$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NaEnF_Z1YtzG-w2BDWiOw1fJN5Y.roa File: NaEnF_Z1YtzG-w2BDWiOw1fJN5Y.roa (raw, json) Hash identifier: ueVWyFoANqkHQG9yY/VIPIZAKnxbeClQYsj3H2/Fcng= Subject key identifier: 35:A1:27:17:F6:75:62:DC:C6:FB:0D:81:0D:68:8E:C3:57:C9:37:96 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F20 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NaEnF_Z1YtzG-w2BDWiOw1fJN5Y.roa Signing time: Tue 10 Jun 2025 11:20:23 +0000 ROA not before: Tue 10 Jun 2025 11:20:23 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.159.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3872 (0xf20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:20:23 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=35A12717F67562DCC6FB0D810D688EC357C93796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:22:31:83:be:eb:f6:18:b5:a0:28:7e:34: 8f:19:d5:7b:a3:bb:ef:f3:ce:b7:79:43:7d:2d:1d: cd:93:10:48:6f:b7:8e:52:5f:37:1b:53:24:4f:9d: 1a:5e:fc:57:4d:81:71:ff:cb:78:12:c6:97:0f:2d: bd:5f:1b:29:ba:94:0a:1c:60:76:6b:44:87:5b:ee: ad:3b:80:46:ab:db:8c:67:00:5d:b0:97:09:2f:7c: cb:16:a0:93:e2:48:38:53:b3:84:4d:20:0f:44:5d: 43:7e:66:11:c8:ae:7a:6d:a4:8f:04:9a:6b:0a:81: a6:f0:82:c7:c3:e8:dc:d4:08:82:9c:e0:c5:8c:39: a3:a5:fa:57:89:6b:31:1e:c6:11:fe:b1:5a:4d:b3: 2f:c1:53:87:e3:61:2c:00:fe:5d:94:49:92:c9:ec: 6a:b4:a1:0b:af:fd:43:48:bc:c4:25:f1:df:f9:0e: f8:c0:75:a7:57:5e:e0:c6:ce:7e:49:4c:41:fc:38: c6:0d:0f:df:3d:e4:aa:ca:c6:bd:de:de:2e:8a:7d: f9:72:1c:27:c1:e8:97:97:e5:4a:52:57:16:7f:53: f1:90:84:a6:da:2d:73:1c:5d:1d:24:22:59:ec:e2: 17:bf:73:45:bc:18:22:37:63:e8:9e:53:11:1d:28: c9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A1:27:17:F6:75:62:DC:C6:FB:0D:81:0D:68:8E:C3:57:C9:37:96 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NaEnF_Z1YtzG-w2BDWiOw1fJN5Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.64.0/19 Signature Algorithm: sha256WithRSAEncryption 03:68:fd:a3:f5:07:4d:37:17:bf:da:45:1f:f7:fe:ae:84:49: f4:f9:94:ab:41:f7:f6:e0:02:ab:39:bd:1f:3a:2f:a4:83:7c: 49:da:f9:bd:9a:c4:93:63:fd:72:ee:51:67:2b:41:16:4f:24: 80:e6:11:82:f2:5b:48:d0:43:9e:54:6a:33:43:6a:fb:2d:7f: 4c:74:79:66:a9:d1:28:76:35:7a:be:70:eb:0f:4a:07:bb:c5: c3:a3:a9:a5:53:03:86:57:cf:4e:29:a7:a3:bb:50:dc:ab:32: 01:2f:ed:47:66:41:32:ff:73:bb:2a:02:79:e8:42:45:fd:7c: 33:22:2e:f1:ff:d5:11:95:46:58:93:ea:94:cb:19:b5:36:5e: aa:9b:64:3e:33:d6:76:37:6d:6d:30:71:c3:4b:46:01:d3:30: 3d:56:5f:b6:bb:0c:91:6a:a6:2f:a3:b5:41:9e:e8:38:b1:c1: 21:b3:4b:a1:86:86:18:dd:7a:81:6f:8d:ae:9b:e3:e0:58:1e: ed:a9:e8:d0:6f:2a:99:5d:6c:7f:46:48:65:24:62:f6:a1:de: 58:9f:31:ed:8c:08:bb:d3:4f:5a:be:98:f9:66:85:eb:95:aa: a4:d8:a8:19:94:01:1b:69:3a:01:fc:d4:cf:60:2d:bc:ab:d8: 89:69:1d:2c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTIwMjNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDM1QTEyNzE3RjY3NTYy RENDNkZCMEQ4MTBENjg4RUMzNTdDOTM3OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq4yIxg77r9hi1oCh+NI8Z1Xuju+/zzrd5Q30tHc2TEEhvt45S XzcbUyRPnRpe/FdNgXH/y3gSxpcPLb1fGym6lAocYHZrRIdb7q07gEar24xnAF2w lwkvfMsWoJPiSDhTs4RNIA9EXUN+ZhHIrnptpI8EmmsKgabwgsfD6NzUCIKc4MWM OaOl+leJazEexhH+sVpNsy/BU4fjYSwA/l2USZLJ7Gq0oQuv/UNIvMQl8d/5DvjA dadXXuDGzn5JTEH8OMYND9895KrKxr3e3i6KfflyHCfB6JeX5UpSVxZ/U/GQhKba LXMcXR0kIlns4he/c0W8GCI3Y+ieUxEdKMlzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNaEnF/Z1YtzG+w2BDWiOw1fJN5YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L05hRW5GX1oxWXR6Ry13MkJEV2lPdzFmSk41WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXcn0AwDQYJKoZIhvcNAQELBQADggEBAANo/aP1B003F7/aRR/3/q6ESfT5 lKtB9/bgAqs5vR86L6SDfEna+b2axJNj/XLuUWcrQRZPJIDmEYLyW0jQQ55UajND avstf0x0eWap0Sh2NXq+cOsPSge7xcOjqaVTA4ZXz04pp6O7UNyrMgEv7UdmQTL/ c7sqAnnoQkX9fDMiLvH/1RGVRliT6pTLGbU2XqqbZD4z1nY3bW0wccNLRgHTMD1W X7a7DJFqpi+jtUGe6DixwSGzS6GGhhjdeoFvja6b4+BYHu2p6NBvKpldbH9GSGUk Yvah3lifMe2MCLvTT1q+mPlmheuVqqTYqBmUARtpOgH81M9gLbyr2IlpHSw= -----END CERTIFICATE-----Generated at Wed Nov 5 20:15:45 2025 by rpki-client