$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TAUtvO3QfXElLVaA84uDYVF2P-I.roa File: TAUtvO3QfXElLVaA84uDYVF2P-I.roa (raw, json) Hash identifier: 2Ib4LTbfqblAblHFOdyUmlHT09fDRVTWFG16Mx67XN4= Subject key identifier: 4C:05:2D:BC:ED:D0:7D:71:25:2D:56:80:F3:8B:83:61:51:76:3F:E2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DEB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TAUtvO3QfXElLVaA84uDYVF2P-I.roa Signing time: Tue 01 Apr 2025 02:29:04 +0000 ROA not before: Tue 01 Apr 2025 02:29:04 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3563 (0xdeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:29:04 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=4C052DBCEDD07D71252D5680F38B836151763FE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:d9:89:56:c9:22:9a:81:bd:31:6f:5d:99: 13:c7:04:60:14:61:c7:1c:38:79:42:2a:22:34:60: 26:c0:fa:4f:68:7e:f1:5d:03:03:22:14:00:a2:11: 46:49:49:69:12:e4:08:57:55:37:f9:30:07:a1:e9: 14:9c:75:f0:db:41:0b:58:2a:26:bc:ef:bc:67:01: 75:70:64:e5:7a:c2:89:a1:06:4c:ce:58:df:ed:04: ff:cd:72:7b:d4:b8:57:11:c2:9c:8c:7d:5f:ba:c2: f8:6c:c8:71:34:a9:26:21:47:f4:51:1a:f8:a1:e3: 69:1d:23:11:66:eb:0b:d2:f2:64:e9:b8:43:66:6e: ea:47:31:65:b7:f1:c0:da:db:6f:5b:7a:3c:86:49: c6:f7:ff:e7:9f:36:a3:c6:e3:d1:86:86:69:fb:61: e2:5a:86:e5:82:5c:55:59:e1:52:12:a5:e5:51:d8: 75:66:2d:be:97:3d:19:d6:9c:87:07:4d:78:5f:95: 44:ac:c6:fa:c7:d2:7b:e2:10:69:b8:b3:89:b7:7a: 8a:0b:5b:6a:89:01:45:f5:bb:ae:d4:81:69:96:18: 44:68:02:08:56:66:04:52:79:81:fe:c6:cd:ab:67: da:91:76:ba:dc:65:dd:9a:18:a8:89:b9:49:ab:5f: 01:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:05:2D:BC:ED:D0:7D:71:25:2D:56:80:F3:8B:83:61:51:76:3F:E2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TAUtvO3QfXElLVaA84uDYVF2P-I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.68.0/22 Signature Algorithm: sha256WithRSAEncryption 10:b5:3d:fa:83:7a:4f:c1:0f:3c:1b:1f:70:67:00:d6:1c:20: b9:01:2b:eb:7b:b7:6a:42:19:45:cc:29:a2:fd:00:26:07:f4: 8b:73:00:7d:68:39:9b:6e:f3:b3:78:2e:1b:9f:1b:b0:42:df: c2:6b:9c:27:a2:0e:24:40:75:be:3f:f0:f7:a9:ed:8f:25:33: c0:25:09:af:e9:ec:66:b6:ce:2b:4b:d0:d6:a0:a2:5d:64:52: c2:1a:fb:ee:03:39:8b:e3:7c:eb:fd:68:7b:cc:fe:5c:98:ea: 77:db:69:a7:dc:68:e6:f8:1b:ee:ca:8b:18:0d:72:af:e9:78: d7:cc:2e:27:f7:cc:2e:db:e0:91:22:d6:b7:bf:5a:35:9f:9f: 0c:d0:55:d1:6b:b2:6f:71:d6:42:3a:e3:86:36:8d:9e:c3:13: 73:95:bd:0d:55:b0:30:47:ee:6e:b9:4e:59:d4:2e:5c:22:4f: cd:9f:6e:e5:29:45:cb:8e:3d:4f:9e:40:32:84:14:0d:a4:d7: e4:4b:af:3b:a0:c5:a1:0a:a0:1d:04:98:2a:61:b1:86:e5:02: e2:9e:d4:40:7a:3f:ac:a5:39:41:ef:1c:fa:6b:47:da:36:05: 21:04:a9:e2:f1:e0:5d:82:b2:a4:42:2a:c7:10:c3:34:45:05: 19:e0:99:49 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI5MDRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRDMDUyREJDRUREMDdE NzEyNTJENTY4MEYzOEI4MzYxNTE3NjNGRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvLdmJVskimoG9MW9dmRPHBGAUYcccOHlCKiI0YCbA+k9ofvFd AwMiFACiEUZJSWkS5AhXVTf5MAeh6RScdfDbQQtYKia877xnAXVwZOV6womhBkzO WN/tBP/NcnvUuFcRwpyMfV+6wvhsyHE0qSYhR/RRGvih42kdIxFm6wvS8mTpuENm bupHMWW38cDa229bejyGScb3/+efNqPG49GGhmn7YeJahuWCXFVZ4VISpeVR2HVm Lb6XPRnWnIcHTXhflUSsxvrH0nviEGm4s4m3eooLW2qJAUX1u67UgWmWGERoAghW ZgRSeYH+xs2rZ9qRdrrcZd2aGKiJuUmrXwFRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTAUtvO3QfXElLVaA84uDYVF2P+IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RBVXR2TzNRZlhFbExWYUE4NHVEWVZGMlAtSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT0QwDQYJKoZIhvcNAQELBQADggEBABC1PfqDek/BDzwbH3BnANYcILkB K+t7t2pCGUXMKaL9ACYH9ItzAH1oOZtu87N4LhufG7BC38JrnCeiDiRAdb4/8Pep 7Y8lM8AlCa/p7Ga2zitL0Nagol1kUsIa++4DOYvjfOv9aHvM/lyY6nfbaafcaOb4 G+7KixgNcq/peNfMLif3zC7b4JEi1re/WjWfnwzQVdFrsm9x1kI644Y2jZ7DE3OV vQ1VsDBH7m65TlnULlwiT82fbuUpRcuOPU+eQDKEFA2k1+RLrzugxaEKoB0EmCph sYblAuKe1EB6P6ylOUHvHPprR9o2BSEEqeLx4F2CsqRCKscQwzRFBRngmUk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:52:48 2025 by rpki-client