$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wnit92smdSld61Yc83-DB5PY6CQ.roa File: Wnit92smdSld61Yc83-DB5PY6CQ.roa (raw, json) Hash identifier: oijseEzW6OcS/FpyZHy7B3IhT/WfkSfUZL29b10XD60= Subject key identifier: 5A:78:AD:F7:6B:26:75:29:5D:EB:56:1C:F3:7F:83:07:93:D8:E8:24 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C89 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wnit92smdSld61Yc83-DB5PY6CQ.roa Signing time: Tue 01 Apr 2025 02:03:19 +0000 ROA not before: Tue 01 Apr 2025 02:03:19 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3209 (0xc89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:19 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=5A78ADF76B2675295DEB561CF37F830793D8E824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:38:55:d9:f2:d4:c0:a1:dd:56:0e:fa:05:19: 78:b0:2d:8b:98:1b:ec:2e:57:3f:9c:94:cf:1d:cf: dc:cb:a2:f9:21:19:31:0b:6f:1a:bd:8c:e0:a6:9b: 84:a8:94:c9:ab:e2:da:76:38:21:02:99:45:f3:b6: 77:fb:fe:70:8d:2d:ea:fa:2c:d2:dd:ec:4b:cf:9d: 78:ab:12:62:cb:4f:f3:ce:c2:6f:ac:3c:a6:09:7b: e1:af:78:0e:f2:49:3c:18:9e:a1:ee:50:b1:8d:7b: 1a:2d:b8:f1:1b:31:87:ec:37:c7:00:af:ea:f7:a9: a2:04:66:fd:31:93:39:db:b7:7f:50:eb:e6:f1:68: 93:9e:81:79:dd:3e:1c:e9:54:54:4a:d5:6e:63:f4: fe:a4:80:6d:9c:99:fb:ff:72:ee:90:7d:db:d0:55: 8f:51:22:43:c1:67:db:40:f8:8a:e6:40:db:c9:43: 61:be:48:26:b7:87:5d:c2:e4:62:38:a6:04:73:e8: 47:30:a5:a1:08:40:e8:63:cb:26:27:82:07:ff:db: ee:39:66:c4:c6:f1:0d:26:3e:8b:07:1b:88:79:14: 34:63:b1:a3:99:fb:87:bf:43:41:3e:16:af:9a:31: 9a:fa:36:ac:2d:50:2e:3b:fe:6f:b2:d3:e8:ed:8b: ed:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:78:AD:F7:6B:26:75:29:5D:EB:56:1C:F3:7F:83:07:93:D8:E8:24 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wnit92smdSld61Yc83-DB5PY6CQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.234.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:36:66:06:fc:82:b6:13:ce:6c:ed:97:00:bb:20:c3:ce:04: 58:da:53:55:cd:94:16:da:ee:26:37:60:51:3c:39:3a:d1:de: 02:f3:2a:6a:d6:fe:22:f8:e3:d0:ed:aa:09:8d:44:a8:45:6b: 2d:7f:11:e8:a1:45:dd:ac:39:90:b7:13:b5:16:18:5d:c3:c3: e8:c2:a3:b8:45:97:64:5f:d2:58:b6:6d:83:af:4f:1f:4d:85: d7:ae:d0:d9:77:f5:7c:2b:10:99:23:97:b1:fc:f3:3e:91:0e: 07:71:3c:7d:bd:28:bc:ac:94:d9:a3:9e:67:10:e7:f5:c4:7f: 10:6f:c1:a9:79:8d:fa:4e:e0:0d:40:f7:d5:0d:3a:f2:c7:17: 68:13:f4:59:1f:85:9e:31:84:1e:57:94:5c:bb:3a:d2:2f:bb: 8b:f9:ed:80:20:06:4a:12:9d:70:bc:97:c2:4f:7d:8d:c0:a0: a7:b8:2a:7e:f8:06:d9:13:d3:d3:a0:7a:33:aa:20:a8:03:82: d7:73:21:a0:0c:69:2c:3c:9c:a4:eb:f3:b2:c5:f6:a9:8b:da: 72:e1:af:4b:0f:ec:f4:e4:91:c8:58:11:ea:69:58:2e:d9:39: 96:19:26:48:cb:95:70:9b:20:8d:b8:c4:b0:0c:de:0e:90:06: 1a:3c:e3:8a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMTlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVBNzhBREY3NkIyNjc1 Mjk1REVCNTYxQ0YzN0Y4MzA3OTNEOEU4MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKOFXZ8tTAod1WDvoFGXiwLYuYG+wuVz+clM8dz9zLovkhGTEL bxq9jOCmm4SolMmr4tp2OCECmUXztnf7/nCNLer6LNLd7EvPnXirEmLLT/POwm+s PKYJe+GveA7ySTwYnqHuULGNexotuPEbMYfsN8cAr+r3qaIEZv0xkznbt39Q6+bx aJOegXndPhzpVFRK1W5j9P6kgG2cmfv/cu6QfdvQVY9RIkPBZ9tA+IrmQNvJQ2G+ SCa3h13C5GI4pgRz6EcwpaEIQOhjyyYnggf/2+45ZsTG8Q0mPosHG4h5FDRjsaOZ +4e/Q0E+Fq+aMZr6NqwtUC47/m+y0+jti+23AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWnit92smdSld61Yc83+DB5PY6CQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1duaXQ5MnNtZFNsZDYxWWM4My1EQjVQWTZDUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS+owDQYJKoZIhvcNAQELBQADggEBAD02Zgb8grYTzmztlwC7IMPOBFja U1XNlBba7iY3YFE8OTrR3gLzKmrW/iL449DtqgmNRKhFay1/EeihRd2sOZC3E7UW GF3Dw+jCo7hFl2Rf0li2bYOvTx9Nhdeu0Nl39XwrEJkjl7H88z6RDgdxPH29KLys lNmjnmcQ5/XEfxBvwal5jfpO4A1A99UNOvLHF2gT9FkfhZ4xhB5XlFy7OtIvu4v5 7YAgBkoSnXC8l8JPfY3AoKe4Kn74BtkT09OgejOqIKgDgtdzIaAMaSw8nKTr87LF 9qmL2nLhr0sP7PTkkchYEeppWC7ZOZYZJkjLlXCbII24xLAM3g6QBho844o= -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:58 2025 by rpki-client