$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BzSVA4bBlufBr6-XAB3xP-JWs7A.roa File: BzSVA4bBlufBr6-XAB3xP-JWs7A.roa (raw, json) Hash identifier: 3YCUiNfsg8ErnPLVTBnrCpNaenEQ0RneH4cZUu8y644= Subject key identifier: 07:34:95:03:86:C1:96:E7:C1:AF:AF:97:00:1D:F1:3F:E2:56:B3:B0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F7B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BzSVA4bBlufBr6-XAB3xP-JWs7A.roa Signing time: Tue 10 Jun 2025 11:32:39 +0000 ROA not before: Tue 10 Jun 2025 11:32:39 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.72.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3963 (0xf7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:39 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=0734950386C196E7C1AFAF97001DF13FE256B3B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:fe:4e:b4:c6:6d:e4:de:d8:0b:0f:90:a9: 1e:a4:8f:c5:d4:08:60:fe:e6:00:6d:78:f0:ef:a4: 5b:f6:d4:57:c9:e3:c1:12:ee:73:f3:0d:3e:de:19: 49:7b:8e:3b:6a:07:32:00:05:26:b1:70:70:7d:5f: 6e:aa:0b:18:3e:32:9a:d2:6e:8a:f5:b5:d9:4e:9a: 06:19:33:71:aa:80:60:34:f8:c8:9e:58:69:85:40: 1a:c9:4a:ad:73:17:4b:5c:a4:66:1c:a8:55:37:9d: 97:67:84:e0:6e:4d:eb:5d:cb:28:f9:32:b1:23:5b: a4:f0:6b:35:e9:58:24:85:8b:88:07:3d:6e:9f:40: b8:cd:a3:1a:31:46:47:ad:6c:21:0e:6d:c6:20:32: d7:65:75:4b:e7:38:ba:22:d2:29:10:65:d8:ee:a5: d6:c1:7b:ca:f6:ca:cc:9e:83:11:b6:41:9b:98:76: 19:54:49:17:0b:66:c7:09:53:4b:35:19:69:19:71: e2:86:e6:91:af:5f:0c:13:01:a1:ff:66:76:46:8f: 96:7d:57:23:1b:53:f0:ba:67:39:34:24:cb:2a:1f: bd:b0:5c:b6:00:57:91:11:c4:f5:dc:b6:a4:f2:93: eb:ff:ba:fc:df:e4:1e:5f:ca:22:4e:6d:fd:78:10: 34:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:34:95:03:86:C1:96:E7:C1:AF:AF:97:00:1D:F1:3F:E2:56:B3:B0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BzSVA4bBlufBr6-XAB3xP-JWs7A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.224.0/19 Signature Algorithm: sha256WithRSAEncryption 47:24:77:47:a5:c9:9c:9b:c6:0e:c9:6e:30:ec:c3:37:c3:c4: 79:d7:fa:52:b4:8a:88:ce:15:62:d3:a4:0f:cd:ef:65:f9:02: 6e:ce:cd:74:83:1e:00:d7:d3:0f:c8:ab:d9:41:e8:11:41:73: 6b:eb:30:06:d3:eb:c2:cd:35:6f:f9:69:6a:32:b2:96:47:2d: 59:c5:23:26:0e:49:77:38:04:19:43:1d:4d:a8:31:2b:25:fe: 92:69:a7:66:86:b7:a9:77:11:cb:65:bb:d4:64:61:b0:1d:21: 56:26:09:ef:ac:7e:ef:00:14:de:a0:25:98:bf:26:04:8e:1d: 38:71:3c:ac:62:0d:a7:b3:f2:0c:bf:1d:a5:96:c2:d0:13:f4: a5:04:b9:9a:06:a6:2d:16:78:2f:49:95:68:39:01:8d:30:f2: 64:e0:fc:69:1e:9c:a6:d4:f4:f4:4b:93:ce:39:a7:a0:29:fe: 0e:5c:e6:7d:ef:01:73:be:d3:b1:88:34:0f:0e:fa:0a:4c:c7: ba:7c:73:04:8e:d0:e6:67:7d:3a:86:50:13:a3:db:22:ab:03: fb:49:f0:59:a3:b7:6c:be:bb:26:93:11:ce:c9:50:c1:ae:60: 0f:0d:70:5d:dd:71:fb:44:b6:d8:17:e2:c9:d1:41:db:27:2a: 4a:85:0a:61 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD3swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMzlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDA3MzQ5NTAzODZDMTk2 RTdDMUFGQUY5NzAwMURGMTNGRTI1NkIzQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9+v5OtMZt5N7YCw+QqR6kj8XUCGD+5gBtePDvpFv21FfJ48ES 7nPzDT7eGUl7jjtqBzIABSaxcHB9X26qCxg+MprSbor1tdlOmgYZM3GqgGA0+Mie WGmFQBrJSq1zF0tcpGYcqFU3nZdnhOBuTetdyyj5MrEjW6TwazXpWCSFi4gHPW6f QLjNoxoxRketbCEObcYgMtdldUvnOLoi0ikQZdjupdbBe8r2ysyegxG2QZuYdhlU SRcLZscJU0s1GWkZceKG5pGvXwwTAaH/ZnZGj5Z9VyMbU/C6Zzk0JMsqH72wXLYA V5ERxPXctqTyk+v/uvzf5B5fyiJObf14EDTrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBzSVA4bBlufBr6+XAB3xP+JWs7AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0J6U1ZBNGJCbHVmQnI2LVhBQjN4UC1KV3M3QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBSOAwDQYJKoZIhvcNAQELBQADggEBAEckd0elyZybxg7JbjDswzfDxHnX +lK0iojOFWLTpA/N72X5Am7OzXSDHgDX0w/Iq9lB6BFBc2vrMAbT68LNNW/5aWoy spZHLVnFIyYOSXc4BBlDHU2oMSsl/pJpp2aGt6l3Ectlu9RkYbAdIVYmCe+sfu8A FN6gJZi/JgSOHThxPKxiDaez8gy/HaWWwtAT9KUEuZoGpi0WeC9JlWg5AY0w8mTg /GkenKbU9PRLk845p6Ap/g5c5n3vAXO+07GINA8O+gpMx7p8cwSO0OZnfTqGUBOj 2yKrA/tJ8Fmjt2y+uyaTEc7JUMGuYA8NcF3dcftEttgX4snRQdsnKkqFCmE= -----END CERTIFICATE-----Generated at Wed Nov 5 20:10:31 2025 by rpki-client