$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FIrQ8ycM2rDkM1Q6Pn34Clz-nMQ.roa File: FIrQ8ycM2rDkM1Q6Pn34Clz-nMQ.roa (raw, json) Hash identifier: RCjbNJBcK1jKLVivWc4N5KkIIjBQ0D+5gpQUVWgjA1E= Subject key identifier: 14:8A:D0:F3:27:0C:DA:B0:E4:33:54:3A:3E:7D:F8:0A:5C:FE:9C:C4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EAD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FIrQ8ycM2rDkM1Q6Pn34Clz-nMQ.roa Signing time: Tue 10 Jun 2025 11:00:46 +0000 ROA not before: Tue 10 Jun 2025 11:00:46 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.159.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3757 (0xead) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:00:46 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=148AD0F3270CDAB0E433543A3E7DF80A5CFE9CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3e:86:81:23:65:c7:ba:95:0f:bd:b0:19:0a: fc:c2:6e:8b:3c:b5:a3:13:52:ef:72:00:7e:7f:ed: f6:81:c1:25:e1:10:15:2c:97:5b:ee:6d:53:c1:03: c2:6c:a6:3c:a0:5c:ab:69:83:b2:a2:eb:e2:1a:86: 09:3b:ec:2a:8c:60:49:b2:1e:d7:43:3f:ee:69:7d: f8:d1:88:97:e7:cc:5a:e9:2a:e0:5b:9c:87:a1:45: 83:28:47:d7:8c:48:d9:7b:07:4d:28:37:ae:1a:2d: e2:93:de:c4:4a:27:2d:ff:93:9c:5d:28:1e:e0:bf: e3:22:b8:db:df:73:f9:6a:4b:71:01:f1:df:e6:f7: 34:3f:f6:95:5e:d5:56:df:94:7f:e6:1e:2e:9e:ec: 81:f0:a3:91:4b:55:b6:89:b5:3c:76:93:42:0b:f5: b5:a3:be:e8:14:aa:27:ab:a4:a2:6d:00:f5:6a:bd: af:a2:c5:8c:4c:de:c1:2f:e5:2e:7f:bc:d0:a8:af: 69:da:01:9e:45:9a:5f:08:b3:c0:b4:39:e7:03:af: 75:f9:58:21:2a:74:99:a1:48:41:d8:ba:8f:89:50: 4a:02:4a:51:5b:fb:59:8c:a3:7a:db:42:40:34:87: 10:b7:8f:a2:f8:4d:94:49:5b:1a:75:32:7e:37:81: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8A:D0:F3:27:0C:DA:B0:E4:33:54:3A:3E:7D:F8:0A:5C:FE:9C:C4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FIrQ8ycM2rDkM1Q6Pn34Clz-nMQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.224.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:c9:d5:20:9a:53:3b:2a:ec:ab:e5:5b:1b:a8:1b:4b:57:04: 6f:a9:da:bb:43:ad:b3:7e:4f:a7:4c:2e:0b:cd:89:43:09:40: 8d:1e:17:4f:1b:1a:3d:ed:9c:75:6d:c6:67:42:fb:21:dd:a2: 3a:f3:9a:ea:41:8a:91:d4:da:47:d1:b7:b2:07:d9:20:2d:85: 7b:bf:f2:e9:0a:75:2b:91:45:11:b8:4f:26:e2:97:1f:be:47: e9:f0:ea:5b:2d:72:52:9e:e2:52:07:c1:c8:47:7c:bd:5b:9b: 62:f7:7c:6d:8e:62:0e:d0:a6:88:91:ac:cb:95:e9:da:14:1b: db:61:7e:3d:8f:66:e0:cb:ee:27:39:77:3c:f5:67:5a:c6:a5: 5a:0c:94:c5:11:5a:06:76:49:75:ec:ef:3c:39:3e:18:c2:b9: 1b:0e:2c:4d:38:eb:49:03:6c:2c:63:d9:f7:cb:19:d1:06:3d: 4f:fb:8d:92:79:e6:e9:92:46:68:da:eb:76:3a:ba:46:01:8d: cb:1c:85:ec:ca:31:f9:55:c0:3f:f3:1b:ca:99:4f:3b:74:f6: a7:0b:08:35:86:96:3a:fc:c3:c8:7f:0f:8c:f6:45:5d:53:ae: 5c:67:70:88:3a:b9:56:7e:bc:db:ba:17:7c:f3:09:60:17:48: f7:b2:42:65 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDq0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTAwNDZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDE0OEFEMEYzMjcwQ0RB QjBFNDMzNTQzQTNFN0RGODBBNUNGRTlDQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhPoaBI2XHupUPvbAZCvzCbos8taMTUu9yAH5/7faBwSXhEBUs l1vubVPBA8JspjygXKtpg7Ki6+Iahgk77CqMYEmyHtdDP+5pffjRiJfnzFrpKuBb nIehRYMoR9eMSNl7B00oN64aLeKT3sRKJy3/k5xdKB7gv+MiuNvfc/lqS3EB8d/m 9zQ/9pVe1VbflH/mHi6e7IHwo5FLVbaJtTx2k0IL9bWjvugUqierpKJtAPVqva+i xYxM3sEv5S5/vNCor2naAZ5Fml8Is8C0OecDr3X5WCEqdJmhSEHYuo+JUEoCSlFb +1mMo3rbQkA0hxC3j6L4TZRJWxp1Mn43gVp/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFIrQ8ycM2rDkM1Q6Pn34Clz+nMQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0ZJclE4eWNNMnJEa00xUTZQbjM0Q2x6LW5NUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcn+AwDQYJKoZIhvcNAQELBQADggEBAEzJ1SCaUzsq7KvlWxuoG0tXBG+p 2rtDrbN+T6dMLgvNiUMJQI0eF08bGj3tnHVtxmdC+yHdojrzmupBipHU2kfRt7IH 2SAthXu/8ukKdSuRRRG4Tybilx++R+nw6lstclKe4lIHwchHfL1bm2L3fG2OYg7Q poiRrMuV6doUG9thfj2PZuDL7ic5dzz1Z1rGpVoMlMURWgZ2SXXs7zw5PhjCuRsO LE0460kDbCxj2ffLGdEGPU/7jZJ55umSRmja63Y6ukYBjcschezKMflVwD/zG8qZ Tzt09qcLCDWGljr8w8h/D4z2RV1TrlxncIg6uVZ+vNu6F3zzCWAXSPeyQmU= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:19 2025 by rpki-client