$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PL9VrjvGSbLKFEFzl3GMzCjE8C4.roa File: PL9VrjvGSbLKFEFzl3GMzCjE8C4.roa (raw, json) Hash identifier: 0XY8zwubVJbcK7zzlFOqYxI9fZUN7WHgDKjFJbk5MsI= Subject key identifier: 3C:BF:55:AE:3B:C6:49:B2:CA:14:41:73:97:71:8C:CC:28:C4:F0:2E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E3E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PL9VrjvGSbLKFEFzl3GMzCjE8C4.roa Signing time: Sun 01 Jun 2025 01:30:16 +0000 ROA not before: Sun 01 Jun 2025 01:30:16 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.75.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3646 (0xe3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 1 01:30:16 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=3CBF55AE3BC649B2CA14417397718CCC28C4F02E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:cf:5c:c2:91:02:96:dc:c8:da:c8:d8:93: 4e:54:74:7b:ea:36:f6:ef:30:d7:81:41:63:27:de: aa:83:28:fc:34:fb:4f:12:9b:b3:87:38:15:c3:d8: d3:0f:5c:83:a6:58:a1:28:6e:77:9b:2a:c3:d4:17: 4a:51:ca:1e:6a:57:16:40:94:81:18:62:de:e2:6c: 76:e0:35:2f:7f:38:36:74:f9:27:90:20:83:fc:f9: 56:f7:f3:50:ee:2a:f7:dc:c2:6d:5a:1f:8c:4c:8b: 2b:83:18:34:70:11:c0:b8:f2:13:80:0f:ef:69:b8: 49:ee:59:3a:eb:38:c6:cb:a3:71:3e:8c:04:77:e6: ee:69:d5:4b:12:25:e3:9c:6a:01:fe:2a:75:51:b8: d8:1e:96:7d:34:a5:ef:68:07:ba:9c:1c:a0:1d:92: 4f:0c:80:6e:09:f2:fa:ac:d4:03:58:52:6c:e9:2f: 90:7c:ab:ac:c9:a2:35:64:95:3d:51:71:f7:83:86: d3:88:86:d6:88:50:1a:5e:ad:46:3d:09:1c:7e:7f: 6a:fc:b3:4f:2d:db:99:8a:a0:37:82:77:24:76:3c: 6a:c6:3f:1e:a8:4a:54:c3:8d:e5:f0:9c:0d:fd:de: 0c:4f:80:63:a6:98:ea:ad:3d:10:75:9a:6f:15:16: 38:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BF:55:AE:3B:C6:49:B2:CA:14:41:73:97:71:8C:CC:28:C4:F0:2E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PL9VrjvGSbLKFEFzl3GMzCjE8C4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.112.0/22 Signature Algorithm: sha256WithRSAEncryption e0:43:bc:d9:03:00:16:34:ae:71:fc:a2:8b:ea:f8:f4:60:2d: 6e:06:f8:2d:9f:f2:ad:79:eb:be:1e:cf:4d:ff:4b:3f:ce:b1: 26:6e:0f:38:61:ed:00:d1:53:16:03:0a:c4:76:83:35:ad:9e: 4a:e5:b4:af:33:b2:be:6c:4f:4b:02:14:f1:54:18:ef:a9:88: cd:ee:50:28:14:49:c6:1e:81:1e:27:f4:3f:b2:d3:67:c8:06: 9f:7f:13:63:aa:ec:65:29:34:54:77:38:5a:9d:6b:1b:ae:cd: ff:78:3a:7c:49:21:48:95:31:f5:0b:0b:8d:d1:9e:a9:45:4f: 57:c5:37:f3:43:bc:68:eb:47:4c:60:4f:74:e0:51:9f:5f:6d: 53:6b:80:25:03:3a:5e:ec:2c:13:70:49:02:b9:81:96:c5:91: 41:8d:fa:6f:dd:8e:e1:f4:d3:2b:09:ac:c2:52:02:3a:64:da: 17:07:81:b8:1d:55:e0:44:62:55:a3:59:a6:de:a6:8a:57:78: 15:0b:73:8b:e0:a0:87:1f:cc:e5:4c:c9:8f:33:8c:8e:a8:a4: 0d:c3:ad:bc:18:07:03:45:22:14:ff:bb:6e:01:ce:a4:65:7f: d4:86:91:46:bd:4a:c1:e8:5b:0c:e3:09:a4:05:0d:b4:f5:1a: f8:97:ff:cd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDj4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MDEw MTMwMTZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDNDQkY1NUFFM0JDNjQ5 QjJDQTE0NDE3Mzk3NzE4Q0NDMjhDNEYwMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz7c9cwpECltzI2sjYk05UdHvqNvbvMNeBQWMn3qqDKPw0+08S m7OHOBXD2NMPXIOmWKEobnebKsPUF0pRyh5qVxZAlIEYYt7ibHbgNS9/ODZ0+SeQ IIP8+Vb381DuKvfcwm1aH4xMiyuDGDRwEcC48hOAD+9puEnuWTrrOMbLo3E+jAR3 5u5p1UsSJeOcagH+KnVRuNgeln00pe9oB7qcHKAdkk8MgG4J8vqs1ANYUmzpL5B8 q6zJojVklT1RcfeDhtOIhtaIUBperUY9CRx+f2r8s08t25mKoDeCdyR2PGrGPx6o SlTDjeXwnA393gxPgGOmmOqtPRB1mm8VFjiBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPL9VrjvGSbLKFEFzl3GMzCjE8C4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BMOVZyanZHU2JMS0ZFRnpsM0dNekNqRThDNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBS3AwDQYJKoZIhvcNAQELBQADggEBAOBDvNkDABY0rnH8oovq+PRgLW4G +C2f8q15674ez03/Sz/OsSZuDzhh7QDRUxYDCsR2gzWtnkrltK8zsr5sT0sCFPFU GO+piM3uUCgUScYegR4n9D+y02fIBp9/E2Oq7GUpNFR3OFqdaxuuzf94OnxJIUiV MfULC43RnqlFT1fFN/NDvGjrR0xgT3TgUZ9fbVNrgCUDOl7sLBNwSQK5gZbFkUGN +m/djuH00ysJrMJSAjpk2hcHgbgdVeBEYlWjWabepopXeBULc4vgoIcfzOVMyY8z jI6opA3DrbwYBwNFIhT/u24BzqRlf9SGkUa9SsHoWwzjCaQFDbT1GviX/80= -----END CERTIFICATE-----Generated at Wed Nov 5 13:54:01 2025 by rpki-client