$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DHAs2-3RkB_2EoUJTDw52SaW-zg.roa File: DHAs2-3RkB_2EoUJTDw52SaW-zg.roa (raw, json) Hash identifier: +g7vD2ayfvg0GN0AYLE9lasRq0kCETLH2tLdfr2U/dI= Subject key identifier: 0C:70:2C:DB:ED:D1:90:1F:F6:12:85:09:4C:3C:39:D9:26:96:FB:38 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C0F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DHAs2-3RkB_2EoUJTDw52SaW-zg.roa Signing time: Tue 01 Apr 2025 01:51:35 +0000 ROA not before: Tue 01 Apr 2025 01:51:35 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 183.74.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3087 (0xc0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:35 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=0C702CDBEDD1901FF61285094C3C39D92696FB38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:91:53:24:57:28:24:f7:01:28:fe:26:dd: 3d:2e:2f:89:56:68:29:28:15:f2:57:db:b6:0b:18: 96:79:27:e0:3c:28:92:0c:9b:97:13:94:07:74:2c: 3c:41:6a:ab:f7:e2:b6:7b:e6:1f:75:b9:b1:20:b8: 29:f5:f3:ce:e0:70:ab:47:f7:3c:c8:36:e0:b9:7e: 45:a2:36:1d:95:9f:49:fe:4f:03:b9:94:15:6b:c7: ad:11:6b:97:c1:04:b1:a9:ac:9e:54:d9:b7:cd:ae: 27:8d:fd:87:f2:de:f1:58:b2:2f:99:2f:8b:4a:6c: 51:39:bb:33:59:b6:a4:9e:fb:5a:aa:90:c5:b3:9f: df:f0:0e:ba:de:ea:02:ba:8d:2e:93:50:76:5d:42: 7c:8c:96:b6:07:22:09:8b:d7:be:2e:35:ef:ce:d1: 94:8b:71:6e:4a:68:ac:63:44:d8:ea:bf:68:d1:7a: 4d:f9:4d:a7:cd:fe:a6:7d:af:04:36:20:cc:bd:2e: 7e:f3:6e:da:9f:06:2b:b1:24:85:e6:2a:c2:4c:32: fc:33:07:5d:51:74:0f:9a:35:52:c6:8e:ea:e7:48: b2:96:fe:5b:a2:1c:d2:09:dd:09:4b:25:0c:2d:09: 54:c1:19:4f:b8:45:12:4e:ac:7d:df:a6:e3:3b:4b: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:70:2C:DB:ED:D1:90:1F:F6:12:85:09:4C:3C:39:D9:26:96:FB:38 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DHAs2-3RkB_2EoUJTDw52SaW-zg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.74.192.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:58:e4:62:b6:f5:37:ce:19:45:45:15:b2:83:eb:c3:d1:73: e6:33:c7:d5:25:40:1b:9d:a8:38:2a:c7:75:89:90:e7:3a:79: 0c:44:ee:79:64:d2:b1:d1:f9:46:8a:36:0f:a5:dc:3c:02:48: be:4e:80:7c:2c:24:7d:e9:c3:e6:ea:ee:37:16:cc:6e:52:2a: c9:3c:46:29:21:f0:bc:6e:04:99:80:08:d0:36:e2:b3:4b:c3: 3a:6e:0f:d1:68:9f:01:ae:c1:0f:7b:e0:7f:4c:0a:51:0a:a3: 75:a0:8e:4a:0b:9f:b0:79:6b:a4:ee:9f:27:2a:55:66:5e:f4: 06:a4:97:6c:4d:b2:de:eb:e5:e1:80:c3:f6:31:a3:83:95:ef: 41:76:88:94:12:81:5a:64:fa:2d:95:ad:7a:e1:66:ad:c1:28: 13:b1:4f:21:3e:63:e8:e1:78:af:c5:37:58:c8:ea:8d:5e:40: 06:4b:d7:1f:be:1f:2e:13:3b:30:23:7d:77:fd:7a:42:e2:94: 15:9c:66:bd:f9:6c:5f:49:87:b6:c2:45:dc:e9:d7:dc:21:e0: e6:d5:3d:47:95:4a:2f:6d:fa:b8:be:3d:36:8b:2c:0e:39:d4: 74:2c:35:21:ef:08:48:fe:02:5d:ae:6c:de:ab:1f:1a:19:e4: c7:92:da:a6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDA8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMzVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBDNzAyQ0RCRUREMTkw MUZGNjEyODUwOTRDM0MzOUQ5MjY5NkZCMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+IJFTJFcoJPcBKP4m3T0uL4lWaCkoFfJX27YLGJZ5J+A8KJIM m5cTlAd0LDxBaqv34rZ75h91ubEguCn1887gcKtH9zzINuC5fkWiNh2Vn0n+TwO5 lBVrx60Ra5fBBLGprJ5U2bfNrieN/Yfy3vFYsi+ZL4tKbFE5uzNZtqSe+1qqkMWz n9/wDrre6gK6jS6TUHZdQnyMlrYHIgmL174uNe/O0ZSLcW5KaKxjRNjqv2jRek35 TafN/qZ9rwQ2IMy9Ln7zbtqfBiuxJIXmKsJMMvwzB11RdA+aNVLGjurnSLKW/lui HNIJ3QlLJQwtCVTBGU+4RRJOrH3fpuM7S/JZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDHAs2+3RkB/2EoUJTDw52SaW+zgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0RIQXMyLTNSa0JfMkVvVUpURHc1MlNhVy16Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAK3SsAwDQYJKoZIhvcNAQELBQADggEBAJ1Y5GK29TfOGUVFFbKD68PRc+Yz x9UlQBudqDgqx3WJkOc6eQxE7nlk0rHR+UaKNg+l3DwCSL5OgHwsJH3pw+bq7jcW zG5SKsk8Rikh8LxuBJmACNA24rNLwzpuD9FonwGuwQ974H9MClEKo3WgjkoLn7B5 a6TunycqVWZe9Aakl2xNst7r5eGAw/Yxo4OV70F2iJQSgVpk+i2VrXrhZq3BKBOx TyE+Y+jheK/FN1jI6o1eQAZL1x++Hy4TOzAjfXf9ekLilBWcZr35bF9Jh7bCRdzp 19wh4ObVPUeVSi9t+ri+PTaLLA451HQsNSHvCEj+Al2ubN6rHxoZ5MeS2qY= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:22 2025 by rpki-client