$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EPGq52szPHN3amn-Fslug0fNAUM.roa File: EPGq52szPHN3amn-Fslug0fNAUM.roa (raw, json) Hash identifier: 9r0tCitA8/Qm4StRaKMPioxSukXHo7MJI1JDWHa4RrI= Subject key identifier: 10:F1:AA:E7:6B:33:3C:73:77:6A:69:FE:16:C9:6E:83:47:CD:01:43 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D09 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EPGq52szPHN3amn-Fslug0fNAUM.roa Signing time: Tue 01 Apr 2025 02:11:41 +0000 ROA not before: Tue 01 Apr 2025 02:11:41 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.74.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3337 (0xd09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:41 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=10F1AAE76B333C73776A69FE16C96E8347CD0143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:4d:4b:9b:d0:0d:f2:dc:0c:03:93:2b:6d: b9:e8:9d:ec:bf:34:35:ee:44:ff:2d:a7:fa:db:61: 1b:51:a3:88:e7:cb:41:ca:e3:92:8d:9b:a1:12:72: e7:7c:b2:ae:9e:c6:c8:8e:ec:91:b6:ea:a1:5b:2f: 04:b9:4e:90:3f:b5:17:99:01:e6:f0:bd:a0:cb:6c: 89:e2:9f:fa:f9:2f:f1:d9:82:b0:2c:cc:a4:5d:14: 43:1e:ba:5a:09:fe:b8:c3:33:c7:f2:35:55:39:db: fb:82:e0:fb:3d:44:63:c0:2b:d7:c1:d9:1e:ef:c3: 5c:9b:4e:2e:cf:0e:e8:3b:d3:dc:2f:d3:0b:9f:44: 81:2f:ae:0c:4b:5b:67:eb:92:ce:bc:62:5f:91:dd: e0:c1:71:c7:eb:5c:a5:5f:d9:3b:39:56:c2:f2:da: 77:f3:7e:22:1b:f9:e4:1a:fd:2c:46:2e:24:58:cf: 3a:ae:31:92:f6:7d:ba:1b:f7:95:b1:09:99:bf:74: 11:08:86:21:21:65:fe:ba:77:54:86:01:71:61:d4: fe:78:76:5f:18:1a:53:e5:b2:43:c9:ee:ab:a2:50: b0:83:cc:8c:e6:53:0a:4a:bb:51:fc:e4:5f:ae:71: 40:5b:db:00:48:35:38:a9:7c:b2:a9:ca:77:02:ab: 89:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F1:AA:E7:6B:33:3C:73:77:6A:69:FE:16:C9:6E:83:47:CD:01:43 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EPGq52szPHN3amn-Fslug0fNAUM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.192.0/23 Signature Algorithm: sha256WithRSAEncryption b5:86:16:cf:57:16:6d:57:37:09:77:f8:51:9b:9e:42:71:f0: f9:ac:36:7d:15:82:e2:a4:3f:30:6a:60:11:89:7f:05:61:2f: 2d:29:75:c9:0a:50:a5:69:9f:3e:49:cb:07:fa:2a:82:e7:2a: 1c:2e:b9:53:b1:ab:11:a7:df:7f:09:8c:e3:8e:16:7a:40:d2: c0:f9:c1:f9:d0:de:10:a5:aa:34:b7:4e:51:1c:5b:23:fb:50: 9e:4b:0a:a1:ce:1c:14:57:c3:75:13:cc:90:b3:4a:d3:6c:53: 97:94:fa:9f:f2:04:56:5e:a8:fb:60:37:55:16:d5:6b:23:4f: 61:77:b4:fa:61:e8:22:55:f7:af:0b:8b:80:e0:52:44:ad:6c: 1e:30:f3:41:cf:66:f9:f0:9d:df:2b:b7:b8:8a:10:a9:e3:bb: 69:8b:7e:e9:5d:70:bb:18:95:1e:cf:c7:8f:76:17:43:b8:16: cf:cb:3d:93:f1:1b:33:97:cb:25:53:3a:3e:05:be:44:f8:3e: 4c:72:10:be:00:f8:5e:48:a9:8c:3c:2e:76:74:70:fb:6d:ee: 0a:c8:52:fb:8a:2b:dc:d2:c3:7c:a9:78:c7:a9:59:0c:8d:36: 15:d2:69:7f:7c:27:f0:4b:82:4c:f6:de:68:37:a4:ab:cf:b9: 9a:dd:c4:fa -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDQkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExNDFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDEwRjFBQUU3NkIzMzND NzM3NzZBNjlGRTE2Qzk2RTgzNDdDRDAxNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCKE1Lm9AN8twMA5Mrbbnoney/NDXuRP8tp/rbYRtRo4jny0HK 45KNm6EScud8sq6exsiO7JG26qFbLwS5TpA/tReZAebwvaDLbInin/r5L/HZgrAs zKRdFEMeuloJ/rjDM8fyNVU52/uC4Ps9RGPAK9fB2R7vw1ybTi7PDug709wv0wuf RIEvrgxLW2frks68Yl+R3eDBccfrXKVf2Ts5VsLy2nfzfiIb+eQa/SxGLiRYzzqu MZL2fbob95WxCZm/dBEIhiEhZf66d1SGAXFh1P54dl8YGlPlskPJ7quiULCDzIzm UwpKu1H85F+ucUBb2wBINTipfLKpyncCq4nZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUEPGq52szPHN3amn+Fslug0fNAUMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0VQR3E1MnN6UEhOM2Ftbi1Gc2x1ZzBmTkFVTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSsAwDQYJKoZIhvcNAQELBQADggEBALWGFs9XFm1XNwl3+FGbnkJx8Pms Nn0VguKkPzBqYBGJfwVhLy0pdckKUKVpnz5Jywf6KoLnKhwuuVOxqxGn338JjOOO FnpA0sD5wfnQ3hClqjS3TlEcWyP7UJ5LCqHOHBRXw3UTzJCzStNsU5eU+p/yBFZe qPtgN1UW1WsjT2F3tPph6CJV968Li4DgUkStbB4w80HPZvnwnd8rt7iKEKnju2mL fuldcLsYlR7Px492F0O4Fs/LPZPxGzOXyyVTOj4FvkT4PkxyEL4A+F5IqYw8LnZ0 cPtt7grIUvuKK9zSw3ypeMepWQyNNhXSaX98J/BLgkz23mg3pKvPuZrdxPo= -----END CERTIFICATE-----Generated at Wed Nov 5 20:56:41 2025 by rpki-client