$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AY72FSUgcz9zGD1R1tnO4BqCItM.roa File: AY72FSUgcz9zGD1R1tnO4BqCItM.roa (raw, json) Hash identifier: 7u0GJPu+c92D95TgK2JwOKt7Z+Lw+P/EqRtwQVqVsJU= Subject key identifier: 01:8E:F6:15:25:20:73:3F:73:18:3D:51:D6:D9:CE:E0:1A:82:22:D3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EBF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AY72FSUgcz9zGD1R1tnO4BqCItM.roa Signing time: Tue 10 Jun 2025 11:04:58 +0000 ROA not before: Tue 10 Jun 2025 11:04:58 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.78.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3775 (0xebf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:04:58 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=018EF6152520733F73183D51D6D9CEE01A8222D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:76:4f:6c:a4:c3:98:51:94:98:30:72:36: 37:28:2c:69:da:3e:1d:36:e6:fe:53:a0:ac:91:a4: 51:84:79:79:15:12:17:54:95:5b:dd:ed:c1:51:60: d6:4d:ed:d3:c1:b7:25:45:b8:b6:b0:60:e2:6c:6c: f1:19:ca:13:c4:ed:48:1c:21:25:77:eb:07:58:e5: bb:08:26:38:0c:ea:25:e2:b1:4c:0d:bd:cf:d9:bd: f5:6b:a9:c7:4e:38:e9:17:47:0f:3a:7b:bf:96:93: 2d:62:9a:66:ad:0a:ed:63:1b:7c:f1:d4:8d:f6:1c: d8:05:af:46:f2:f9:2a:66:a6:0e:89:31:35:36:0c: f2:4b:f2:4f:cc:9e:ef:1e:f1:62:19:91:d0:52:c5: 31:00:80:fd:6e:fb:5b:c5:15:4c:eb:ea:e7:80:96: 03:41:83:fc:7d:20:c5:13:bf:e8:03:a9:de:49:f7: d6:e8:39:dd:6f:4d:6f:af:23:49:07:2d:e8:a9:4f: 15:3f:6f:72:f9:11:fd:33:12:22:52:e6:e2:f5:ac: ba:97:d4:eb:e5:1a:82:d0:cf:7c:3a:48:54:4c:49: de:6d:1b:2e:33:a9:2a:1c:82:bf:61:0f:ef:25:b5: 32:e9:26:cd:d0:f6:f1:9c:99:65:73:e6:70:4c:55: db:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8E:F6:15:25:20:73:3F:73:18:3D:51:D6:D9:CE:E0:1A:82:22:D3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AY72FSUgcz9zGD1R1tnO4BqCItM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.128.0/18 Signature Algorithm: sha256WithRSAEncryption c8:93:c3:64:bc:30:e4:1c:74:a0:f0:76:c2:b8:22:5b:1e:49: 32:aa:a8:6e:ed:67:33:23:48:f4:76:6a:e8:e7:cf:b8:26:56: 97:e9:d7:61:b9:6a:d1:57:d7:4e:fc:4d:ad:67:65:d8:62:81: 1d:95:2e:15:65:c1:8c:0b:1d:6f:d2:3e:11:d4:9a:fb:28:40: 7a:aa:8d:14:8a:08:d1:d1:bd:4b:59:16:ba:c6:e0:12:84:e5: b5:29:d2:10:b2:55:de:5d:e6:9d:56:e2:fe:b6:41:9b:92:66: 96:67:83:5a:4d:f7:c3:06:0b:e1:91:37:da:3e:f1:7f:7b:8f: 0b:e6:1f:38:0d:45:f4:c7:56:f5:c5:ed:7c:ef:f3:d6:62:6f: 46:29:60:74:c9:0a:f1:cf:7f:98:01:06:44:e0:0e:0c:5b:27: 06:1f:27:87:25:04:60:c4:f2:11:4a:02:c4:40:ea:cd:02:c3: 9b:e7:37:ec:c7:dd:a3:21:54:dc:22:73:1c:87:83:84:94:5b: 21:58:59:36:d6:2e:31:25:2d:9b:df:d0:ad:e0:27:76:e4:ba: a7:a8:3d:40:a8:2c:53:bd:e0:2d:bb:35:09:e6:91:42:5d:41: f5:0e:d4:dd:d8:14:bb:15:e4:75:ce:c7:79:73:43:0e:a1:14: f7:75:f7:ad -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDr8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA0NThaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDAxOEVGNjE1MjUyMDcz M0Y3MzE4M0Q1MUQ2RDlDRUUwMUE4MjIyRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu8HZPbKTDmFGUmDByNjcoLGnaPh025v5ToKyRpFGEeXkVEhdU lVvd7cFRYNZN7dPBtyVFuLawYOJsbPEZyhPE7UgcISV36wdY5bsIJjgM6iXisUwN vc/ZvfVrqcdOOOkXRw86e7+Wky1immatCu1jG3zx1I32HNgFr0by+Spmpg6JMTU2 DPJL8k/Mnu8e8WIZkdBSxTEAgP1u+1vFFUzr6ueAlgNBg/x9IMUTv+gDqd5J99bo Od1vTW+vI0kHLeipTxU/b3L5Ef0zEiJS5uL1rLqX1OvlGoLQz3w6SFRMSd5tGy4z qSocgr9hD+8ltTLpJs3Q9vGcmWVz5nBMVdsFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUAY72FSUgcz9zGD1R1tnO4BqCItMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0FZNzJGU1VnY3o5ekdEMVIxdG5PNEJxQ0l0TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYBToAwDQYJKoZIhvcNAQELBQADggEBAMiTw2S8MOQcdKDwdsK4IlseSTKq qG7tZzMjSPR2aujnz7gmVpfp12G5atFX1078Ta1nZdhigR2VLhVlwYwLHW/SPhHU mvsoQHqqjRSKCNHRvUtZFrrG4BKE5bUp0hCyVd5d5p1W4v62QZuSZpZng1pN98MG C+GRN9o+8X97jwvmHzgNRfTHVvXF7Xzv89Zib0YpYHTJCvHPf5gBBkTgDgxbJwYf J4clBGDE8hFKAsRA6s0Cw5vnN+zH3aMhVNwicxyHg4SUWyFYWTbWLjElLZvf0K3g J3bkuqeoPUCoLFO94C27NQnmkUJdQfUO1N3YFLsV5HXOx3lzQw6hFPd1960= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:28 2025 by rpki-client