$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LF-vmSOZHsS-S3xW_EEoRYZXits.roa File: LF-vmSOZHsS-S3xW_EEoRYZXits.roa (raw, json) Hash identifier: kdwknnQuCk1atHkBGAhfIrM0UcHlsr1SYPzpuz1KPwU= Subject key identifier: 2C:5F:AF:99:23:99:1E:C4:BE:4B:7C:56:FC:41:28:45:86:57:8A:DB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DC8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LF-vmSOZHsS-S3xW_EEoRYZXits.roa Signing time: Tue 01 Apr 2025 02:27:16 +0000 ROA not before: Tue 01 Apr 2025 02:27:16 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 219.114.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 11:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3528 (0xdc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:16 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=2C5FAF9923991EC4BE4B7C56FC41284586578ADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0d:05:c5:ba:0a:c0:1a:e8:3b:43:cd:67:04: f2:b0:44:07:a3:95:c8:2b:53:e3:48:58:2e:15:f4: a3:d0:2e:f6:27:5a:a3:fd:b5:93:26:38:58:11:5a: 25:a3:f7:3f:8c:b7:41:cb:19:f1:d8:76:bf:fd:2c: 97:46:ec:21:22:cd:61:01:9c:dc:b6:0f:dc:15:7e: 55:e1:e8:08:3e:e5:63:fe:0e:1d:28:ec:85:1c:03: ef:13:63:1f:c9:ab:b3:73:ee:ec:cb:1c:7e:7b:54: 2f:28:aa:1b:9e:21:c2:81:ec:12:db:a6:6d:4e:b8: 91:5c:1a:d0:0e:b4:bb:92:f7:b0:f1:ec:a0:7d:5e: a2:21:af:13:48:25:1d:7c:50:cb:1a:a0:5f:d5:44: ff:5a:ce:df:0c:16:7b:3d:7d:18:68:dd:a8:6c:f5: a2:7e:b3:7d:6b:8d:7d:e0:d9:fc:e7:83:19:63:07: 05:f4:e3:6d:6a:9c:99:88:99:bf:96:55:f1:62:cf: 0c:14:29:ac:7d:e1:98:0a:2c:06:ea:bd:64:99:8c: e2:61:b9:e0:db:5d:6a:2c:9e:d3:a5:65:90:2c:01: 1a:ff:48:4a:5a:80:91:e8:6c:3d:e8:e5:b8:28:b4: d7:e9:8c:c2:21:e5:3e:ae:dc:7f:19:4b:22:d2:8e: 38:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5F:AF:99:23:99:1E:C4:BE:4B:7C:56:FC:41:28:45:86:57:8A:DB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LF-vmSOZHsS-S3xW_EEoRYZXits.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.188.0/22 Signature Algorithm: sha256WithRSAEncryption 98:8a:57:59:46:bd:2d:7b:ac:ea:76:b9:99:0e:aa:94:78:4f: a8:fb:65:76:e0:c3:41:d9:93:b2:24:18:9c:01:ce:39:45:31: 0d:cb:f4:a9:b3:5f:9e:bc:a6:bb:21:2c:bb:b6:4b:a1:21:0c: 55:72:45:a0:1b:c0:eb:0f:95:d9:23:12:ba:b1:06:45:b4:d3: 3a:ab:4c:29:bc:a3:47:8d:36:97:0a:ab:9e:7d:d1:c8:3b:6d: 1c:5a:b5:6f:7d:d8:54:a1:1f:71:48:79:55:fa:1b:1d:89:de: ed:d1:ae:7c:ad:a3:69:74:bb:82:10:12:37:1d:84:d9:68:c1: 3d:aa:97:9d:6d:1d:5b:a7:ec:af:d8:bb:fe:a3:fc:32:52:cd: a8:c5:1f:94:a3:86:4f:bd:56:d2:62:b5:06:ac:68:d3:e2:c7: 30:42:00:53:4b:d7:b5:16:c4:24:0e:a6:e9:30:b8:0a:6f:68: 70:bc:41:ce:de:18:94:de:0e:e8:3c:22:c3:e9:e6:70:cd:9e: cd:51:f9:cc:6b:fc:9e:3f:7a:34:32:98:84:1f:ca:db:8f:8e: b6:81:17:a0:ed:48:b4:2c:9f:d1:48:6b:0a:c1:90:79:88:12: 80:c0:0a:92:c9:a6:ac:10:01:87:e5:69:07:39:2a:8d:50:80: a6:1a:28:ff -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDcgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MTZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJDNUZBRjk5MjM5OTFF QzRCRTRCN0M1NkZDNDEyODQ1ODY1NzhBREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkDQXFugrAGug7Q81nBPKwRAejlcgrU+NIWC4V9KPQLvYnWqP9 tZMmOFgRWiWj9z+Mt0HLGfHYdr/9LJdG7CEizWEBnNy2D9wVflXh6Ag+5WP+Dh0o 7IUcA+8TYx/Jq7Nz7uzLHH57VC8oqhueIcKB7BLbpm1OuJFcGtAOtLuS97Dx7KB9 XqIhrxNIJR18UMsaoF/VRP9azt8MFns9fRho3ahs9aJ+s31rjX3g2fzngxljBwX0 421qnJmImb+WVfFizwwUKax94ZgKLAbqvWSZjOJhueDbXWosntOlZZAsARr/SEpa gJHobD3o5bgotNfpjMIh5T6u3H8ZSyLSjjjDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULF+vmSOZHsS+S3xW/EEoRYZXitswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xGLXZtU09aSHNTLVMzeFdfRUVvUllaWGl0cy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbcrwwDQYJKoZIhvcNAQELBQADggEBAJiKV1lGvS17rOp2uZkOqpR4T6j7 ZXbgw0HZk7IkGJwBzjlFMQ3L9KmzX568prshLLu2S6EhDFVyRaAbwOsPldkjErqx BkW00zqrTCm8o0eNNpcKq5590cg7bRxatW992FShH3FIeVX6Gx2J3u3Rrnyto2l0 u4IQEjcdhNlowT2ql51tHVun7K/Yu/6j/DJSzajFH5Sjhk+9VtJitQasaNPixzBC AFNL17UWxCQOpukwuApvaHC8Qc7eGJTeDug8IsPp5nDNns1R+cxr/J4/ejQymIQf ytuPjraBF6DtSLQsn9FIawrBkHmIEoDACpLJpqwQAYflaQc5Ko1QgKYaKP8= -----END CERTIFICATE-----Generated at Wed Nov 5 13:34:39 2025 by rpki-client