$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgGgU3KcL4ynno9weA7_qXwMwg0.roa File: NgGgU3KcL4ynno9weA7_qXwMwg0.roa (raw, json) Hash identifier: 1CMdyEy879wiw6icklvbTC9thnW8EAO7zmaL3S63Ak8= Subject key identifier: 36:01:A0:53:72:9C:2F:8C:A7:9E:8F:70:78:0E:FF:A9:7C:0C:C2:0D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DE0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgGgU3KcL4ynno9weA7_qXwMwg0.roa Signing time: Tue 01 Apr 2025 02:27:28 +0000 ROA not before: Tue 01 Apr 2025 02:27:28 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 13:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3552 (0xde0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:28 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=3601A053729C2F8CA79E8F70780EFFA97C0CC20D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:13:c2:15:1f:89:3a:bf:30:66:a3:21:66:a4: 72:e3:c1:66:5a:e7:ca:81:9a:c3:c6:4c:71:11:c1: 7b:ed:27:4c:80:7b:54:2b:f1:37:15:47:34:55:a3: dd:97:f4:37:16:de:89:a3:f7:7d:8a:28:bc:13:ac: ce:8d:db:5c:3b:bf:24:90:d0:5e:dd:7b:0c:03:4c: 97:de:90:c8:62:54:f5:c5:50:c6:81:8c:ac:1f:94: d2:77:b9:4c:a1:90:6a:f0:c0:ae:9a:35:a2:2c:bb: f2:35:61:2f:47:fd:fc:a5:52:1e:14:cb:9f:9f:ed: e1:31:a0:8d:04:94:cb:10:8e:0a:0f:de:4f:e8:29: 9e:c8:8a:c9:05:e3:d2:8c:57:19:ef:e9:42:35:bc: 8d:45:c8:5b:ee:8e:05:3a:d5:34:08:ef:6c:9e:a3: 0d:5c:41:8d:f3:e5:4a:95:69:19:46:0a:b4:2c:0d: aa:78:e5:12:3d:11:a0:94:44:29:23:bd:de:de:ea: 0d:e8:77:12:e7:20:80:a2:23:74:69:72:be:1f:ae: d7:d1:14:53:41:41:36:3e:7a:92:04:4b:25:c4:dd: b8:d9:f2:88:dd:89:09:48:ce:96:f4:29:f8:ec:c8: 37:49:a7:50:bb:99:a8:52:28:1c:35:ac:4d:46:4f: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:01:A0:53:72:9C:2F:8C:A7:9E:8F:70:78:0E:FF:A9:7C:0C:C2:0D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgGgU3KcL4ynno9weA7_qXwMwg0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.68.0/22 Signature Algorithm: sha256WithRSAEncryption d4:83:89:23:bb:af:a7:af:e6:a0:00:00:eb:78:32:6f:02:df: f6:7e:bd:ad:07:bd:5a:87:56:f9:62:94:ed:ff:cc:ab:2d:44: 81:6b:8e:ea:ef:ce:fe:fa:26:a5:b8:a0:9f:ba:7a:ff:42:d1: 07:09:e1:63:b1:85:49:a9:c7:6f:79:3a:9e:0c:f1:a3:d1:b1: 4c:aa:9c:53:13:57:b1:46:56:ef:e2:ec:ba:b4:ee:25:9b:b4: 28:d9:b9:eb:3f:1a:19:94:0b:cc:e6:92:73:a3:4f:f3:7e:f4: b7:96:54:cc:0a:19:2f:cc:92:8b:da:67:b6:ec:33:80:84:bb: 44:02:72:65:50:07:0b:4f:a5:43:65:2e:be:d9:7e:94:32:8c: 1f:e5:4f:21:1f:d1:93:4f:56:b9:3e:7d:5f:42:26:11:b3:a9: 57:44:26:cf:26:a4:1e:1f:8c:7d:e2:33:98:06:f0:0f:14:5b: 1b:df:3b:5b:26:cb:45:2a:5e:a2:4b:c1:be:fc:02:28:3f:6c: c5:29:a6:ad:fb:95:29:b3:9f:d5:ba:df:03:e7:fd:49:21:bf: ea:bd:8d:98:d7:2b:bb:15:4a:9e:18:ea:ae:4e:1c:d5:2d:3e: 00:db:0f:90:1c:e8:7d:09:91:b3:e0:25:3e:2e:74:8f:36:c0: aa:a0:b6:cc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MjhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM2MDFBMDUzNzI5QzJG OENBNzlFOEY3MDc4MEVGRkE5N0MwQ0MyMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZE8IVH4k6vzBmoyFmpHLjwWZa58qBmsPGTHERwXvtJ0yAe1Qr 8TcVRzRVo92X9DcW3omj932KKLwTrM6N21w7vySQ0F7dewwDTJfekMhiVPXFUMaB jKwflNJ3uUyhkGrwwK6aNaIsu/I1YS9H/fylUh4Uy5+f7eExoI0ElMsQjgoP3k/o KZ7IiskF49KMVxnv6UI1vI1FyFvujgU61TQI72yeow1cQY3z5UqVaRlGCrQsDap4 5RI9EaCURCkjvd7e6g3odxLnIICiI3Rpcr4frtfRFFNBQTY+epIESyXE3bjZ8ojd iQlIzpb0KfjsyDdJp1C7mahSKBw1rE1GT0VdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNgGgU3KcL4ynno9weA7/qXwMwg0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L05nR2dVM0tjTDR5bm5vOXdlQTdfcVh3TXdnMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBQkQwDQYJKoZIhvcNAQELBQADggEBANSDiSO7r6ev5qAAAOt4Mm8C3/Z+ va0HvVqHVvlilO3/zKstRIFrjurvzv76JqW4oJ+6ev9C0QcJ4WOxhUmpx295Op4M 8aPRsUyqnFMTV7FGVu/i7Lq07iWbtCjZues/GhmUC8zmknOjT/N+9LeWVMwKGS/M kovaZ7bsM4CEu0QCcmVQBwtPpUNlLr7ZfpQyjB/lTyEf0ZNPVrk+fV9CJhGzqVdE Js8mpB4fjH3iM5gG8A8UWxvfO1smy0UqXqJLwb78Aig/bMUppq37lSmzn9W63wPn /Ukhv+q9jZjXK7sVSp4Y6q5OHNUtPgDbD5Ac6H0JkbPgJT4udI82wKqgtsw= -----END CERTIFICATE-----Generated at Wed Nov 5 15:21:14 2025 by rpki-client