$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WhrkQoLcTaQUDcC2WF0bd9_EuiQ.roa File: WhrkQoLcTaQUDcC2WF0bd9_EuiQ.roa (raw, json) Hash identifier: PdqFYl4TtAOobEPOFFzyTHfqiKcL7i2PYwIqLhOHLVI= Subject key identifier: 5A:1A:E4:42:82:DC:4D:A4:14:0D:C0:B6:58:5D:1B:77:DF:C4:BA:24 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EE6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WhrkQoLcTaQUDcC2WF0bd9_EuiQ.roa Signing time: Tue 10 Jun 2025 11:12:33 +0000 ROA not before: Tue 10 Jun 2025 11:12:33 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.72.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3814 (0xee6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:12:33 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=5A1AE44282DC4DA4140DC0B6585D1B77DFC4BA24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:21:af:c1:cf:d1:e9:d4:5a:5e:9a:36:db: 96:9b:47:eb:23:7d:a9:f8:d9:24:d1:d4:5a:4e:7a: c6:b8:30:4b:4b:84:8f:c8:84:3b:0d:1c:4f:f6:e6: 88:ee:77:1e:d7:04:ed:74:71:b5:91:b1:e5:0f:6f: 34:e3:47:f3:00:65:f2:49:a3:b1:54:99:75:75:d5: 8a:23:01:02:d4:18:23:3b:aa:cf:33:b4:ff:65:15: d4:f4:13:87:5a:00:04:b2:8b:00:4b:87:5d:ca:09: d4:3c:59:5e:bf:ab:bd:fb:0d:5c:e0:a7:7f:b8:b0: 39:a8:48:18:a0:32:58:4c:48:7a:f2:a6:08:7b:8e: 11:00:7f:ca:49:a1:bc:36:7c:b7:b2:80:b2:24:88: 8e:b2:3f:df:20:5d:a6:a7:da:a4:38:00:ad:4b:57: 9b:ec:1d:90:2f:54:18:ec:42:19:26:0d:09:66:9d: 7e:75:4d:e4:c0:0d:15:3d:4c:1e:58:b1:82:d2:94: be:f2:a5:de:48:6e:db:b0:4e:63:b2:13:2e:49:eb: b0:d2:0d:86:39:76:85:8a:6f:af:79:a2:07:9d:c5: 2a:8d:4e:35:29:5b:a6:5b:85:3d:0f:3b:75:36:55: f8:31:55:67:0b:46:8f:dd:d3:f2:de:fb:01:74:66: 28:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1A:E4:42:82:DC:4D:A4:14:0D:C0:B6:58:5D:1B:77:DF:C4:BA:24 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WhrkQoLcTaQUDcC2WF0bd9_EuiQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.128.0/19 Signature Algorithm: sha256WithRSAEncryption 10:69:e4:1e:b8:09:38:51:6b:67:99:01:17:b4:63:82:88:97: 77:30:a5:1c:f2:32:0b:cd:5d:46:c1:16:90:8f:2f:58:c4:3a: bf:1c:35:93:67:12:40:76:10:f7:6f:ba:5d:73:43:c3:6c:db: 97:d5:1b:71:92:f5:63:e9:21:af:46:d7:65:16:b0:11:f2:69: 92:12:f4:63:d3:63:a5:6d:43:4b:7a:01:7e:1d:a9:36:af:d0: fd:4b:80:fa:04:c8:4d:ee:fb:9d:6f:d6:bd:e9:fd:9a:1d:3f: 95:b0:df:42:26:68:0b:87:48:37:a6:21:61:4f:4b:f1:f3:af: a6:bb:43:17:75:02:68:b7:01:76:3e:11:f3:d2:94:d0:15:bb: 25:c5:b8:09:31:01:9d:e9:a5:dd:e7:2c:5b:1b:2d:e6:aa:10: df:cf:3b:f0:fe:ef:c8:a1:e2:f8:1f:18:7c:0f:ad:71:91:68: 94:32:76:e6:b8:92:f8:cb:fa:6e:60:9d:33:00:cd:f3:db:54: f7:12:24:5e:22:5e:9e:67:46:86:0c:92:ed:5d:d7:66:ea:b5: ab:0f:48:81:0b:e7:a1:3f:e6:8d:45:d8:d4:94:e0:38:42:fd: f7:8e:73:a8:a9:37:0e:e3:2e:31:dd:c5:40:dd:e8:31:77:75: 7c:b8:94:10 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTEyMzNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDVBMUFFNDQyODJEQzRE QTQxNDBEQzBCNjU4NUQxQjc3REZDNEJBMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHGCGvwc/R6dRaXpo225abR+sjfan42STR1FpOesa4MEtLhI/I hDsNHE/25ojudx7XBO10cbWRseUPbzTjR/MAZfJJo7FUmXV11YojAQLUGCM7qs8z tP9lFdT0E4daAASyiwBLh13KCdQ8WV6/q737DVzgp3+4sDmoSBigMlhMSHrypgh7 jhEAf8pJobw2fLeygLIkiI6yP98gXaan2qQ4AK1LV5vsHZAvVBjsQhkmDQlmnX51 TeTADRU9TB5YsYLSlL7ypd5IbtuwTmOyEy5J67DSDYY5doWKb695ogedxSqNTjUp W6ZbhT0PO3U2VfgxVWcLRo/d0/Le+wF0Zig5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWhrkQoLcTaQUDcC2WF0bd9/EuiQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1docmtRb0xjVGFRVURjQzJXRjBiZDlfRXVpUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBSIAwDQYJKoZIhvcNAQELBQADggEBABBp5B64CThRa2eZARe0Y4KIl3cw pRzyMgvNXUbBFpCPL1jEOr8cNZNnEkB2EPdvul1zQ8Ns25fVG3GS9WPpIa9G12UW sBHyaZIS9GPTY6VtQ0t6AX4dqTav0P1LgPoEyE3u+51v1r3p/ZodP5Ww30ImaAuH SDemIWFPS/Hzr6a7Qxd1Ami3AXY+EfPSlNAVuyXFuAkxAZ3ppd3nLFsbLeaqEN/P O/D+78ih4vgfGHwPrXGRaJQydua4kvjL+m5gnTMAzfPbVPcSJF4iXp5nRoYMku1d 12bqtasPSIEL56E/5o1F2NSU4DhC/feOc6ipNw7jLjHdxUDd6DF3dXy4lBA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:33 2025 by rpki-client