$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GD1oiS6YHl7XwmRWb_b4cRwnuPg.roa File: GD1oiS6YHl7XwmRWb_b4cRwnuPg.roa (raw, json) Hash identifier: 2icI6TuY1u9gVWRa2QSqoAzTWexzmo9QAq44T0dBsXk= Subject key identifier: 18:3D:68:89:2E:98:1E:5E:D7:C2:64:56:6F:F6:F8:71:1C:27:B8:F8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CCC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GD1oiS6YHl7XwmRWb_b4cRwnuPg.roa Signing time: Tue 01 Apr 2025 02:09:11 +0000 ROA not before: Tue 01 Apr 2025 02:09:11 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 110.163.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3276 (0xccc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:11 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=183D68892E981E5ED7C264566FF6F8711C27B8F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:40:ef:23:57:44:15:43:74:82:1a:38:49:01: ae:a5:5b:24:b4:9a:56:c3:8d:16:9a:92:cb:ec:67: 79:2f:14:3d:f9:e7:4a:9d:46:65:fc:eb:b5:3e:36: 9d:5d:77:3a:9c:f4:ed:7f:fa:fb:e0:16:39:a0:15: f4:47:34:a2:2f:18:c9:c4:c8:85:e9:78:a7:5a:83: 0c:1a:b5:17:67:d7:f1:63:57:32:0f:05:17:3a:c1: bf:73:75:ed:f1:b7:ad:5b:e0:8c:82:23:b1:41:81: f9:b0:cc:5c:be:94:a1:a1:c5:53:5d:72:72:f2:79: e4:dc:ee:81:4e:35:45:6b:61:e2:0c:e1:40:3a:2f: 1f:69:d6:55:4e:ce:31:f1:1c:b8:81:77:f2:13:29: ad:2f:2b:73:4c:f6:bf:8f:e2:db:98:a6:b8:02:d1: 1a:cb:73:24:2d:99:7b:92:ba:e1:e6:64:41:55:eb: 6a:de:01:29:29:b4:06:46:09:d6:6c:82:c2:0a:a2: d5:4b:8a:71:29:07:d5:c1:d6:61:a7:b4:2d:3c:7d: 77:f4:4b:a2:65:aa:aa:58:6b:91:6f:bd:a3:86:23: 25:da:25:fa:96:c3:7d:68:11:90:72:3f:e9:66:b5: ab:8d:7d:45:0e:03:80:b4:5b:b5:72:19:15:b3:96: c8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3D:68:89:2E:98:1E:5E:D7:C2:64:56:6F:F6:F8:71:1C:27:B8:F8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GD1oiS6YHl7XwmRWb_b4cRwnuPg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.163.21.0/24 Signature Algorithm: sha256WithRSAEncryption 52:ba:65:20:f3:70:99:b4:f9:18:71:70:6d:bb:e7:0e:b0:3b: 0d:69:e7:34:2c:fc:fe:69:65:fa:60:8a:65:9f:c0:78:9f:70: c5:44:d2:bb:e6:b5:fe:00:f7:cd:47:4e:ad:b5:8d:a9:5a:04: 5b:65:f0:08:79:8f:7c:0b:ec:71:65:df:24:16:ee:ae:79:eb: 7b:b3:48:b2:11:6b:d3:c0:df:b3:6b:3e:7c:36:44:5b:56:8c: 1e:06:30:20:7c:0b:7e:7b:28:80:dd:8a:c7:b0:fe:84:60:6b: e1:34:3d:54:2e:e8:bd:af:ed:6e:03:60:a5:21:85:45:06:9c: 1e:d5:7a:23:79:c3:fd:bd:d1:95:64:24:43:ca:93:a4:3f:8b: 02:b9:a2:75:ef:17:e1:3e:a8:58:a7:f9:e3:ce:9c:44:b7:04: ad:53:3d:e0:8d:98:3e:c0:63:a6:bb:05:26:ca:83:fe:6f:71: 6c:27:f2:e7:ab:35:1a:ec:83:72:d6:5f:f0:95:e9:2e:6e:d2: d1:77:2b:e4:d7:24:99:55:73:3d:e1:5c:aa:fc:68:c0:6f:a3: 18:09:1c:c5:50:6f:91:51:01:59:31:5c:65:99:a1:3c:d2:30: f5:3c:b7:72:31:6f:5f:fb:03:3d:21:92:52:84:19:93:ab:bf: 1d:7e:ea:ec -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MTFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE4M0Q2ODg5MkU5ODFF NUVEN0MyNjQ1NjZGRjZGODcxMUMyN0I4RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoQO8jV0QVQ3SCGjhJAa6lWyS0mlbDjRaaksvsZ3kvFD3550qd RmX867U+Np1ddzqc9O1/+vvgFjmgFfRHNKIvGMnEyIXpeKdagwwatRdn1/FjVzIP BRc6wb9zde3xt61b4IyCI7FBgfmwzFy+lKGhxVNdcnLyeeTc7oFONUVrYeIM4UA6 Lx9p1lVOzjHxHLiBd/ITKa0vK3NM9r+P4tuYprgC0RrLcyQtmXuSuuHmZEFV62re ASkptAZGCdZsgsIKotVLinEpB9XB1mGntC08fXf0S6JlqqpYa5FvvaOGIyXaJfqW w31oEZByP+lmtauNfUUOA4C0W7VyGRWzlsjRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGD1oiS6YHl7XwmRWb/b4cRwnuPgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0dEMW9pUzZZSGw3WHdtUldiX2I0Y1J3bnVQZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABuoxUwDQYJKoZIhvcNAQELBQADggEBAFK6ZSDzcJm0+RhxcG275w6wOw1p 5zQs/P5pZfpgimWfwHifcMVE0rvmtf4A981HTq21jalaBFtl8Ah5j3wL7HFl3yQW 7q5563uzSLIRa9PA37NrPnw2RFtWjB4GMCB8C357KIDdisew/oRga+E0PVQu6L2v 7W4DYKUhhUUGnB7VeiN5w/290ZVkJEPKk6Q/iwK5onXvF+E+qFin+ePOnES3BK1T PeCNmD7AY6a7BSbKg/5vcWwn8uerNRrsg3LWX/CV6S5u0tF3K+TXJJlVcz3hXKr8 aMBvoxgJHMVQb5FRAVkxXGWZoTzSMPU8t3Ixb1/7Az0hklKEGZOrvx1+6uw= -----END CERTIFICATE-----Generated at Wed Nov 5 15:49:32 2025 by rpki-client