$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PLQQofGv5DEo7gl_Hv6_zZ0o6W4.roa File: PLQQofGv5DEo7gl_Hv6_zZ0o6W4.roa (raw, json) Hash identifier: m8XVXCnYtj8sHxxAFaVYvtIFqMOxvMBDtgiATtyEsPg= Subject key identifier: 3C:B4:10:A1:F1:AF:E4:31:28:EE:09:7F:1E:FE:BF:CD:9D:28:E9:6E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F1C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PLQQofGv5DEo7gl_Hv6_zZ0o6W4.roa Signing time: Tue 10 Jun 2025 11:20:21 +0000 ROA not before: Tue 10 Jun 2025 11:20:21 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 211.14.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3868 (0xf1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:20:21 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=3CB410A1F1AFE43128EE097F1EFEBFCD9D28E96E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:5d:7a:6b:03:d9:3c:99:e4:a1:77:2e:cc: 14:be:7a:0a:34:a8:ec:3f:67:bc:f9:71:92:54:27: 61:f3:3d:65:6f:de:aa:a9:70:63:4b:f2:1e:2c:56: c5:d9:75:9f:11:41:5d:e9:2d:3a:c6:d3:b7:59:3c: 9d:91:2b:d4:0d:74:12:01:71:17:10:77:ff:b1:53: 00:d4:fc:82:68:cd:ff:c5:71:2e:f1:f6:66:fb:b0: a7:1b:39:8d:78:8f:b8:01:f4:81:b0:e9:54:66:cc: 09:ab:56:68:ac:a1:1e:87:0f:f4:b5:58:f4:b3:ae: 9a:90:85:d4:c8:5b:7f:00:a7:ce:0d:5e:19:c8:46: 0d:50:91:9d:8b:51:51:5a:c3:a2:97:98:5c:a1:88: 2e:32:4c:e2:7f:fa:f8:25:e8:cb:1c:b3:6e:78:a2: d9:ea:c3:dc:28:f1:f7:71:b6:67:d0:46:83:2d:bb: 81:24:0a:ed:c6:c0:8d:68:09:3b:3b:ed:e7:59:d9: 9f:de:54:e6:64:bd:76:41:6d:78:40:eb:fe:47:8c: 35:fd:39:f7:a9:a1:49:ef:12:bd:74:f3:20:60:36: ea:b7:0c:37:6b:99:03:41:17:49:92:d9:f8:c3:97: 17:3f:01:a3:eb:c4:5c:8c:6f:6c:3a:53:35:8f:28: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B4:10:A1:F1:AF:E4:31:28:EE:09:7F:1E:FE:BF:CD:9D:28:E9:6E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PLQQofGv5DEo7gl_Hv6_zZ0o6W4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.74.0/24 Signature Algorithm: sha256WithRSAEncryption 25:bb:1b:48:df:59:7d:37:42:cd:6a:0d:68:9a:eb:9e:b0:09: c9:fa:8c:48:48:67:2a:56:f3:6e:42:3d:9f:69:5c:22:28:43: b2:5f:69:a4:79:be:2d:fc:52:d3:bd:f6:45:36:55:b5:26:59: f1:92:07:73:c2:df:a7:93:c3:e8:ac:1a:da:4f:7b:43:96:f3: b8:02:f3:94:ec:b6:af:25:b0:62:5e:38:47:2c:f3:0d:ca:ae: 10:c8:be:d9:53:94:10:28:11:86:f8:07:03:d1:86:3f:17:90: 7b:d2:08:df:a4:c3:32:6c:6f:7b:fa:7a:da:c9:10:fa:37:12: 75:2a:91:1f:1f:d3:8c:7c:86:36:e8:ed:bc:3d:b5:02:39:82: 65:61:de:43:ba:c6:de:2a:bb:1b:ef:30:ad:7e:cb:5c:d7:76: 96:37:c8:95:f6:22:47:bb:05:93:45:05:07:6d:70:35:6e:87: f1:f6:71:37:6d:d9:2b:3a:20:31:ae:36:94:9e:d0:f2:e9:96: a7:78:b2:e1:c9:8c:f2:3e:e0:96:49:3e:65:e1:f7:2c:57:ca: d9:6c:54:7a:e9:ee:a9:4e:4a:43:d6:0a:1c:7f:41:73:a0:f7: 4b:9a:6a:6b:c7:f2:7b:09:bb:74:7c:93:96:01:51:5a:b7:6f: c7:80:27:73 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDxwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTIwMjFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDNDQjQxMEExRjFBRkU0 MzEyOEVFMDk3RjFFRkVCRkNEOUQyOEU5NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJmV16awPZPJnkoXcuzBS+ego0qOw/Z7z5cZJUJ2HzPWVv3qqp cGNL8h4sVsXZdZ8RQV3pLTrG07dZPJ2RK9QNdBIBcRcQd/+xUwDU/IJozf/FcS7x 9mb7sKcbOY14j7gB9IGw6VRmzAmrVmisoR6HD/S1WPSzrpqQhdTIW38Ap84NXhnI Rg1QkZ2LUVFaw6KXmFyhiC4yTOJ/+vgl6Mscs254otnqw9wo8fdxtmfQRoMtu4Ek Cu3GwI1oCTs77edZ2Z/eVOZkvXZBbXhA6/5HjDX9OfepoUnvEr108yBgNuq3DDdr mQNBF0mS2fjDlxc/AaPrxFyMb2w6UzWPKG25AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPLQQofGv5DEo7gl/Hv6/zZ0o6W4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BMUVFvZkd2NURFbzdnbF9IdjZfelowbzZXNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADTDkowDQYJKoZIhvcNAQELBQADggEBACW7G0jfWX03Qs1qDWia656wCcn6 jEhIZypW825CPZ9pXCIoQ7JfaaR5vi38UtO99kU2VbUmWfGSB3PC36eTw+isGtpP e0OW87gC85Tstq8lsGJeOEcs8w3KrhDIvtlTlBAoEYb4BwPRhj8XkHvSCN+kwzJs b3v6etrJEPo3EnUqkR8f04x8hjbo7bw9tQI5gmVh3kO6xt4quxvvMK1+y1zXdpY3 yJX2Ike7BZNFBQdtcDVuh/H2cTdt2Ss6IDGuNpSe0PLplqd4suHJjPI+4JZJPmXh 9yxXytlsVHrp7qlOSkPWChx/QXOg90uaamvH8nsJu3R8k5YBUVq3b8eAJ3M= -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:59 2025 by rpki-client