$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LDqsUonalAgfHeSwB563VoshbSI.roa File: LDqsUonalAgfHeSwB563VoshbSI.roa (raw, json) Hash identifier: B0GPAKNtO3BDt/gT3qakBWumq0ebcKPHuYB+rSE2sKQ= Subject key identifier: 2C:3A:AC:52:89:DA:94:08:1F:1D:E4:B0:07:9E:B7:56:8B:21:6D:22 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F57 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LDqsUonalAgfHeSwB563VoshbSI.roa Signing time: Tue 10 Jun 2025 11:28:30 +0000 ROA not before: Tue 10 Jun 2025 11:28:30 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 219.114.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3927 (0xf57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:28:30 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=2C3AAC5289DA94081F1DE4B0079EB7568B216D22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:15:c5:da:fe:cf:68:dd:a9:52:71:05:ff: c6:9f:3a:46:b9:e4:01:23:f6:49:fe:78:5f:4e:0e: e1:1e:32:83:0b:c3:40:0b:fc:3b:96:e5:08:57:3c: fd:77:70:4f:f9:39:13:94:d7:af:27:5d:4a:68:15: 93:2d:ef:a1:95:b9:8f:f7:6c:81:2d:b5:51:e3:0f: 21:37:5c:aa:23:0d:b7:47:b4:6f:06:1f:08:38:84: b0:d4:53:7f:54:80:f9:65:f4:47:8c:51:36:13:48: 07:3d:3d:de:bc:49:1e:1c:9a:e9:85:ee:6c:94:2f: 2a:93:d6:7e:cb:91:90:7f:a9:cc:6f:41:b0:77:54: 9f:83:df:1f:d5:60:bc:28:1a:f4:19:cd:c1:c8:24: f4:86:7a:d9:ff:97:97:3c:91:ad:2c:bb:48:4b:ab: f2:90:39:3c:19:1f:38:1d:52:00:fd:c5:a7:f8:47: b9:a7:fe:a9:be:1b:a7:0c:65:bc:7a:a8:d0:12:14: c7:44:f3:e4:18:47:7e:9d:10:c9:49:2d:b3:7c:62: 76:79:db:c8:7d:ad:57:93:15:96:93:74:3c:c7:5c: 38:f9:93:bc:c8:f2:e1:77:2d:62:63:ef:b1:b4:b2: ac:1e:42:1b:02:7d:b9:a4:d9:8c:82:10:b5:cb:d4: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3A:AC:52:89:DA:94:08:1F:1D:E4:B0:07:9E:B7:56:8B:21:6D:22 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LDqsUonalAgfHeSwB563VoshbSI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.160.0/22 Signature Algorithm: sha256WithRSAEncryption ab:84:28:2e:0e:e3:1f:f3:7e:38:4b:af:ff:f0:55:9f:dc:e9: 13:c6:6e:2b:96:fa:2a:cd:f6:70:ce:58:d9:5b:21:bc:54:6c: 02:d9:f1:9a:92:db:dc:b7:2d:04:c0:ee:a4:bb:09:a1:59:a8: 85:34:82:23:f3:a3:4e:a9:52:ac:be:84:b5:28:98:13:80:30: 66:4d:bf:d7:d9:ef:89:ee:59:dc:e4:06:29:b9:a9:16:14:10: 06:5f:5f:c0:82:65:7b:20:b7:a2:31:7c:15:ab:bd:d9:cd:19: 92:7f:74:92:4d:5e:e4:5f:1c:a0:29:92:af:0d:7d:6f:6e:dd: db:4c:d3:4d:e4:93:d3:bc:28:55:28:a7:87:ee:6f:ed:58:b7: ed:89:a5:87:34:31:80:49:d5:53:b6:69:bc:f2:fb:b0:9a:91: 32:1a:17:8a:f3:7d:c5:6b:ac:10:f8:c2:d6:6d:c8:eb:16:8c: d4:45:10:97:4a:01:6c:49:f1:ed:21:14:cd:81:cc:91:42:97: 38:12:d6:39:29:3b:c2:4f:af:93:2f:08:15:98:ee:6c:04:2d: 79:06:2c:d7:2c:a1:eb:8b:cb:1d:ea:8b:0a:93:a0:d1:34:a9: 46:67:10:73:6c:ec:65:92:c3:83:4a:76:47:a4:0a:36:78:5a: 6e:e1:3d:6d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD1cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI4MzBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDJDM0FBQzUyODlEQTk0 MDgxRjFERTRCMDA3OUVCNzU2OEIyMTZEMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTXhXF2v7PaN2pUnEF/8afOka55AEj9kn+eF9ODuEeMoMLw0AL /DuW5QhXPP13cE/5OROU168nXUpoFZMt76GVuY/3bIEttVHjDyE3XKojDbdHtG8G Hwg4hLDUU39UgPll9EeMUTYTSAc9Pd68SR4cmumF7myULyqT1n7LkZB/qcxvQbB3 VJ+D3x/VYLwoGvQZzcHIJPSGetn/l5c8ka0su0hLq/KQOTwZHzgdUgD9xaf4R7mn /qm+G6cMZbx6qNASFMdE8+QYR36dEMlJLbN8YnZ528h9rVeTFZaTdDzHXDj5k7zI 8uF3LWJj77G0sqweQhsCfbmk2YyCELXL1DLlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULDqsUonalAgfHeSwB563VoshbSIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xEcXNVb25hbEFnZkhlU3dCNTYzVm9zaGJTSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbcqAwDQYJKoZIhvcNAQELBQADggEBAKuEKC4O4x/zfjhLr//wVZ/c6RPG biuW+irN9nDOWNlbIbxUbALZ8ZqS29y3LQTA7qS7CaFZqIU0giPzo06pUqy+hLUo mBOAMGZNv9fZ74nuWdzkBim5qRYUEAZfX8CCZXsgt6IxfBWrvdnNGZJ/dJJNXuRf HKApkq8NfW9u3dtM003kk9O8KFUop4fub+1Yt+2JpYc0MYBJ1VO2abzy+7CakTIa F4rzfcVrrBD4wtZtyOsWjNRFEJdKAWxJ8e0hFM2BzJFClzgS1jkpO8JPr5MvCBWY 7mwELXkGLNcsoeuLyx3qiwqToNE0qUZnEHNs7GWSw4NKdkekCjZ4Wm7hPW0= -----END CERTIFICATE-----Generated at Wed Nov 5 22:46:52 2025 by rpki-client