$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mv2pC9tzA7V_FRCIbr6iVrE0wgw.roa File: Mv2pC9tzA7V_FRCIbr6iVrE0wgw.roa (raw, json) Hash identifier: Rb2E/KM/EVpbu6SZXCIxlYgKE4SvFdFm6h8f/IRJ1F0= Subject key identifier: 32:FD:A9:0B:DB:73:03:B5:7F:15:10:88:6E:BE:A2:56:B1:34:C2:0C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EE8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mv2pC9tzA7V_FRCIbr6iVrE0wgw.roa Signing time: Tue 10 Jun 2025 11:12:34 +0000 ROA not before: Tue 10 Jun 2025 11:12:34 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.161.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3816 (0xee8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:12:34 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=32FDA90BDB7303B57F1510886EBEA256B134C20C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:2e:d5:69:64:1d:ea:20:07:e6:1b:ca:44: 9d:54:db:48:ea:3c:95:48:bc:13:ec:24:92:e8:d7: 8b:f0:4e:dd:5f:d9:d4:36:c7:f0:15:9c:e1:19:17: 72:35:3a:ad:1d:aa:91:95:03:83:2f:f7:58:10:96: 37:f5:ce:f2:1e:6d:96:b7:d1:42:12:88:b1:0d:31: 33:d4:06:70:24:8f:32:16:a9:3a:7c:73:ac:0b:98: fb:7e:ec:70:65:d5:2a:ef:35:d9:1f:85:94:67:35: 5a:fd:cd:db:3b:8a:b9:d0:86:2c:4c:10:55:c4:51: 84:51:8c:03:40:ad:f9:ac:8d:9b:5b:80:47:f5:d4: a6:e7:c0:bf:99:d4:3a:2b:82:37:a0:c5:bb:02:d2: 24:02:fa:ec:ed:10:83:c1:bc:a5:ec:e9:0b:0f:a0: bf:de:7f:77:7e:09:c7:7e:7d:11:38:4e:2f:02:2f: f2:05:e1:e1:e8:86:73:2e:e3:5c:10:22:b2:0d:1c: 3b:2f:65:7c:80:3e:e7:10:88:3f:a5:cf:3e:3f:6d: e6:3f:00:57:24:fa:ef:2e:84:fd:0f:e8:80:03:89: b8:92:82:6a:3e:95:96:6f:2a:7a:85:bd:ea:7c:89: 2e:b2:52:91:b7:f4:7c:ec:c9:ce:7d:ae:23:05:ba: 5a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FD:A9:0B:DB:73:03:B5:7F:15:10:88:6E:BE:A2:56:B1:34:C2:0C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mv2pC9tzA7V_FRCIbr6iVrE0wgw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.208.0/21 Signature Algorithm: sha256WithRSAEncryption e3:0b:62:30:f9:79:05:b4:00:ac:f2:45:22:9f:64:f8:21:de: 01:55:fe:19:8b:e8:5f:26:47:a5:6e:5a:69:a1:09:f7:4b:9d: 4a:98:3d:9c:ae:0a:b7:a4:0f:1c:e2:5b:3e:50:d2:b5:4d:0f: 99:91:11:20:fb:8f:bc:4e:bd:d6:b6:4e:53:c5:ee:9c:0b:48: 6b:43:37:28:ba:61:1e:44:ec:71:cb:2f:fa:3f:68:ff:d3:fc: 41:49:c2:8a:29:08:c0:4f:7d:5a:0c:ac:6c:f1:41:7a:9b:85: 39:0f:68:6d:c3:77:16:59:79:04:1b:93:bc:ca:07:d7:f5:9b: a4:d9:e7:bf:f5:b2:73:4d:b4:92:55:b8:eb:83:62:b4:f2:e1: 0f:00:ee:ad:dc:b7:07:48:4a:73:dd:87:18:aa:cb:44:f1:a0: 9d:d2:8c:a1:fa:1a:18:ac:4b:cd:98:e9:7b:e5:21:9a:2e:bf: 17:5a:68:d9:84:06:e7:77:d9:f6:08:2a:4a:a7:67:31:22:9b: 91:31:7b:30:cc:31:6c:ab:a5:ae:2e:a8:30:35:ec:4b:d4:65: cc:58:92:3a:74:de:dc:64:45:d9:9f:a0:5a:c8:96:6d:2b:09: 93:23:59:7b:6a:96:92:62:ee:54:5c:8f:6b:72:5b:58:1f:de: cb:3a:ac:29 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDugwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTEyMzRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDMyRkRBOTBCREI3MzAz QjU3RjE1MTA4ODZFQkVBMjU2QjEzNEMyMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6mC7VaWQd6iAH5hvKRJ1U20jqPJVIvBPsJJLo14vwTt1f2dQ2 x/AVnOEZF3I1Oq0dqpGVA4Mv91gQljf1zvIebZa30UISiLENMTPUBnAkjzIWqTp8 c6wLmPt+7HBl1SrvNdkfhZRnNVr9zds7irnQhixMEFXEUYRRjANArfmsjZtbgEf1 1KbnwL+Z1DorgjegxbsC0iQC+uztEIPBvKXs6QsPoL/ef3d+Ccd+fRE4Ti8CL/IF 4eHohnMu41wQIrINHDsvZXyAPucQiD+lzz4/beY/AFck+u8uhP0P6IADibiSgmo+ lZZvKnqFvep8iS6yUpG39Hzsyc59riMFulqDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMv2pC9tzA7V/FRCIbr6iVrE0wgwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L012MnBDOXR6QTdWX0ZSQ0licjZpVnJFMHdndy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANuodAwDQYJKoZIhvcNAQELBQADggEBAOMLYjD5eQW0AKzyRSKfZPgh3gFV /hmL6F8mR6VuWmmhCfdLnUqYPZyuCrekDxziWz5Q0rVND5mRESD7j7xOvda2TlPF 7pwLSGtDNyi6YR5E7HHLL/o/aP/T/EFJwoopCMBPfVoMrGzxQXqbhTkPaG3DdxZZ eQQbk7zKB9f1m6TZ57/1snNNtJJVuOuDYrTy4Q8A7q3ctwdISnPdhxiqy0TxoJ3S jKH6GhisS82Y6XvlIZouvxdaaNmEBud32fYIKkqnZzEim5ExezDMMWyrpa4uqDA1 7EvUZcxYkjp03txkRdmfoFrIlm0rCZMjWXtqlpJi7lRcj2tyW1gf3ss6rCk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:52:53 2025 by rpki-client