$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HIOSIE6lyOrfzA0s9RLJL6N3Cbo.roa File: HIOSIE6lyOrfzA0s9RLJL6N3Cbo.roa (raw, json) Hash identifier: Ju4YvAvqLbs3+86slL4PfSRYU+c67tRQjHqeCcwIsHg= Subject key identifier: 1C:83:92:20:4E:A5:C8:EA:DF:CC:0D:2C:F5:12:C9:2F:A3:77:09:BA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CB7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HIOSIE6lyOrfzA0s9RLJL6N3Cbo.roa Signing time: Tue 01 Apr 2025 02:05:45 +0000 ROA not before: Tue 01 Apr 2025 02:05:45 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 110.163.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:45 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1C8392204EA5C8EADFCC0D2CF512C92FA37709BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:9f:e1:6c:87:eb:71:26:2f:55:66:95:4a: 6f:d3:c3:60:69:95:45:8f:3a:72:45:b4:b7:05:63: a7:ed:93:9c:a3:76:55:e1:d6:ca:8b:96:c0:0f:15: e2:19:25:0c:be:58:93:7f:15:db:0f:10:f5:68:ab: 52:11:7d:91:d3:b9:d2:c1:ee:44:7a:fb:7b:e0:87: 38:98:18:3a:e7:16:31:67:76:d7:91:aa:ac:ca:a1: e9:49:55:57:30:95:ff:ba:bd:29:d7:32:f6:31:6f: 18:68:48:6e:97:94:58:63:a3:f5:15:01:a1:20:05: c1:96:79:83:c4:c7:b8:84:1e:23:d4:5a:82:9a:cb: 48:1b:7e:02:c6:15:3a:44:da:2c:77:21:a6:76:37: 07:5e:2b:f0:d7:a8:c7:af:0f:3c:c0:b9:19:22:0f: b0:98:19:4a:f3:4c:0c:21:75:ed:d1:39:cc:b2:15: 7c:61:b6:e3:92:83:94:c4:65:82:35:78:28:45:16: ea:0f:72:1f:ac:48:b6:2f:7f:40:74:42:b8:0e:ff: 6f:bb:f4:a8:24:33:73:ce:be:a8:bb:0b:f6:d4:23: 2b:61:01:2e:58:85:c0:83:e4:0c:fa:95:cc:bd:7b: 25:77:b8:05:e7:cb:26:89:90:b3:86:4d:67:f8:2d: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:83:92:20:4E:A5:C8:EA:DF:CC:0D:2C:F5:12:C9:2F:A3:77:09:BA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HIOSIE6lyOrfzA0s9RLJL6N3Cbo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.163.20.0/23 Signature Algorithm: sha256WithRSAEncryption 98:cb:0b:39:09:70:0b:86:42:f1:7c:eb:e6:5b:62:47:09:07: ca:a1:18:88:c0:61:2b:a9:c8:e7:2d:4d:b1:98:76:0b:5b:50: 39:42:d4:cd:9e:3f:8b:e8:da:23:91:f0:c0:03:06:55:c4:a5: 2c:2b:26:06:28:be:3c:36:1a:2c:77:ee:2b:f5:d6:3d:7c:6e: 20:c1:b2:9e:04:40:89:b1:f8:68:35:af:95:2c:aa:ea:69:92: a6:7c:cf:be:b9:07:1e:75:c1:ee:1f:28:3a:19:54:e9:0a:52: d3:91:d6:b7:96:80:10:63:6a:cd:97:69:21:85:66:88:b8:fe: c4:00:9b:a2:a3:6a:8d:86:0e:6a:e7:61:1b:5c:26:c6:77:64: 99:18:68:be:ff:35:43:c2:f4:fb:38:05:d9:22:e1:39:7b:04: 3b:44:25:34:8e:05:51:af:4f:13:a3:b6:8f:9c:2a:61:c2:b5: 04:4c:50:00:02:f0:fe:e8:a1:a2:6a:fa:0f:77:2e:ac:09:b2: cf:16:0b:56:93:64:78:8d:04:f8:a7:78:84:31:9f:8d:f2:d3: 04:e2:9c:d9:c6:57:64:06:96:23:36:e9:c7:68:11:ae:62:e1: 3b:25:b6:3c:24:e4:ab:3f:e9:b8:f2:c8:23:61:42:b7:1e:01: b8:45:5c:52 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFDODM5MjIwNEVBNUM4 RUFERkNDMEQyQ0Y1MTJDOTJGQTM3NzA5QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8Lp/hbIfrcSYvVWaVSm/Tw2BplUWPOnJFtLcFY6ftk5yjdlXh 1sqLlsAPFeIZJQy+WJN/FdsPEPVoq1IRfZHTudLB7kR6+3vghziYGDrnFjFndteR qqzKoelJVVcwlf+6vSnXMvYxbxhoSG6XlFhjo/UVAaEgBcGWeYPEx7iEHiPUWoKa y0gbfgLGFTpE2ix3IaZ2NwdeK/DXqMevDzzAuRkiD7CYGUrzTAwhde3ROcyyFXxh tuOSg5TEZYI1eChFFuoPch+sSLYvf0B0QrgO/2+79KgkM3POvqi7C/bUIythAS5Y hcCD5Az6lcy9eyV3uAXnyyaJkLOGTWf4LSaPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHIOSIE6lyOrfzA0s9RLJL6N3CbowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hJT1NJRTZseU9yZnpBMHM5UkxKTDZOM0Niby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFuoxQwDQYJKoZIhvcNAQELBQADggEBAJjLCzkJcAuGQvF86+ZbYkcJB8qh GIjAYSupyOctTbGYdgtbUDlC1M2eP4vo2iOR8MADBlXEpSwrJgYovjw2Gix37iv1 1j18biDBsp4EQImx+Gg1r5UsquppkqZ8z765Bx51we4fKDoZVOkKUtOR1reWgBBj as2XaSGFZoi4/sQAm6Kjao2GDmrnYRtcJsZ3ZJkYaL7/NUPC9Ps4Bdki4Tl7BDtE JTSOBVGvTxOjto+cKmHCtQRMUAAC8P7ooaJq+g93LqwJss8WC1aTZHiNBPineIQx n43y0wTinNnGV2QGliM26cdoEa5i4Tsltjwk5Ks/6bjyyCNhQrceAbhFXFI= -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:24 2025 by rpki-client