$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ps5osW5ZPeE8Fy07hfgS600XYM8.roa File: Ps5osW5ZPeE8Fy07hfgS600XYM8.roa (raw, json) Hash identifier: m58i6Q1boyL3HQ7mZFEXUAbMbABs/Iov/jSifRiplMk= Subject key identifier: 3E:CE:68:B1:6E:59:3D:E1:3C:17:2D:3B:85:F8:12:EB:4D:17:60:CF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F66 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ps5osW5ZPeE8Fy07hfgS600XYM8.roa Signing time: Tue 10 Jun 2025 11:32:28 +0000 ROA not before: Tue 10 Jun 2025 11:32:28 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 211.14.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3942 (0xf66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:28 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=3ECE68B16E593DE13C172D3B85F812EB4D1760CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:b9:64:ae:4f:cc:6c:47:0d:fe:ea:93:b4: 6a:31:37:e5:96:b8:c5:79:ab:69:65:24:01:23:b5: 15:66:5e:22:f9:ca:4e:56:eb:4b:5d:12:f1:96:f0: 51:aa:86:47:44:e6:df:a3:f5:89:96:58:6a:d5:80: 68:02:6d:bb:a7:52:05:a4:c5:58:24:cc:14:af:31: 77:02:69:32:1d:d5:fc:57:3f:50:91:d9:7c:eb:b4: 2a:53:3a:07:4f:32:7d:61:ce:4a:77:93:aa:7a:c3: 03:9a:13:54:74:6d:92:f4:41:c5:7a:58:7d:fc:5d: e7:85:7f:e5:22:04:c2:45:89:49:c3:b0:2e:02:56: e3:2b:24:a5:ad:27:f1:a2:76:86:71:f9:5f:bb:8b: eb:35:7a:70:e5:6b:72:64:58:8a:dd:f3:7b:a8:64: 5c:65:79:59:d3:72:30:21:f3:ec:05:91:bc:38:90: 3f:f5:f0:de:0b:eb:2f:5e:e0:af:74:86:a2:e0:34: 0b:64:d9:d6:a2:b0:8a:fe:e0:6b:7a:20:b8:4d:ff: d2:7d:b8:10:6b:e3:21:77:97:66:b8:89:07:06:a0: d5:75:7f:f7:d8:d5:17:f7:ea:d2:26:76:14:dd:6c: 79:72:1e:14:59:e0:ee:f1:f4:b6:d6:d7:a7:91:05: e8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CE:68:B1:6E:59:3D:E1:3C:17:2D:3B:85:F8:12:EB:4D:17:60:CF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ps5osW5ZPeE8Fy07hfgS600XYM8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.112.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:a2:00:cc:e9:ae:f2:e7:cd:6c:6d:65:a0:2a:d5:9c:2f:b9: db:47:3d:ef:cf:6b:a1:5f:cd:73:ea:96:d1:e9:6e:a6:59:8c: 2f:c9:9e:b2:93:92:1e:0a:b7:ce:b9:9e:16:39:5a:dd:4e:f5: d3:fa:4e:e8:76:26:f5:49:6d:20:f9:3b:cf:d8:83:54:50:cf: 7a:8e:85:bb:17:59:04:23:22:44:73:a1:61:f2:39:82:8f:37: 2d:82:03:6a:2e:65:67:91:c8:ce:21:f3:61:0b:4b:27:6f:fd: 43:1c:23:88:b9:58:e7:73:11:f3:98:99:99:4f:2b:53:26:06: 35:c2:af:77:a2:17:93:8b:75:e3:36:ff:9f:a6:b9:6f:ab:6a: 14:0b:0c:8a:11:fb:2c:ed:34:e0:00:ef:2a:9d:7f:02:78:f3: 61:47:54:41:bd:3f:bf:bf:ad:50:2c:14:59:87:c6:ce:cf:c0: 53:59:9d:e1:db:bb:c4:53:d3:1f:08:04:9b:05:d2:e5:27:75: 8a:66:85:81:8a:d6:d6:8c:de:be:5d:7e:b7:71:c5:1b:d1:0a: 10:60:aa:78:16:ed:f4:92:5d:9f:80:9f:20:65:73:5a:b3:2f: d6:bd:d5:ed:43:fa:a9:4b:1b:7e:ef:e1:c6:f5:b9:63:94:6a: a9:c7:4d:4d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD2YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMjhaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDNFQ0U2OEIxNkU1OTNE RTEzQzE3MkQzQjg1RjgxMkVCNEQxNzYwQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDeLlkrk/MbEcN/uqTtGoxN+WWuMV5q2llJAEjtRVmXiL5yk5W 60tdEvGW8FGqhkdE5t+j9YmWWGrVgGgCbbunUgWkxVgkzBSvMXcCaTId1fxXP1CR 2XzrtCpTOgdPMn1hzkp3k6p6wwOaE1R0bZL0QcV6WH38XeeFf+UiBMJFiUnDsC4C VuMrJKWtJ/GidoZx+V+7i+s1enDla3JkWIrd83uoZFxleVnTcjAh8+wFkbw4kD/1 8N4L6y9e4K90hqLgNAtk2daisIr+4Gt6ILhN/9J9uBBr4yF3l2a4iQcGoNV1f/fY 1Rf36tImdhTdbHlyHhRZ4O7x9LbW16eRBeh1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPs5osW5ZPeE8Fy07hfgS600XYM8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BzNW9zVzVaUGVFOEZ5MDdoZmdTNjAwWFlNOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTDnAwDQYJKoZIhvcNAQELBQADggEBAI+iAMzprvLnzWxtZaAq1ZwvudtH Pe/Pa6FfzXPqltHpbqZZjC/JnrKTkh4Kt865nhY5Wt1O9dP6Tuh2JvVJbSD5O8/Y g1RQz3qOhbsXWQQjIkRzoWHyOYKPNy2CA2ouZWeRyM4h82ELSydv/UMcI4i5WOdz EfOYmZlPK1MmBjXCr3eiF5OLdeM2/5+muW+rahQLDIoR+yztNOAA7yqdfwJ482FH VEG9P7+/rVAsFFmHxs7PwFNZneHbu8RT0x8IBJsF0uUndYpmhYGK1taM3r5dfrdx xRvRChBgqngW7fSSXZ+AnyBlc1qzL9a91e1D+qlLG37v4cb1uWOUaqnHTU0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:30 2025 by rpki-client