$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JppLCHNYTbElUdWTqNDxDGjZq-I.roa File: JppLCHNYTbElUdWTqNDxDGjZq-I.roa (raw, json) Hash identifier: qBe3dehGZqxQN56C9hYDyh33Z06SZr5ZWt7uJYykpMY= Subject key identifier: 26:9A:4B:08:73:58:4D:B1:25:51:D5:93:A8:D0:F1:0C:68:D9:AB:E2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F8C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JppLCHNYTbElUdWTqNDxDGjZq-I.roa Signing time: Tue 10 Jun 2025 11:36:18 +0000 ROA not before: Tue 10 Jun 2025 11:36:18 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.76.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3980 (0xf8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:36:18 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=269A4B0873584DB12551D593A8D0F10C68D9ABE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:31:21:a3:ea:0d:4c:8f:45:ee:ce:62:47: 1d:ce:a5:ed:54:49:43:2e:74:c9:25:95:92:ac:dc: 2e:4b:fb:02:38:83:1e:17:22:fd:3f:82:0b:74:cd: 08:08:0a:20:59:bc:f5:1e:05:92:07:ff:d2:79:5f: 32:88:d3:1e:a6:8c:36:99:07:d7:5d:5d:9c:de:dc: 1c:ec:70:92:80:9d:cf:a4:f8:88:bb:23:be:3d:ac: af:85:0e:fc:64:f6:87:a7:f0:e0:41:58:20:e0:f4: 56:13:e7:e8:a5:41:1a:84:e6:ce:69:6a:65:7a:72: 6c:b6:a3:9e:68:85:bb:53:ec:11:17:25:8f:a5:e7: ce:61:25:d5:dd:80:aa:c7:50:19:57:ec:e6:34:1c: 78:53:07:73:c8:fa:4c:cb:91:a5:ca:1c:52:cf:5c: e1:95:a2:4d:38:c5:65:d6:36:5a:67:1f:56:8a:ac: b2:d3:6a:b3:e6:be:3a:fb:0f:ee:e7:9f:4b:34:3b: c5:ac:19:03:b3:7e:66:30:47:e7:7a:70:2a:b5:5a: f8:c1:8d:8b:7e:d7:58:52:a5:e1:64:28:75:6e:31: d1:d3:68:21:f5:39:f9:b3:3a:3c:ba:64:85:d0:b5: 5f:d3:fc:d3:61:c5:48:73:0d:e5:70:75:13:c7:8f: b6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9A:4B:08:73:58:4D:B1:25:51:D5:93:A8:D0:F1:0C:68:D9:AB:E2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JppLCHNYTbElUdWTqNDxDGjZq-I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.6.0/23 Signature Algorithm: sha256WithRSAEncryption 65:b1:11:3b:1f:f6:14:35:53:1a:57:02:9a:02:b4:c5:22:d8: 5e:e4:3c:c9:75:c8:4c:ff:c8:66:15:f7:be:9d:7a:c5:82:bc: 12:ff:71:de:5e:38:64:c6:0a:a9:a9:42:c8:28:d0:e8:42:3a: 8e:59:00:d0:16:b6:4f:f9:50:1d:9f:88:2b:68:9c:88:01:4f: 1e:97:0d:b1:1d:c4:43:a2:1f:0a:3d:68:2e:ca:4f:5c:69:3b: 84:9d:cb:6e:68:b2:4b:4f:f2:87:e0:2f:e2:3b:d8:74:4b:b9: c9:b5:3e:2a:87:27:cf:cd:d4:35:9f:8e:de:42:0c:f3:a5:9f: 20:d9:4b:fd:66:36:71:d1:7e:94:fa:58:98:ac:be:4e:88:52: b1:5f:6f:40:b2:8b:56:31:22:9f:69:02:34:0d:bc:a2:0a:9d: 26:f0:42:0c:67:49:9f:34:82:82:72:4f:95:fc:c3:a6:39:a6: ca:66:54:5f:97:ab:fa:9f:e3:f7:eb:c1:69:3d:95:43:8d:c4: 44:bc:6d:c2:ca:e4:eb:27:9a:5b:7c:cf:19:7c:57:16:31:72: b1:1e:50:67:4c:be:92:8c:60:12:c6:95:25:40:ce:d6:89:0b: 4d:64:34:f3:b4:0e:92:8a:8b:03:31:0d:96:45:88:91:c8:f6: 81:aa:dd:84 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD4wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTM2MThaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDI2OUE0QjA4NzM1ODRE QjEyNTUxRDU5M0E4RDBGMTBDNjhEOUFCRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuuDEho+oNTI9F7s5iRx3Ope1USUMudMkllZKs3C5L+wI4gx4X Iv0/ggt0zQgICiBZvPUeBZIH/9J5XzKI0x6mjDaZB9ddXZze3BzscJKAnc+k+Ii7 I749rK+FDvxk9oen8OBBWCDg9FYT5+ilQRqE5s5pamV6cmy2o55ohbtT7BEXJY+l 585hJdXdgKrHUBlX7OY0HHhTB3PI+kzLkaXKHFLPXOGVok04xWXWNlpnH1aKrLLT arPmvjr7D+7nn0s0O8WsGQOzfmYwR+d6cCq1WvjBjYt+11hSpeFkKHVuMdHTaCH1 OfmzOjy6ZIXQtV/T/NNhxUhzDeVwdRPHj7bXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJppLCHNYTbElUdWTqNDxDGjZq+IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0pwcExDSE5ZVGJFbFVkV1RxTkR4REdqWnEtSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTAYwDQYJKoZIhvcNAQELBQADggEBAGWxETsf9hQ1UxpXApoCtMUi2F7k PMl1yEz/yGYV976desWCvBL/cd5eOGTGCqmpQsgo0OhCOo5ZANAWtk/5UB2fiCto nIgBTx6XDbEdxEOiHwo9aC7KT1xpO4Sdy25osktP8ofgL+I72HRLucm1PiqHJ8/N 1DWfjt5CDPOlnyDZS/1mNnHRfpT6WJisvk6IUrFfb0Cyi1YxIp9pAjQNvKIKnSbw QgxnSZ80goJyT5X8w6Y5pspmVF+Xq/qf4/frwWk9lUONxES8bcLK5Osnmlt8zxl8 VxYxcrEeUGdMvpKMYBLGlSVAztaJC01kNPO0DpKKiwMxDZZFiJHI9oGq3YQ= -----END CERTIFICATE-----Generated at Wed Nov 5 23:09:04 2025 by rpki-client