$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JQm8l_wSbJ9W_GKA1udSLLWG2MM.roa File: JQm8l_wSbJ9W_GKA1udSLLWG2MM.roa (raw, json) Hash identifier: Qr7y6pnsovtgNz1dWXu6QBDXmJ91jZuH/Qjmik6I1tM= Subject key identifier: 25:09:BC:97:FC:12:6C:9F:56:FC:62:80:D6:E7:52:2C:B5:86:D8:C3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E65 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JQm8l_wSbJ9W_GKA1udSLLWG2MM.roa Signing time: Tue 10 Jun 2025 10:53:23 +0000 ROA not before: Tue 10 Jun 2025 10:53:23 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.66.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3685 (0xe65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:53:23 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=2509BC97FC126C9F56FC6280D6E7522CB586D8C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:38:46:1d:d0:e6:39:88:4b:a6:78:54:6a:11: 02:da:17:e1:c1:70:2a:38:08:55:62:b4:db:a6:fa: 45:f4:2d:e2:5a:2d:d1:21:a3:ae:79:ab:91:20:6f: f7:62:2d:bc:f9:c8:5b:15:c7:e0:3b:a3:0d:b8:26: 97:b7:fa:da:77:c3:d6:31:74:3d:49:61:96:f7:73: 21:0d:e5:68:76:82:74:b7:db:15:51:ea:6f:78:e3: 89:54:1a:a1:5d:79:88:bb:39:2a:20:93:5b:e4:c8: 4c:04:48:37:45:8b:5a:42:f1:2a:fb:d6:68:65:42: 41:23:f8:86:71:6c:f7:84:dd:c8:23:6d:af:81:6f: 47:3b:d0:c8:b0:af:3e:f5:45:93:bd:ba:73:42:56: 0f:8d:c0:96:d3:a6:2d:d0:43:4a:6c:3f:41:e1:43: 3a:78:e1:ad:d0:28:f0:eb:ce:f4:82:f6:18:b5:c3: 44:12:01:0f:70:bc:b6:ca:7f:55:c1:83:8f:86:7a: 47:61:6b:81:fd:8e:fd:b3:51:53:1c:69:45:8e:4f: db:07:99:12:74:7d:85:b3:8a:b2:83:d8:ad:df:86: 43:18:87:a0:ad:de:4e:9f:40:32:c5:ae:e5:9f:05: d5:60:b5:64:a6:d5:8e:37:6c:7d:cc:f3:5b:66:5a: 5f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:09:BC:97:FC:12:6C:9F:56:FC:62:80:D6:E7:52:2C:B5:86:D8:C3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JQm8l_wSbJ9W_GKA1udSLLWG2MM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.120.0/21 Signature Algorithm: sha256WithRSAEncryption 79:c9:e5:1b:4f:44:c1:98:7e:92:d9:ca:10:6e:56:b9:c4:fe: a3:0c:8c:43:67:36:15:c7:12:8e:ef:cf:e0:45:b3:e4:f6:ae: d2:ac:2e:a5:ea:38:cb:be:98:b6:cb:56:65:af:ab:2b:57:94: f6:ef:1e:f4:d1:d2:e4:4d:bf:b7:f5:66:6c:28:e7:bc:54:47: 96:58:05:6b:9c:f7:7b:d8:34:b1:cb:a3:01:e8:f9:1a:31:1a: 16:9b:91:4a:ac:06:2c:52:55:9e:7f:d5:ce:b1:a5:28:ec:8e: d5:ae:58:71:f2:9b:38:fa:aa:ac:4e:b4:80:f8:61:7f:e1:04: f5:ca:50:e2:66:03:3d:33:a5:9b:5a:6a:e3:e6:64:68:55:d8: 63:be:99:42:01:a3:ff:f3:25:3b:ab:e5:59:d8:53:0f:d8:a6: 6f:29:1e:fe:8a:16:0e:2c:37:1c:02:bb:66:c7:07:27:8a:f5: 3e:ea:7d:e0:19:29:61:2e:57:ed:a5:e5:80:5b:3d:b4:4c:44: c5:e8:00:79:78:17:a1:46:7f:7c:a1:c6:1a:b3:27:9a:73:a5: 5f:ff:40:3f:f3:6b:da:d4:60:64:69:00:e1:eb:20:cf:3a:06: 5e:9e:dc:52:a2:c5:a3:16:fc:c7:06:e3:77:27:61:fa:4e:ea: 7e:92:28:fb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDUzMjNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDI1MDlCQzk3RkMxMjZD OUY1NkZDNjI4MEQ2RTc1MjJDQjU4NkQ4QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvOEYd0OY5iEumeFRqEQLaF+HBcCo4CFVitNum+kX0LeJaLdEh o655q5Egb/diLbz5yFsVx+A7ow24Jpe3+tp3w9YxdD1JYZb3cyEN5Wh2gnS32xVR 6m9444lUGqFdeYi7OSogk1vkyEwESDdFi1pC8Sr71mhlQkEj+IZxbPeE3cgjba+B b0c70Miwrz71RZO9unNCVg+NwJbTpi3QQ0psP0HhQzp44a3QKPDrzvSC9hi1w0QS AQ9wvLbKf1XBg4+Gekdha4H9jv2zUVMcaUWOT9sHmRJ0fYWzirKD2K3fhkMYh6Ct 3k6fQDLFruWfBdVgtWSm1Y43bH3M81tmWl/JAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJQm8l/wSbJ9W/GKA1udSLLWG2MMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0pRbThsX3dTYko5V19HS0ExdWRTTExXRzJNTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBQngwDQYJKoZIhvcNAQELBQADggEBAHnJ5RtPRMGYfpLZyhBuVrnE/qMM jENnNhXHEo7vz+BFs+T2rtKsLqXqOMu+mLbLVmWvqytXlPbvHvTR0uRNv7f1Zmwo 57xUR5ZYBWuc93vYNLHLowHo+RoxGhabkUqsBixSVZ5/1c6xpSjsjtWuWHHymzj6 qqxOtID4YX/hBPXKUOJmAz0zpZtaauPmZGhV2GO+mUIBo//zJTur5VnYUw/Ypm8p Hv6KFg4sNxwCu2bHByeK9T7qfeAZKWEuV+2l5YBbPbRMRMXoAHl4F6FGf3yhxhqz J5pzpV//QD/za9rUYGRpAOHrIM86Bl6e3FKixaMW/McG43cnYfpO6n6SKPs= -----END CERTIFICATE-----Generated at Wed Nov 5 13:54:07 2025 by rpki-client