$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EROMTfpjs5LRBl1GDZphH_ul0PM.roa File: EROMTfpjs5LRBl1GDZphH_ul0PM.roa (raw, json) Hash identifier: 4p2OjR90Y58z+OG13l8krNIrhqcmcM9FFqV1HGl5olU= Subject key identifier: 11:13:8C:4D:FA:63:B3:92:D1:06:5D:46:0D:9A:61:1F:FB:A5:D0:F3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DED Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EROMTfpjs5LRBl1GDZphH_ul0PM.roa Signing time: Tue 01 Apr 2025 02:29:04 +0000 ROA not before: Tue 01 Apr 2025 02:29:04 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3565 (0xded) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:29:04 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=11138C4DFA63B392D1065D460D9A611FFBA5D0F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:7d:c0:56:36:24:f0:b8:aa:8c:14:5d:9c: 34:bd:42:7b:4f:38:85:b4:bd:12:4f:3f:3e:07:3e: 3e:25:39:0c:c1:0e:25:8a:b2:c8:f6:e8:ab:ca:14: 76:17:aa:ee:6a:c0:84:66:9a:77:fb:50:0f:36:48: a3:49:03:62:44:dd:a6:60:f2:a2:be:8a:ae:b1:30: 9e:6b:23:43:08:8c:bc:7e:05:77:f9:dd:e3:b6:49: 83:21:ff:ca:89:c3:9b:ea:65:b3:c7:28:7d:c4:a3: fc:c5:63:88:f0:bc:9d:db:1a:a6:4f:42:35:04:c7: ad:97:28:3c:c9:03:25:20:a6:aa:c1:3c:48:be:e2: 9b:dd:83:24:57:dc:21:55:e6:e1:e1:89:0f:7d:df: f1:b9:47:23:06:08:96:ca:cd:8e:05:21:45:6d:8a: 69:34:d9:b1:60:53:06:0e:08:66:6d:3a:be:60:64: bf:6e:63:8a:f7:96:0c:ff:61:87:4e:15:80:23:88: cb:49:d3:0a:7f:63:f3:9f:7f:6c:a1:0a:e3:db:17: a1:e9:98:a9:69:89:77:30:a7:3c:4a:8e:78:51:2d: 94:9c:ba:1d:ed:64:1b:d1:26:c6:3b:a3:53:f6:6e: a3:ff:0a:c0:97:78:68:6e:46:39:ca:e8:3a:e2:00: fa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:13:8C:4D:FA:63:B3:92:D1:06:5D:46:0D:9A:61:1F:FB:A5:D0:F3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EROMTfpjs5LRBl1GDZphH_ul0PM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.56.0/22 Signature Algorithm: sha256WithRSAEncryption c4:9a:50:df:3c:8a:49:3d:69:5e:84:7b:14:a5:02:07:7b:39: cc:37:c6:29:d9:f3:20:3b:38:ac:0c:62:96:4b:7a:8c:90:6e: 5f:bf:2c:88:88:4f:76:ef:22:bb:9b:53:09:3e:9c:4e:45:f8: 7c:29:07:35:21:1a:79:09:10:52:07:33:5f:14:9e:b6:86:4a: ec:57:ff:f6:55:86:e6:53:3d:cc:54:74:b8:a7:c7:68:43:26: a6:35:a7:b1:e3:33:95:a3:4b:74:80:bd:9f:81:60:88:98:82: 39:39:d8:b8:c6:2c:49:65:e5:d9:0c:a8:f2:3b:52:de:08:81: 33:ee:30:c2:d9:da:45:1a:bb:79:f5:c0:90:26:b5:8b:ca:20: c9:c6:ed:52:c9:ed:26:4f:51:c4:2b:ca:be:58:52:7a:5f:9e: 79:11:8c:3a:8b:8d:49:8a:78:d0:c0:fc:62:a9:1a:50:30:4b: 44:e8:fc:77:86:44:93:98:84:3a:99:dc:fa:bb:fb:ff:e3:42: 39:cf:45:ca:a8:f1:a1:1d:4a:f3:83:68:f6:85:6c:58:49:4d: 83:54:44:5d:73:4d:28:54:35:eb:3d:29:50:b6:2e:d1:88:5b: a5:6f:96:19:4b:86:71:24:23:dc:ec:cb:63:fc:ee:3b:b1:33: 28:b2:ef:96 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI5MDRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDExMTM4QzRERkE2M0Iz OTJEMTA2NUQ0NjBEOUE2MTFGRkJBNUQwRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBQ33AVjYk8LiqjBRdnDS9QntPOIW0vRJPPz4HPj4lOQzBDiWK ssj26KvKFHYXqu5qwIRmmnf7UA82SKNJA2JE3aZg8qK+iq6xMJ5rI0MIjLx+BXf5 3eO2SYMh/8qJw5vqZbPHKH3Eo/zFY4jwvJ3bGqZPQjUEx62XKDzJAyUgpqrBPEi+ 4pvdgyRX3CFV5uHhiQ993/G5RyMGCJbKzY4FIUVtimk02bFgUwYOCGZtOr5gZL9u Y4r3lgz/YYdOFYAjiMtJ0wp/Y/Off2yhCuPbF6HpmKlpiXcwpzxKjnhRLZScuh3t ZBvRJsY7o1P2bqP/CsCXeGhuRjnK6DriAPoHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUEROMTfpjs5LRBl1GDZphH/ul0PMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0VST01UZnBqczVMUkJsMUdEWnBoSF91bDBQTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc0jgwDQYJKoZIhvcNAQELBQADggEBAMSaUN88ikk9aV6EexSlAgd7Ocw3 xinZ8yA7OKwMYpZLeoyQbl+/LIiIT3bvIrubUwk+nE5F+HwpBzUhGnkJEFIHM18U nraGSuxX//ZVhuZTPcxUdLinx2hDJqY1p7HjM5WjS3SAvZ+BYIiYgjk52LjGLEll 5dkMqPI7Ut4IgTPuMMLZ2kUau3n1wJAmtYvKIMnG7VLJ7SZPUcQryr5YUnpfnnkR jDqLjUmKeNDA/GKpGlAwS0To/HeGRJOYhDqZ3Pq7+//jQjnPRcqo8aEdSvODaPaF bFhJTYNURF1zTShUNes9KVC2LtGIW6VvlhlLhnEkI9zsy2P87juxMyiy75Y= -----END CERTIFICATE-----Generated at Wed Nov 5 17:17:12 2025 by rpki-client