$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Duq758DzvPfZksPgnbwstsVHJ6o.roa File: Duq758DzvPfZksPgnbwstsVHJ6o.roa (raw, json) Hash identifier: EmV+oy/rBN7QiV/rfi1UUmVNbWb6o20vcKS1V9p6qMc= Subject key identifier: 0E:EA:BB:E7:C0:F3:BC:F7:D9:92:C3:E0:9D:BC:2C:B6:C5:47:27:AA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BF3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Duq758DzvPfZksPgnbwstsVHJ6o.roa Signing time: Tue 01 Apr 2025 01:51:24 +0000 ROA not before: Tue 01 Apr 2025 01:51:24 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.78.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:24 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=0EEABBE7C0F3BCF7D992C3E09DBC2CB6C54727AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:5f:4f:e9:37:72:01:9b:09:17:6e:67:61: d9:54:4a:8c:01:f0:f9:31:a9:5c:25:c8:99:a6:55: b6:8a:b7:56:e4:7e:e3:b6:2f:3c:d7:95:c0:79:a6: de:ca:32:9e:ff:ab:86:9e:79:25:51:95:b4:07:56: 0e:ad:45:39:bf:b4:5e:68:7b:33:95:65:7d:b8:fe: 1e:a6:a9:9f:ef:37:6c:91:5a:ef:4c:b8:9a:59:b6: fb:f9:e9:17:7b:c0:4e:1a:e7:0a:fa:da:36:31:37: 92:22:29:2f:55:f8:cf:60:5a:18:47:c6:b4:78:9c: b3:57:ca:1e:b0:be:01:19:e4:75:b5:5f:36:87:74: 17:cb:34:90:be:f2:10:18:8b:e3:c1:53:f5:86:58: af:38:07:69:cf:b2:46:e6:13:d1:b2:f2:34:2b:cd: 92:27:ca:b9:90:49:87:16:3f:c4:63:4a:97:9e:0c: 25:a6:0c:51:ee:68:af:78:04:a8:a6:59:7a:1e:a2: 40:fe:9e:9e:b5:2d:5c:7f:01:62:47:7a:95:71:52: 76:49:30:19:30:9d:6f:2a:3d:6c:a7:9c:91:a5:38: 05:5c:33:c2:c2:90:df:24:12:7f:a7:20:74:57:e8: 7c:c0:eb:c5:8f:3d:15:4f:14:dc:aa:cc:7b:e2:2a: 44:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EA:BB:E7:C0:F3:BC:F7:D9:92:C3:E0:9D:BC:2C:B6:C5:47:27:AA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Duq758DzvPfZksPgnbwstsVHJ6o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.14.0/23 Signature Algorithm: sha256WithRSAEncryption 32:a7:b4:29:66:c0:88:80:85:6b:ea:e3:bc:69:51:06:e2:32: dc:db:db:4a:44:5e:38:21:67:26:60:cc:de:1f:ba:43:f4:34: df:2c:de:09:65:f9:a8:13:9b:b4:bd:fa:f5:4e:8c:02:22:83: dd:2e:65:c5:80:21:0f:af:2a:88:1c:65:78:11:1b:87:3c:a8: 31:da:35:a9:5b:08:e1:f1:bc:f0:80:64:cc:db:15:d2:89:1e: 99:1b:0f:79:b8:4b:7b:ae:4c:0d:e7:22:78:92:68:2e:be:cb: 2a:12:c4:3b:61:00:4b:4f:49:6e:b9:72:9d:d1:57:50:a0:f9: c4:d2:da:cc:11:29:9a:a0:54:d1:1e:a0:df:12:00:e8:d7:4d: 46:98:90:0c:b3:b7:3b:e2:d3:94:ba:7a:26:8a:ca:74:69:cb: 54:d8:44:3b:db:6a:60:58:8b:84:e4:9a:ab:86:53:5f:a0:d2: f6:e4:01:2b:62:98:87:14:15:8f:45:fb:6a:3c:36:29:f9:94: b6:7f:6f:16:7c:f9:9e:c0:d0:f4:5e:d8:32:3c:38:6d:b2:98: 3c:83:06:09:24:ec:bb:97:1c:b9:38:eb:82:bc:1a:0d:8f:e3: a7:24:53:1f:20:08:1a:83:9e:35:c3:34:31:5b:69:97:49:1e: a5:fb:0c:3f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMjRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBFRUFCQkU3QzBGM0JD RjdEOTkyQzNFMDlEQkMyQ0I2QzU0NzI3QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/Il9P6TdyAZsJF25nYdlUSowB8PkxqVwlyJmmVbaKt1bkfuO2 LzzXlcB5pt7KMp7/q4aeeSVRlbQHVg6tRTm/tF5oezOVZX24/h6mqZ/vN2yRWu9M uJpZtvv56Rd7wE4a5wr62jYxN5IiKS9V+M9gWhhHxrR4nLNXyh6wvgEZ5HW1XzaH dBfLNJC+8hAYi+PBU/WGWK84B2nPskbmE9Gy8jQrzZInyrmQSYcWP8RjSpeeDCWm DFHuaK94BKimWXoeokD+np61LVx/AWJHepVxUnZJMBkwnW8qPWynnJGlOAVcM8LC kN8kEn+nIHRX6HzA68WPPRVPFNyqzHviKkSHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDuq758DzvPfZksPgnbwstsVHJ6owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0R1cTc1OER6dlBmWmtzUGduYndzdHNWSEo2by5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTg4wDQYJKoZIhvcNAQELBQADggEBADKntClmwIiAhWvq47xpUQbiMtzb 20pEXjghZyZgzN4fukP0NN8s3gll+agTm7S9+vVOjAIig90uZcWAIQ+vKogcZXgR G4c8qDHaNalbCOHxvPCAZMzbFdKJHpkbD3m4S3uuTA3nIniSaC6+yyoSxDthAEtP SW65cp3RV1Cg+cTS2swRKZqgVNEeoN8SAOjXTUaYkAyztzvi05S6eiaKynRpy1TY RDvbamBYi4TkmquGU1+g0vbkAStimIcUFY9F+2o8Nin5lLZ/bxZ8+Z7A0PRe2DI8 OG2ymDyDBgkk7LuXHLk464K8Gg2P46ckUx8gCBqDnjXDNDFbaZdJHqX7DD8= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:10 2025 by rpki-client