$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wl3wdmM8Knb75GRKfhWoFLtd5_k.roa File: Wl3wdmM8Knb75GRKfhWoFLtd5_k.roa (raw, json) Hash identifier: ni19Y0422jVoWlJBw4mAWggrxQvwzlPkDTxuFNsCWP4= Subject key identifier: 5A:5D:F0:76:63:3C:2A:76:FB:E4:64:4A:7E:15:A8:14:BB:5D:E7:F9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F07 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wl3wdmM8Knb75GRKfhWoFLtd5_k.roa Signing time: Tue 10 Jun 2025 11:16:50 +0000 ROA not before: Tue 10 Jun 2025 11:16:50 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.76.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3847 (0xf07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:50 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=5A5DF076633C2A76FBE4644A7E15A814BB5DE7F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:32:18:91:2e:6d:63:ce:6f:44:b5:3f:54: e5:33:ff:be:c9:bd:72:2d:b1:0e:d4:b2:3d:94:74: 5f:e8:1c:5c:a9:0a:3b:10:d4:39:30:79:83:3d:7c: 97:ec:35:d7:f8:fb:d8:2c:c9:d9:2e:cc:81:27:96: 6d:41:81:79:e1:df:8c:4f:d4:03:f7:8c:7d:5d:2d: c8:75:8d:bd:96:d6:4e:df:df:6a:39:46:0d:17:f5: 2c:f9:cd:fe:2d:64:6d:dd:a6:cb:da:c9:84:68:e2: 47:b8:66:d5:20:70:0c:d0:1a:b3:f9:31:a6:fc:62: eb:2e:6a:71:7c:a6:d0:ef:c7:9f:57:8f:02:c3:9b: 00:0f:e9:54:58:18:a0:92:87:29:17:09:c2:e6:82: b8:b5:44:eb:f0:77:3b:40:03:96:70:76:78:89:b1: 4b:9e:d0:36:fc:28:10:e2:e7:7b:58:b5:bd:4f:28: 7a:d6:a0:f9:49:35:a4:62:8b:5f:59:19:96:34:d8: b4:f3:1d:c5:a7:ce:c3:fb:41:24:c7:ef:fe:00:df: da:56:d8:fa:a1:6e:fc:83:e9:4c:4f:7a:36:8f:f8: d3:f8:97:f0:e4:c8:9c:fc:2a:eb:91:d5:89:5e:05: 59:77:e5:d7:40:cf:92:b7:11:81:5b:57:72:3f:fb: 29:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5D:F0:76:63:3C:2A:76:FB:E4:64:4A:7E:15:A8:14:BB:5D:E7:F9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wl3wdmM8Knb75GRKfhWoFLtd5_k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.68.0/22 Signature Algorithm: sha256WithRSAEncryption 71:11:03:8d:bd:8d:1d:95:15:1f:66:75:61:d8:b4:b3:e0:22: 26:1f:21:bb:75:01:75:80:48:da:39:35:03:4f:6b:9d:fb:dc: 06:23:41:31:e5:dd:79:f5:b2:be:42:ac:ff:87:02:a5:37:dc: d3:91:ed:9f:e1:32:ca:e2:29:c3:3e:27:6b:dc:72:3c:79:10: ee:c6:de:d0:ae:05:c3:eb:d6:fd:12:cc:b0:15:fa:ae:2e:c3: 99:e4:3b:b2:8f:7f:27:4d:e2:d0:79:3e:47:aa:8c:02:42:36: 51:1f:12:17:c5:8a:f7:04:94:fc:28:22:f4:9c:5e:03:50:81: 8e:3b:09:a0:14:c2:cf:e9:51:82:5f:e6:36:61:ec:d2:32:24: 81:16:4b:3a:e7:39:cf:b6:16:1d:fa:a3:3a:b4:14:71:0b:9a: 14:14:fb:b3:0b:f0:8f:4b:21:f2:c4:4c:af:8c:b2:73:8c:50: 16:90:1b:0e:b2:df:ca:df:ce:5d:6e:09:a3:ae:b7:74:6a:ac: a0:d9:4f:10:09:89:b4:76:f1:a3:c0:c6:78:f4:4e:c7:b7:cb: 73:d9:5d:72:57:9e:9a:b8:64:16:a3:d2:10:65:5a:45:3c:9e: 7a:ca:84:2e:0e:f8:a3:5a:a6:78:6f:4c:af:0a:b9:40:71:b8: 65:5b:66:a8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDwcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NTBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDVBNURGMDc2NjMzQzJB NzZGQkU0NjQ0QTdFMTVBODE0QkI1REU3RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfWDIYkS5tY85vRLU/VOUz/77JvXItsQ7Usj2UdF/oHFypCjsQ 1DkweYM9fJfsNdf4+9gsydkuzIEnlm1BgXnh34xP1AP3jH1dLch1jb2W1k7f32o5 Rg0X9Sz5zf4tZG3dpsvayYRo4ke4ZtUgcAzQGrP5Mab8YusuanF8ptDvx59XjwLD mwAP6VRYGKCShykXCcLmgri1ROvwdztAA5ZwdniJsUue0Db8KBDi53tYtb1PKHrW oPlJNaRii19ZGZY02LTzHcWnzsP7QSTH7/4A39pW2PqhbvyD6UxPejaP+NP4l/Dk yJz8KuuR1YleBVl35ddAz5K3EYFbV3I/+ykHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWl3wdmM8Knb75GRKfhWoFLtd5/kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1dsM3dkbU04S25iNzVHUktmaFdvRkx0ZDVfay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTEQwDQYJKoZIhvcNAQELBQADggEBAHERA429jR2VFR9mdWHYtLPgIiYf Ibt1AXWASNo5NQNPa5373AYjQTHl3Xn1sr5CrP+HAqU33NOR7Z/hMsriKcM+J2vc cjx5EO7G3tCuBcPr1v0SzLAV+q4uw5nkO7KPfydN4tB5PkeqjAJCNlEfEhfFivcE lPwoIvScXgNQgY47CaAUws/pUYJf5jZh7NIyJIEWSzrnOc+2Fh36ozq0FHELmhQU +7ML8I9LIfLETK+MsnOMUBaQGw6y38rfzl1uCaOut3RqrKDZTxAJibR28aPAxnj0 Tse3y3PZXXJXnpq4ZBaj0hBlWkU8nnrKhC4O+KNapnhvTK8KuUBxuGVbZqg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:06 2025 by rpki-client