$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WOw3pMO40EC_q5lYxtCTBU159UY.roa File: WOw3pMO40EC_q5lYxtCTBU159UY.roa (raw, json) Hash identifier: A64Zo+hSVFPhSyn5DhgqlLJPaTepAjGuUqkQm7aZFz8= Subject key identifier: 58:EC:37:A4:C3:B8:D0:40:BF:AB:99:58:C6:D0:93:05:4D:79:F5:46 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F9D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WOw3pMO40EC_q5lYxtCTBU159UY.roa Signing time: Tue 10 Jun 2025 11:40:30 +0000 ROA not before: Tue 10 Jun 2025 11:40:30 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.67.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3997 (0xf9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:40:30 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=58EC37A4C3B8D040BFAB9958C6D093054D79F546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:94:37:c9:a4:1c:e7:11:fc:b1:1a:b4:4e: 8e:8a:27:0d:62:fa:a1:3f:5e:bd:7f:d1:e2:89:f9: 2e:76:31:f1:d6:b2:11:19:45:f8:1a:55:6a:ef:f8: 2e:0f:ef:71:63:4f:e1:a5:ab:8f:f8:78:ba:44:14: 45:9e:28:81:81:a1:ea:1f:0a:56:ef:f8:6a:48:dd: 1c:37:20:43:e1:10:bc:a7:ae:fd:33:2d:c9:30:22: dd:f1:3b:c3:aa:17:c0:74:4f:8f:10:dd:62:7c:d5: 14:aa:9b:d0:51:51:be:90:4d:fd:f1:aa:06:47:3c: 3a:4c:a5:ef:08:e0:74:e6:c6:6c:32:09:ad:c2:95: 15:89:60:2b:a3:17:b7:e2:4c:76:bd:8d:c5:ea:9b: 86:77:e0:96:6f:1c:37:4e:bd:78:f1:96:3d:d1:21: 24:a2:ea:64:7e:e5:08:32:35:65:2e:25:90:12:5f: 63:27:27:97:54:ba:a6:d0:fa:b9:e3:74:4d:61:39: cb:51:6c:62:d2:fe:cc:58:fc:f3:9d:cb:6e:79:4d: d8:8b:43:79:ec:23:ad:3c:a0:d9:c1:aa:9e:f7:e7: a4:07:49:f2:90:c3:fb:83:3f:56:cd:5c:b3:e5:22: 44:44:7f:b1:26:a9:81:04:9c:7c:20:fa:d9:53:a0: f4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EC:37:A4:C3:B8:D0:40:BF:AB:99:58:C6:D0:93:05:4D:79:F5:46 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WOw3pMO40EC_q5lYxtCTBU159UY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.248.0/21 Signature Algorithm: sha256WithRSAEncryption 28:05:81:27:39:19:84:0c:71:f2:b6:f0:1f:ce:cb:cd:dd:b9: e0:0e:ca:4d:dc:03:77:9f:ad:17:a3:ad:fe:f1:be:ab:94:3a: a0:c0:24:f1:98:3d:e6:e7:ef:0f:73:71:5d:5b:ab:b0:cb:8f: c4:b8:f5:b4:2a:f6:87:df:b0:94:e3:6e:f9:24:1d:51:75:98: 15:d9:86:23:1f:eb:69:02:8e:19:99:5b:98:f9:c8:fb:32:f8: 5f:ca:7f:98:b6:73:f8:d1:c8:b9:2d:51:12:46:a5:6a:eb:0f: bf:45:cf:61:4b:a8:b2:3c:da:5e:18:2f:75:13:7e:d4:67:68: a6:be:48:7c:c6:8b:34:d9:4a:58:4b:63:20:6e:4e:0a:1a:9c: 43:a8:ad:51:ae:5a:15:32:b1:6d:50:af:ee:51:4b:8a:89:50: 04:17:8c:be:03:3b:d1:b4:9e:72:d8:44:2c:37:cb:c6:fe:40: 87:6a:e6:de:d9:8a:bb:0c:20:e0:65:4a:a2:f2:60:30:e4:aa: 13:1b:7e:d7:eb:da:1c:8f:4f:4e:dc:c6:2b:78:f0:5c:e8:2c: fd:06:57:ff:a5:ae:24:fc:ae:ca:4b:3b:6d:57:bd:46:fd:86: 17:7a:32:d5:46:08:28:47:df:16:e3:4f:1d:03:05:9e:95:5e: 92:9b:c2:ea -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQwMzBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDU4RUMzN0E0QzNCOEQw NDBCRkFCOTk1OEM2RDA5MzA1NEQ3OUY1NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/bZQ3yaQc5xH8sRq0To6KJw1i+qE/Xr1/0eKJ+S52MfHWshEZ RfgaVWrv+C4P73FjT+Glq4/4eLpEFEWeKIGBoeofClbv+GpI3Rw3IEPhELynrv0z LckwIt3xO8OqF8B0T48Q3WJ81RSqm9BRUb6QTf3xqgZHPDpMpe8I4HTmxmwyCa3C lRWJYCujF7fiTHa9jcXqm4Z34JZvHDdOvXjxlj3RISSi6mR+5QgyNWUuJZASX2Mn J5dUuqbQ+rnjdE1hOctRbGLS/sxY/POdy255TdiLQ3nsI608oNnBqp7356QHSfKQ w/uDP1bNXLPlIkREf7EmqYEEnHwg+tlToPQlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWOw3pMO40EC/q5lYxtCTBU159UYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1dPdzNwTU80MEVDX3E1bFl4dENUQlUxNTlVWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBQ/gwDQYJKoZIhvcNAQELBQADggEBACgFgSc5GYQMcfK28B/Oy83dueAO yk3cA3efrRejrf7xvquUOqDAJPGYPebn7w9zcV1bq7DLj8S49bQq9offsJTjbvkk HVF1mBXZhiMf62kCjhmZW5j5yPsy+F/Kf5i2c/jRyLktURJGpWrrD79Fz2FLqLI8 2l4YL3UTftRnaKa+SHzGizTZSlhLYyBuTgoanEOorVGuWhUysW1Qr+5RS4qJUAQX jL4DO9G0nnLYRCw3y8b+QIdq5t7ZirsMIOBlSqLyYDDkqhMbftfr2hyPT07cxit4 8FzoLP0GV/+lriT8rspLO21XvUb9hhd6MtVGCChH3xbjTx0DBZ6VXpKbwuo= -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:21 2025 by rpki-client