$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OleQF3N7DvfNXrUHrtFLAr6L1M0.roa File: OleQF3N7DvfNXrUHrtFLAr6L1M0.roa (raw, json) Hash identifier: DbvnJ8RMFTs7gcKhdrlCRDmABYhFtzfpAB1YsAxZjy8= Subject key identifier: 3A:57:90:17:73:7B:0E:F7:CD:5E:B5:07:AE:D1:4B:02:BE:8B:D4:CD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FA2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OleQF3N7DvfNXrUHrtFLAr6L1M0.roa Signing time: Tue 10 Jun 2025 11:40:32 +0000 ROA not before: Tue 10 Jun 2025 11:40:32 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4002 (0xfa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:40:32 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=3A579017737B0EF7CD5EB507AED14B02BE8BD4CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:4e:3c:4e:ff:44:0c:4b:c3:f9:14:46:64: 62:12:d7:b0:1e:d7:31:a0:5d:c9:1d:cb:ea:01:40: 31:58:a7:78:cd:55:ef:11:86:a3:b0:5f:9f:ff:9d: d6:59:68:25:71:fc:0f:fe:23:76:b0:70:e9:1d:72: 18:3c:ff:07:a4:8d:50:69:a3:45:87:b1:56:b8:a1: dd:04:74:60:85:40:c0:ab:e2:93:cc:ff:61:8e:8b: e2:2c:40:b8:95:79:50:1d:72:ce:6f:1d:d4:da:7f: 98:27:d8:10:59:6e:eb:43:01:6a:eb:12:5a:e2:f1: 08:5e:70:3e:30:4c:5b:26:b5:cf:d3:6c:2d:7f:62: fb:a9:b4:1c:4f:51:3b:c3:53:b6:09:b7:da:ce:4c: 4c:0c:20:dd:85:5f:d5:34:d5:fd:97:08:62:a9:9e: f4:b2:e6:52:ee:dc:08:bb:81:34:8c:6a:79:24:2b: 39:25:ab:90:a3:d9:e4:db:4a:fa:5f:e1:c7:ae:ec: 84:34:1a:1a:75:0b:6e:71:be:5b:29:54:10:44:4c: 83:c2:84:73:9f:29:b9:50:37:bf:94:6d:39:0f:bf: b9:36:1d:f4:22:c2:ce:e9:4f:d8:79:75:0e:b9:12: f8:8c:e6:33:c2:5a:ab:75:67:62:d7:87:bf:1f:98: 8c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:57:90:17:73:7B:0E:F7:CD:5E:B5:07:AE:D1:4B:02:BE:8B:D4:CD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OleQF3N7DvfNXrUHrtFLAr6L1M0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.28.0/24 Signature Algorithm: sha256WithRSAEncryption e7:62:49:f1:89:89:35:3a:82:02:ca:57:57:22:79:59:1c:88: ac:6e:ee:36:9d:86:e6:74:2b:10:d0:be:ca:3d:e8:2c:27:62: 4a:8a:59:a4:fb:17:54:20:34:97:38:6c:6a:74:a5:9f:0e:b1: 58:2e:a9:44:c5:50:3c:0a:84:2a:af:f4:7b:c7:70:58:a2:de: ce:6b:27:81:c1:43:14:f7:02:d4:80:f6:84:41:e2:69:31:c7: 43:a9:09:fc:18:2b:bd:6f:75:99:4c:c3:b6:f2:02:df:7c:82: e5:f2:89:c3:f4:8f:d1:f9:cf:a0:a5:38:0b:fd:d2:ac:76:de: 9f:ab:7a:eb:46:f2:a1:46:7c:8f:6b:be:08:86:be:14:37:44: 98:18:2c:3b:58:fe:34:2a:7e:a7:78:4d:26:d0:55:07:00:50: 57:ee:8d:29:fc:2b:6d:2e:10:d6:d8:47:3b:d1:3c:ba:08:ce: 32:16:bd:07:83:30:b4:4a:26:df:30:14:13:36:6f:27:78:97: c2:d7:60:08:b1:1b:56:ed:76:b0:df:3d:1a:6e:8e:f3:15:62: d5:46:c4:68:93:98:a6:e6:5e:18:a7:87:8a:16:77:12:d2:13: 36:e5:fc:0d:67:8f:20:17:d2:1d:b1:40:b4:87:e9:95:a5:b4: 8f:51:a1:23 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQwMzJaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDNBNTc5MDE3NzM3QjBF RjdDRDVFQjUwN0FFRDE0QjAyQkU4QkQ0Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxyk48Tv9EDEvD+RRGZGIS17Ae1zGgXckdy+oBQDFYp3jNVe8R hqOwX5//ndZZaCVx/A/+I3awcOkdchg8/wekjVBpo0WHsVa4od0EdGCFQMCr4pPM /2GOi+IsQLiVeVAdcs5vHdTaf5gn2BBZbutDAWrrElri8QhecD4wTFsmtc/TbC1/ YvuptBxPUTvDU7YJt9rOTEwMIN2FX9U01f2XCGKpnvSy5lLu3Ai7gTSMankkKzkl q5Cj2eTbSvpf4ceu7IQ0Ghp1C25xvlspVBBETIPChHOfKblQN7+UbTkPv7k2HfQi ws7pT9h5dQ65EviM5jPCWqt1Z2LXh78fmIw7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOleQF3N7DvfNXrUHrtFLAr6L1M0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09sZVFGM043RHZmTlhyVUhydEZMQXI2TDFNMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADc0hwwDQYJKoZIhvcNAQELBQADggEBAOdiSfGJiTU6ggLKV1cieVkciKxu 7jadhuZ0KxDQvso96CwnYkqKWaT7F1QgNJc4bGp0pZ8OsVguqUTFUDwKhCqv9HvH cFii3s5rJ4HBQxT3AtSA9oRB4mkxx0OpCfwYK71vdZlMw7byAt98guXyicP0j9H5 z6ClOAv90qx23p+reutG8qFGfI9rvgiGvhQ3RJgYLDtY/jQqfqd4TSbQVQcAUFfu jSn8K20uENbYRzvRPLoIzjIWvQeDMLRKJt8wFBM2byd4l8LXYAixG1btdrDfPRpu jvMVYtVGxGiTmKbmXhinh4oWdxLSEzbl/A1njyAX0h2xQLSH6ZWltI9RoSM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:51 2025 by rpki-client