$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Cr1e0nnJ8XCsPV_5-Lh8il2e6jY.roa File: Cr1e0nnJ8XCsPV_5-Lh8il2e6jY.roa (raw, json) Hash identifier: lZrYVdr/L2rJ0K71fYjid3NdAqFvWHtn9vR1UfpdV6o= Subject key identifier: 0A:BD:5E:D2:79:C9:F1:70:AC:3D:5F:F9:F8:B8:7C:8A:5D:9E:EA:36 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D5B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Cr1e0nnJ8XCsPV_5-Lh8il2e6jY.roa Signing time: Tue 01 Apr 2025 02:19:14 +0000 ROA not before: Tue 01 Apr 2025 02:19:14 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.78.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3419 (0xd5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:14 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=0ABD5ED279C9F170AC3D5FF9F8B87C8A5D9EEA36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d3:5b:b3:fa:39:4a:0d:b0:da:94:f0:25:d3: 52:1a:89:45:9f:2f:8b:a4:6f:00:f7:32:63:8c:b0: fb:0b:72:31:fd:c5:f8:fd:53:b0:82:c0:27:d1:19: 62:30:f2:5e:e2:51:90:f2:2f:32:98:db:f0:ca:d3: d8:10:84:a1:f7:0b:8e:f8:a1:5f:91:e4:13:95:46: 7f:7e:f0:a0:5f:3d:88:1a:4a:e5:be:d9:31:df:5d: 72:56:31:75:3d:3b:d7:4b:a9:cf:22:67:e1:13:61: 64:67:cc:99:cc:70:ba:c3:2a:b4:4d:cf:ec:06:f2: 55:8f:ad:1b:78:43:ee:69:49:84:55:3c:8e:46:e2: 14:9f:df:b3:1e:d6:c9:84:fb:64:ca:38:7e:d0:e2: a9:98:21:d9:c8:cf:c7:ef:e2:5b:11:96:84:14:84: b5:8c:03:d0:10:ed:32:ac:a3:6c:1b:4c:ef:2d:15: b4:83:88:cb:ec:93:3e:8c:2f:1c:f9:da:ab:3a:e9: 49:3f:42:2d:07:d6:38:0d:fb:dd:fc:2c:39:e0:0c: 92:f7:ec:8b:ea:64:43:a1:ae:73:db:4d:e3:75:f2: f6:43:e8:a6:de:64:a0:75:e4:34:e0:a8:f7:42:2d: f2:2b:80:22:98:11:1e:27:83:b6:09:1e:e6:38:a3: 34:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BD:5E:D2:79:C9:F1:70:AC:3D:5F:F9:F8:B8:7C:8A:5D:9E:EA:36 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Cr1e0nnJ8XCsPV_5-Lh8il2e6jY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.8.0/22 Signature Algorithm: sha256WithRSAEncryption 02:fe:dd:5b:9e:b7:08:3a:4d:82:92:39:09:ed:9b:34:ff:80: 21:8f:d7:3e:5c:57:da:f2:25:ab:69:b6:23:15:dc:28:4d:b5: 03:f9:56:35:fe:0a:8d:5e:ad:68:1a:72:24:46:66:a1:f2:82: 60:51:56:33:89:fa:45:8e:fe:ab:71:8d:6b:16:3d:7c:ab:0c: 41:5b:8b:68:5a:06:e7:c5:e2:75:ae:50:63:58:7c:1a:2e:ff: 66:b9:71:ad:81:a2:ca:5c:f9:f2:73:7e:15:09:95:b9:31:cc: f5:4e:26:23:ea:96:d7:e2:ee:dc:1f:e7:8a:c1:2e:fd:eb:28: a9:7f:b3:7b:6f:7b:be:5f:59:c0:a6:45:1e:dd:33:01:fd:de: 17:dc:24:6c:b6:40:fc:78:05:62:dd:ed:59:b8:a4:74:88:22: 33:ae:48:64:67:da:af:95:d8:bf:ae:6b:02:2d:e3:33:98:8e: f0:73:dc:d7:3c:06:a2:6e:21:07:c9:60:f2:da:79:91:cd:20: 6b:8b:f3:0f:fd:b8:41:ec:ac:61:5e:6c:78:e4:0f:25:6f:c0: 2c:7a:44:ba:a5:d8:b1:a0:e2:a8:e4:a1:67:7d:a1:50:3c:8d: df:84:ea:81:1d:b2:59:f5:f6:08:26:fe:7b:54:5a:bc:ae:75: 5c:53:a6:28 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDVswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MTRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBBQkQ1RUQyNzlDOUYx NzBBQzNENUZGOUY4Qjg3QzhBNUQ5RUVBMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDv01uz+jlKDbDalPAl01IaiUWfL4ukbwD3MmOMsPsLcjH9xfj9 U7CCwCfRGWIw8l7iUZDyLzKY2/DK09gQhKH3C474oV+R5BOVRn9+8KBfPYgaSuW+ 2THfXXJWMXU9O9dLqc8iZ+ETYWRnzJnMcLrDKrRNz+wG8lWPrRt4Q+5pSYRVPI5G 4hSf37Me1smE+2TKOH7Q4qmYIdnIz8fv4lsRloQUhLWMA9AQ7TKso2wbTO8tFbSD iMvskz6MLxz52qs66Uk/Qi0H1jgN+938LDngDJL37IvqZEOhrnPbTeN18vZD6Kbe ZKB15DTgqPdCLfIrgCKYER4ng7YJHuY4ozRRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCr1e0nnJ8XCsPV/5+Lh8il2e6jYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0NyMWUwbm5KOFhDc1BWXzUtTGg4aWwyZTZqWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTggwDQYJKoZIhvcNAQELBQADggEBAAL+3Vuetwg6TYKSOQntmzT/gCGP 1z5cV9ryJatptiMV3ChNtQP5VjX+Co1erWgaciRGZqHygmBRVjOJ+kWO/qtxjWsW PXyrDEFbi2haBufF4nWuUGNYfBou/2a5ca2Bospc+fJzfhUJlbkxzPVOJiPqltfi 7twf54rBLv3rKKl/s3tve75fWcCmRR7dMwH93hfcJGy2QPx4BWLd7Vm4pHSIIjOu SGRn2q+V2L+uawIt4zOYjvBz3Nc8BqJuIQfJYPLaeZHNIGuL8w/9uEHsrGFebHjk DyVvwCx6RLql2LGg4qjkoWd9oVA8jd+E6oEdsln19ggm/ntUWryudVxTpig= -----END CERTIFICATE-----Generated at Wed Nov 5 20:19:12 2025 by rpki-client