$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HcQ0a7Y8j5vxiA0mpRJx2e_Ox38.roa File: HcQ0a7Y8j5vxiA0mpRJx2e_Ox38.roa (raw, json) Hash identifier: Tn33HPz9LXBPkwBSZKis20jztFwjL04PqV9d11myQRc= Subject key identifier: 1D:C4:34:6B:B6:3C:8F:9B:F1:88:0D:26:A5:12:71:D9:EF:CE:C7:7F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FB8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HcQ0a7Y8j5vxiA0mpRJx2e_Ox38.roa Signing time: Tue 10 Jun 2025 11:44:14 +0000 ROA not before: Tue 10 Jun 2025 11:44:14 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.159.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4024 (0xfb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:44:14 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=1DC4346BB63C8F9BF1880D26A51271D9EFCEC77F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:25:68:21:7a:94:24:9f:6c:3e:22:b8:99: 0f:7b:7d:ac:df:d2:ab:3c:b0:36:75:30:c7:79:49: 61:e2:d9:b8:cd:70:49:83:f3:9d:3e:95:cf:5a:91: 47:e5:b9:14:be:75:32:02:69:58:d8:07:b9:3e:3e: 78:b3:7d:ad:2d:29:aa:e6:fa:40:34:72:55:1e:ad: 3c:c3:67:f1:82:9c:1a:7f:38:fa:02:04:1a:38:1e: d5:56:a7:5c:38:47:90:5a:96:d1:c5:08:fd:8a:e3: eb:7f:5d:f6:0e:92:db:9d:95:0b:8f:d7:ee:ea:95: e9:5c:9c:3b:38:cb:92:04:fc:af:6b:8b:74:86:bc: 55:4e:59:04:8c:83:33:69:0c:f7:18:ee:92:41:d5: a4:a0:0d:d1:3f:94:0f:5d:4a:a2:4d:38:86:3a:ea: 0a:e8:30:4c:dd:df:4d:ce:81:91:83:2d:ab:81:ba: 3a:03:40:9e:b2:cf:52:41:51:be:17:1c:19:ef:00: ed:da:91:4b:ac:14:fa:c0:5a:58:61:a1:25:b3:3f: db:d8:69:1f:9b:57:b9:ce:ff:72:f2:0e:a7:0e:8e: 6b:80:78:b3:b7:6e:b3:56:ba:5b:a0:13:08:b2:c9: ab:f4:fe:1c:93:14:79:58:1e:e4:dc:c2:1d:69:2a: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C4:34:6B:B6:3C:8F:9B:F1:88:0D:26:A5:12:71:D9:EF:CE:C7:7F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HcQ0a7Y8j5vxiA0mpRJx2e_Ox38.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.208.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:b0:9d:db:50:b6:98:84:e2:c9:cc:4b:6a:14:65:e1:98:44: 52:ba:26:e1:9f:b8:72:3d:09:5a:94:9b:e2:0a:6c:b5:2f:1a: 34:77:cf:fa:ae:ac:f0:f3:80:e8:19:5f:3f:3a:7e:9b:95:83: 7b:be:2c:3b:bf:7f:d6:ec:32:3a:48:e5:d4:fa:33:39:51:24: d2:16:01:95:ea:8a:9d:8c:a4:68:cb:b1:98:d2:d7:a9:dd:1f: 8d:22:dd:69:d3:98:4c:3e:91:e3:6f:21:a6:a8:a8:5c:db:ee: 38:b4:52:dc:7b:44:47:78:14:61:97:a5:b1:bd:cc:e4:59:4e: 34:af:24:b4:51:90:7f:31:88:4a:25:04:f2:e9:09:6c:3e:95: 7e:79:a4:07:45:1d:c0:af:1d:0c:ec:6c:43:9c:17:30:1f:f2: 2e:a6:ff:1d:b8:b1:69:12:64:01:67:7b:15:bd:7c:9b:07:ff: 73:d8:a6:dc:2b:4b:a4:bc:f0:40:49:fc:76:18:5c:6d:56:1e: fe:9e:f8:9e:a3:b1:a1:01:1b:2b:49:e4:43:bb:9a:25:6a:40: d0:57:ea:0a:14:c0:a6:61:24:a0:be:f0:22:3a:b5:27:a0:9f: 26:49:ec:f8:03:36:70:02:f6:31:5c:38:0e:f3:ac:86:6c:15: 74:fc:92:fb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQ0MTRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDFEQzQzNDZCQjYzQzhG OUJGMTg4MEQyNkE1MTI3MUQ5RUZDRUM3N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtXiVoIXqUJJ9sPiK4mQ97fazf0qs8sDZ1MMd5SWHi2bjNcEmD 850+lc9akUfluRS+dTICaVjYB7k+Pnizfa0tKarm+kA0clUerTzDZ/GCnBp/OPoC BBo4HtVWp1w4R5BaltHFCP2K4+t/XfYOktudlQuP1+7qlelcnDs4y5IE/K9ri3SG vFVOWQSMgzNpDPcY7pJB1aSgDdE/lA9dSqJNOIY66groMEzd303OgZGDLauBujoD QJ6yz1JBUb4XHBnvAO3akUusFPrAWlhhoSWzP9vYaR+bV7nO/3LyDqcOjmuAeLO3 brNWulugEwiyyav0/hyTFHlYHuTcwh1pKtBLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHcQ0a7Y8j5vxiA0mpRJx2e/Ox38wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hjUTBhN1k4ajV2eGlBMG1wUkp4MmVfT3gzOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALcn9AwDQYJKoZIhvcNAQELBQADggEBAGuwndtQtpiE4snMS2oUZeGYRFK6 JuGfuHI9CVqUm+IKbLUvGjR3z/qurPDzgOgZXz86fpuVg3u+LDu/f9bsMjpI5dT6 MzlRJNIWAZXqip2MpGjLsZjS16ndH40i3WnTmEw+keNvIaaoqFzb7ji0Utx7REd4 FGGXpbG9zORZTjSvJLRRkH8xiEolBPLpCWw+lX55pAdFHcCvHQzsbEOcFzAf8i6m /x24sWkSZAFnexW9fJsH/3PYptwrS6S88EBJ/HYYXG1WHv6e+J6jsaEBGytJ5EO7 miVqQNBX6goUwKZhJKC+8CI6tSegnyZJ7PgDNnAC9jFcOA7zrIZsFXT8kvs= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:10 2025 by rpki-client