$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8cFKfrjD6iLs6wdG--AYcSjpkRw.roa File: 8cFKfrjD6iLs6wdG--AYcSjpkRw.roa (raw, json) Hash identifier: wylltbdQM1KkZpadUccLwLiV3Da6J4kgz347rt7vwmI= Subject key identifier: F1:C1:4A:7E:B8:C3:EA:22:EC:EB:07:46:FB:E0:18:71:28:E9:91:1C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E2F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8cFKfrjD6iLs6wdG--AYcSjpkRw.roa Signing time: Tue 01 Apr 2025 02:33:33 +0000 ROA not before: Tue 01 Apr 2025 02:33:33 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.78.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3631 (0xe2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:33:33 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=F1C14A7EB8C3EA22ECEB0746FBE0187128E9911C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:84:21:15:d1:f6:98:59:e7:e0:51:c4:30: b6:29:35:dd:83:bf:ff:04:d0:9c:ab:c9:f3:f1:3d: 46:1b:25:82:50:a8:9e:13:41:30:b5:89:b4:c7:e3: 5b:15:07:51:34:0a:13:55:ee:3c:3b:f9:58:df:c3: ed:49:ef:7c:4b:84:9e:a6:46:d7:c7:0f:35:ed:11: 51:cd:af:60:c5:45:f6:db:af:14:04:da:f9:02:eb: 35:89:e1:4a:a5:7b:9d:b4:5b:e2:0a:87:7b:f5:76: f0:b8:a4:f2:7a:19:a6:fc:ae:12:c2:5c:5d:78:2d: 5e:a9:52:01:18:dd:7c:91:5e:a5:a5:5c:b3:2a:ef: 4a:4d:83:68:77:57:35:80:19:75:a3:ed:89:8f:8e: f2:95:7d:7b:7a:ef:cc:a6:53:29:39:c8:ac:1a:08: 46:3d:62:ff:03:83:31:8e:58:91:83:ba:05:86:44: 2b:6d:63:4a:87:90:8a:55:97:c1:fc:73:38:9a:79: e7:14:fd:d3:cc:1f:78:ba:c1:a8:8c:25:fd:2c:6e: f7:7f:a4:8b:fb:64:ae:72:f0:8d:8e:cb:a3:4e:f9: 75:74:8b:7e:9b:3f:af:d2:ee:14:0c:fb:4c:59:73: 0c:8c:f7:88:3c:ca:8d:4b:ae:6a:44:9c:ee:73:d5: 09:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C1:4A:7E:B8:C3:EA:22:EC:EB:07:46:FB:E0:18:71:28:E9:91:1C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8cFKfrjD6iLs6wdG--AYcSjpkRw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.2.0/23 Signature Algorithm: sha256WithRSAEncryption 22:7f:3a:27:96:14:32:76:3b:8a:78:71:e4:99:00:a2:34:35: 0b:b2:dc:ce:92:fa:5a:db:08:e6:e7:38:07:8b:b7:ef:2a:0a: 02:5f:7a:f6:7b:d5:7c:22:2a:3d:ac:05:38:0d:c7:96:62:1b: 00:4d:74:3c:5c:63:a6:e0:49:ad:15:39:81:2f:60:40:f4:71: 57:5f:2c:11:c1:69:f9:7a:84:08:2f:ff:ab:1a:79:b3:c9:ef: 3b:1b:7f:20:d7:bd:4c:a1:f5:b4:43:64:95:9c:8e:77:09:f7: f3:89:aa:25:0b:4b:a9:ce:5c:e5:67:2b:2b:71:2e:e1:f6:33: d1:91:58:ab:90:2f:d2:a5:73:b8:35:ac:01:39:bb:07:99:a2: 24:4e:62:21:44:c3:aa:b0:25:22:1d:33:e3:99:d6:d1:ae:c7: a9:9e:e3:5c:bf:0b:7c:a9:57:35:66:4d:50:b0:a2:04:1f:d1: a3:7a:fe:26:cc:c2:1c:51:ca:b8:4a:8b:31:59:60:ed:2d:a8: cd:25:6e:e0:c1:ab:82:e7:c3:63:7f:16:13:16:27:51:4a:b1: 8f:76:0e:69:9f:71:46:14:49:af:3e:46:98:ef:dc:54:c6:c2: 64:ac:1b:20:87:c6:de:ea:58:88:03:6a:59:29:71:c2:2b:34: 5a:dd:1c:eb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDi8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMzMzNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYxQzE0QTdFQjhDM0VB MjJFQ0VCMDc0NkZCRTAxODcxMjhFOTkxMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPsYQhFdH2mFnn4FHEMLYpNd2Dv/8E0JyryfPxPUYbJYJQqJ4T QTC1ibTH41sVB1E0ChNV7jw7+Vjfw+1J73xLhJ6mRtfHDzXtEVHNr2DFRfbbrxQE 2vkC6zWJ4Uqle520W+IKh3v1dvC4pPJ6Gab8rhLCXF14LV6pUgEY3XyRXqWlXLMq 70pNg2h3VzWAGXWj7YmPjvKVfXt678ymUyk5yKwaCEY9Yv8DgzGOWJGDugWGRCtt Y0qHkIpVl8H8cziaeecU/dPMH3i6waiMJf0sbvd/pIv7ZK5y8I2Oy6NO+XV0i36b P6/S7hQM+0xZcwyM94g8yo1LrmpEnO5z1QkvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8cFKfrjD6iLs6wdG++AYcSjpkRwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzhjRktmcmpENmlMczZ3ZEctLUFZY1NqcGtSdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTgIwDQYJKoZIhvcNAQELBQADggEBACJ/OieWFDJ2O4p4ceSZAKI0NQuy 3M6S+lrbCObnOAeLt+8qCgJfevZ71XwiKj2sBTgNx5ZiGwBNdDxcY6bgSa0VOYEv YED0cVdfLBHBafl6hAgv/6saebPJ7zsbfyDXvUyh9bRDZJWcjncJ9/OJqiULS6nO XOVnKytxLuH2M9GRWKuQL9Klc7g1rAE5uweZoiROYiFEw6qwJSIdM+OZ1tGux6me 41y/C3ypVzVmTVCwogQf0aN6/ibMwhxRyrhKizFZYO0tqM0lbuDBq4Lnw2N/FhMW J1FKsY92DmmfcUYUSa8+Rpjv3FTGwmSsGyCHxt7qWIgDalkpccIrNFrdHOs= -----END CERTIFICATE-----Generated at Wed Nov 5 17:23:53 2025 by rpki-client