxX1lGWWJ3TlY4RDNjMnNDakdVYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBT2AwDQYJKoZIhvcNAQELBQADggEBAB8+TlqL9rZn1t0/idh0E92/NHgu aIzqTP/It2nll3GcbgDCaVOkledUsKLyWAwECPUPCoBRinme5SmCTGKHg04UjUdw ezB9KMvL1X1vqMDfQ4QP7KeB38SSfjk5B9/nAeGzuXimUGLkXqlDXekDMbL5TiqE /4scknJz2s9WNeSPc932ks1nzxjbi7MNMN9mdXgQ53hWDTo6S9aPeW0x/8buiGdu wKh/NbQ/iYxygBDwRPhTU7M0nosw4pJDdnox1BRAmzKYNx582Az+nv3zVgDD/z/o LsiB23/NRaP7U6UyzZgxQSHXXAZydSeQt5DTFRxeGl4XvqLLl4YrX6df00M= -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:14 2025 by rpki-client