$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/M2jHI1gqMS6kTym4TrwhQbtFYfQ.roa File: M2jHI1gqMS6kTym4TrwhQbtFYfQ.roa (raw, json) Hash identifier: k0tTP0cbeyLKYOhoZSq1UFWPLMcxQnD/sgpO7aqi8Js= Subject key identifier: 33:68:C7:23:58:2A:31:2E:A4:4F:29:B8:4E:BC:21:41:BB:45:61:F4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B51 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M2jHI1gqMS6kTym4TrwhQbtFYfQ.roa Signing time: Tue 01 Apr 2025 01:33:17 +0000 ROA not before: Tue 01 Apr 2025 01:33:17 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2897 (0xb51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:33:17 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=3368C723582A312EA44F29B84EBC2141BB4561F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:50:7f:e5:98:1f:d3:e8:86:7d:f0:e0:7d:e8: 92:dd:6e:5c:7a:d1:67:f9:bf:c4:70:e3:61:4d:88: fc:a5:97:9f:86:3c:4d:be:31:ac:f2:64:49:f0:04: 23:f8:2d:2c:93:10:43:ff:1a:48:f1:7d:ad:3a:84: 39:65:ab:ee:f6:50:52:9f:19:2e:c3:3a:8a:7e:7c: b9:93:74:f1:41:ce:00:7b:f2:73:68:f7:22:0b:57: ae:e7:b1:d0:b5:3e:ef:b6:b5:b7:4d:6f:9e:69:67: a8:81:d4:79:8e:6c:f5:87:bf:b1:39:93:58:43:44: 13:e8:2c:81:fb:47:19:19:87:12:76:3b:8b:14:44: 42:25:55:91:62:33:4e:50:e9:55:63:b1:63:01:ab: ed:6a:f0:98:fd:6f:4a:fe:2c:69:9a:18:62:45:fb: 37:61:9d:e6:1b:ab:b6:ab:8c:81:65:1f:b6:bb:8a: ef:e2:b8:ee:39:44:06:1b:52:06:65:08:07:77:5c: 4b:ce:2e:39:d0:2f:ad:8a:33:bb:f9:d6:a1:cd:20: bf:3a:62:27:11:5d:56:83:9c:63:fd:7e:04:96:f6: 84:a6:c6:23:c7:b4:d6:af:d3:9e:1d:60:c7:db:07: 73:c9:26:8c:d8:5e:37:d0:c7:74:25:a9:96:15:77: de:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:68:C7:23:58:2A:31:2E:A4:4F:29:B8:4E:BC:21:41:BB:45:61:F4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M2jHI1gqMS6kTym4TrwhQbtFYfQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.214.0/23 Signature Algorithm: sha256WithRSAEncryption 68:a9:8f:53:de:7d:ca:7e:a1:5e:7f:ff:71:13:75:a9:2d:bd: 60:26:d4:11:f2:44:77:67:82:10:86:af:aa:b0:46:91:4e:14: c2:78:b1:cd:53:60:77:6c:88:c9:af:c8:f7:51:90:a7:40:83: 6a:4c:7a:df:73:5a:6e:7a:8e:d3:4a:3a:6b:a8:88:e3:cd:7c: 33:1c:e9:23:c3:1c:76:8b:44:c3:66:7b:a6:8a:5d:41:b3:29: b0:92:72:4e:e2:d2:3c:88:7b:4a:ec:07:6c:a7:fd:60:c4:02: 61:28:7e:97:63:9d:8a:5a:7d:cf:09:7b:12:7a:fe:fe:97:41: 3d:a3:06:7a:e8:cb:d8:bd:9d:51:73:74:8f:2a:fd:f3:8a:df: b1:c1:00:cc:b1:17:55:a9:ab:b3:ba:10:dc:19:11:9f:2c:61: a9:a0:10:bd:92:51:36:8b:b0:df:db:ca:62:d3:7a:ca:83:e4: 2e:31:9d:de:d6:b0:cc:f0:92:4f:40:b3:5d:31:ec:25:4f:b5: 7b:d0:57:46:ed:69:d8:6a:33:45:2e:06:23:a4:07:00:ec:b8: 82:28:57:0a:c4:0a:b1:ba:36:a5:42:f6:c2:16:82:70:94:93: b6:6b:fd:e6:74:96:3e:20:b0:0c:f3:af:fc:98:1f:32:6e:ff: 68:a0:92:b6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC1EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTMzMTdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMzNjhDNzIzNTgyQTMx MkVBNDRGMjlCODRFQkMyMTQxQkI0NTYxRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxUH/lmB/T6IZ98OB96JLdblx60Wf5v8Rw42FNiPyll5+GPE2+ MazyZEnwBCP4LSyTEEP/Gkjxfa06hDllq+72UFKfGS7DOop+fLmTdPFBzgB78nNo 9yILV67nsdC1Pu+2tbdNb55pZ6iB1HmObPWHv7E5k1hDRBPoLIH7RxkZhxJ2O4sU REIlVZFiM05Q6VVjsWMBq+1q8Jj9b0r+LGmaGGJF+zdhneYbq7arjIFlH7a7iu/i uO45RAYbUgZlCAd3XEvOLjnQL62KM7v51qHNIL86YicRXVaDnGP9fgSW9oSmxiPH tNav054dYMfbB3PJJozYXjfQx3QlqZYVd97LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUM2jHI1gqMS6kTym4TrwhQbtFYfQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L00yakhJMWdxTVM2a1R5bTRUcndoUWJ0RllmUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS9YwDQYJKoZIhvcNAQELBQADggEBAGipj1Pefcp+oV5//3ETdaktvWAm 1BHyRHdnghCGr6qwRpFOFMJ4sc1TYHdsiMmvyPdRkKdAg2pMet9zWm56jtNKOmuo iOPNfDMc6SPDHHaLRMNme6aKXUGzKbCSck7i0jyIe0rsB2yn/WDEAmEofpdjnYpa fc8JexJ6/v6XQT2jBnroy9i9nVFzdI8q/fOK37HBAMyxF1Wpq7O6ENwZEZ8sYamg EL2SUTaLsN/bymLTesqD5C4xnd7WsMzwkk9As10x7CVPtXvQV0btadhqM0UuBiOk BwDsuIIoVwrECrG6NqVC9sIWgnCUk7Zr/eZ0lj4gsAzzr/yYHzJu/2igkrY= -----END CERTIFICATE-----Generated at Wed Nov 5 20:10:46 2025 by rpki-client