$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/D5eX9j7kHia7EPFiaJ6yqBVDLao.roa File: D5eX9j7kHia7EPFiaJ6yqBVDLao.roa (raw, json) Hash identifier: 6UmRFNYqjmu8D0aTIgo0Yg9H58uwPVTKCddWsz2+hZw= Subject key identifier: 0F:97:97:F6:3E:E4:1E:26:BB:10:F1:62:68:9E:B2:A8:15:43:2D:AA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FA4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D5eX9j7kHia7EPFiaJ6yqBVDLao.roa Signing time: Tue 10 Jun 2025 11:40:36 +0000 ROA not before: Tue 10 Jun 2025 11:40:36 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.72.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4004 (0xfa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:40:36 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=0F9797F63EE41E26BB10F162689EB2A815432DAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:92:1a:63:fa:10:11:08:60:33:39:d8:73: 2e:95:6c:c1:34:b7:fd:11:f2:30:27:c8:46:bd:a7: 21:fc:88:b2:32:4a:50:e4:2e:df:38:6a:d6:4e:71: 33:44:f0:67:dc:dd:a5:b7:98:fd:93:05:88:88:ba: bb:27:60:4b:76:80:2c:29:aa:86:72:f0:56:1b:57: e8:22:ea:c6:7d:53:ae:aa:f0:f1:ed:c0:2d:90:a2: 5f:16:30:93:02:6e:ae:4c:de:01:b3:54:6b:21:9d: 6e:15:6f:63:5f:9d:14:53:02:de:ea:5b:4e:51:1b: a6:aa:8f:db:79:5b:0f:af:23:49:f3:e0:df:ba:5d: 90:9a:b7:e6:0a:dd:a2:9f:4f:3a:30:7c:28:91:93: 4f:41:71:1a:b8:9f:c4:5c:71:1a:03:e2:19:70:d3: 0f:cc:50:57:16:cf:40:32:e2:a1:39:b8:c0:37:59: 16:4f:60:7a:00:97:b6:02:1d:19:6f:79:c7:71:47: 4d:07:ff:42:8c:3d:42:bc:fa:dc:92:97:7c:4d:d5: 61:3d:4c:77:4b:dc:1a:76:34:35:24:ed:8e:cc:3f: 0a:f3:c7:17:4e:c1:dd:54:6b:18:c3:c9:c4:04:d9: dc:95:ce:98:0d:fd:24:c9:97:01:70:bb:91:66:9d: 21:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:97:97:F6:3E:E4:1E:26:BB:10:F1:62:68:9E:B2:A8:15:43:2D:AA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D5eX9j7kHia7EPFiaJ6yqBVDLao.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.48.0/20 Signature Algorithm: sha256WithRSAEncryption d6:41:56:f8:88:93:1d:53:b8:a2:37:43:bd:90:8a:c1:f8:fe: 00:ac:3d:34:3d:3b:05:ae:bb:2e:8a:fa:e4:5b:a3:b8:1f:1a: 90:b8:9c:15:8f:9f:34:01:c0:79:e3:d2:c2:a5:1b:1a:ea:64: ab:69:5c:f1:ee:a3:00:4c:e2:6c:d0:0b:64:ce:01:a9:c8:71: 16:30:94:1b:74:1b:94:ed:6f:d9:7c:71:c3:28:44:a7:0d:4f: 04:aa:9d:c6:46:7a:15:6b:ff:0e:df:a8:a3:e4:2b:da:b5:d0: 29:a1:c2:53:43:73:11:db:31:53:e0:d2:d4:ce:a3:59:59:36: 1a:e5:17:b0:e8:7a:0c:c1:fc:08:cc:96:01:de:04:cf:8f:b8: 28:22:6e:2e:cc:88:06:25:02:48:fe:14:2f:ad:36:dc:1a:e6: 89:94:a3:fd:f9:f3:e4:60:f8:61:12:b4:31:fc:2e:b1:63:7b: 92:7c:57:d4:9b:86:a1:4c:ce:84:b0:2a:59:0d:6c:7e:ee:7d: e3:72:c8:68:00:ff:e0:0e:99:54:e7:c8:c9:82:8c:64:ac:8e: b7:2e:8c:a0:97:2a:72:0d:d8:44:b7:0c:da:5a:ea:1f:b2:7c: bc:fe:6c:72:fb:76:c8:f7:02:27:a3:4e:6a:84:27:d5:4d:e2: ca:0e:72:f2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD6QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQwMzZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDBGOTc5N0Y2M0VFNDFF MjZCQjEwRjE2MjY4OUVCMkE4MTU0MzJEQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyWZIaY/oQEQhgMznYcy6VbME0t/0R8jAnyEa9pyH8iLIySlDk Lt84atZOcTNE8Gfc3aW3mP2TBYiIursnYEt2gCwpqoZy8FYbV+gi6sZ9U66q8PHt wC2Qol8WMJMCbq5M3gGzVGshnW4Vb2NfnRRTAt7qW05RG6aqj9t5Ww+vI0nz4N+6 XZCat+YK3aKfTzowfCiRk09BcRq4n8RccRoD4hlw0w/MUFcWz0Ay4qE5uMA3WRZP YHoAl7YCHRlvecdxR00H/0KMPUK8+tySl3xN1WE9THdL3Bp2NDUk7Y7MPwrzxxdO wd1UaxjDycQE2dyVzpgN/STJlwFwu5FmnSHnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUD5eX9j7kHia7EPFiaJ6yqBVDLaowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0Q1ZVg5ajdrSGlhN0VQRmlhSjZ5cUJWRExhby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBSDAwDQYJKoZIhvcNAQELBQADggEBANZBVviIkx1TuKI3Q72QisH4/gCs PTQ9OwWuuy6K+uRbo7gfGpC4nBWPnzQBwHnj0sKlGxrqZKtpXPHuowBM4mzQC2TO AanIcRYwlBt0G5Ttb9l8ccMoRKcNTwSqncZGehVr/w7fqKPkK9q10CmhwlNDcxHb MVPg0tTOo1lZNhrlF7DoegzB/AjMlgHeBM+PuCgibi7MiAYlAkj+FC+tNtwa5omU o/358+Rg+GEStDH8LrFje5J8V9SbhqFMzoSwKlkNbH7ufeNyyGgA/+AOmVTnyMmC jGSsjrcujKCXKnIN2ES3DNpa6h+yfLz+bHL7dsj3AiejTmqEJ9VN4soOcvI= -----END CERTIFICATE-----Generated at Wed Nov 5 15:53:16 2025 by rpki-client