$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YFKKCvPz5YC8sG52b-5gjlHIus8.roa File: YFKKCvPz5YC8sG52b-5gjlHIus8.roa (raw, json) Hash identifier: pF8yEw9q1m22KGEPx2rpvMx0rD7aYj5EhoYam+ydf8Y= Subject key identifier: 60:52:8A:0A:F3:F3:E5:80:BC:B0:6E:76:6F:EE:60:8E:51:C8:BA:CF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CC9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YFKKCvPz5YC8sG52b-5gjlHIus8.roa Signing time: Tue 01 Apr 2025 02:09:10 +0000 ROA not before: Tue 01 Apr 2025 02:09:10 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.72.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3273 (0xcc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:10 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=60528A0AF3F3E580BCB06E766FEE608E51C8BACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:90:0b:e7:ed:75:ae:73:70:71:c3:ea:f4: 96:95:8c:b1:64:10:9d:2c:1f:8f:b7:78:94:b5:51: 5c:08:aa:70:93:08:19:f5:b2:95:ee:48:7b:d2:09: 33:85:1b:7d:aa:14:ed:81:ca:bf:74:58:e2:e5:be: 2b:4d:35:f1:22:8c:ab:7d:c4:e0:dc:d7:d6:02:68: 5d:fc:b9:95:5b:1a:65:69:47:cc:f9:8b:0d:42:a2: a9:dd:07:40:5f:7e:64:47:e4:1d:57:83:92:a0:02: 48:d8:75:e6:64:6b:7c:e7:31:ed:e5:ae:c8:00:8d: 02:75:08:67:20:1b:a8:b9:d2:fa:05:4d:e6:6e:5b: 8b:86:ca:f7:93:6a:58:cc:92:7a:8e:db:41:0b:d3: 0d:47:12:cf:d7:51:53:ec:2a:d8:cf:4f:08:eb:16: 70:0b:7c:d9:53:4e:d7:2b:e1:3b:4b:e8:f4:e4:a8: fe:04:b8:20:54:05:d5:1b:48:85:9f:35:d7:0f:c3: bf:67:3a:f2:3f:8d:e8:bf:a8:c4:83:11:fa:c2:72: 3b:74:bb:8a:95:db:af:2a:b0:6f:2c:5b:41:5b:dd: 12:f7:60:40:ca:a8:9f:f2:40:ec:02:b0:57:d8:73: ab:b1:1f:70:5d:52:3b:5b:bf:7e:86:27:69:a6:fe: 9d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:52:8A:0A:F3:F3:E5:80:BC:B0:6E:76:6F:EE:60:8E:51:C8:BA:CF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YFKKCvPz5YC8sG52b-5gjlHIus8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.64.0/18 Signature Algorithm: sha256WithRSAEncryption 80:d9:ba:c2:5e:fb:05:6b:db:07:9d:7b:76:53:67:bb:4a:b2: 3f:3b:87:93:7e:35:7d:e1:bc:14:e9:9f:43:cf:fd:56:0d:9d: 47:5d:6a:c3:04:1a:17:87:49:ed:1f:9f:c4:bc:fe:28:e3:bd: bd:da:2b:3e:1a:a1:2e:02:eb:ac:9f:24:3b:ff:9f:b4:45:3c: a3:9d:bf:c3:4a:7b:d8:d6:c2:d4:4d:4a:c1:e2:90:be:3d:89: 53:ef:43:1e:8d:3e:e9:00:e9:1f:2a:16:fe:2c:14:5d:2e:8b: 84:d4:4f:a2:ea:61:f8:26:fb:50:15:47:75:32:75:0f:41:9b: 0a:2f:b1:4d:c3:66:43:7c:85:3f:cc:ac:2a:df:bc:6b:1e:bb: 5e:e7:a6:74:7c:fd:e2:c7:8c:1f:d6:dc:3d:1f:73:d0:df:09: 9e:6d:58:76:11:19:82:44:2a:96:88:96:42:bc:a3:5c:e8:ca: d6:f7:52:e6:86:63:f0:5c:dd:ca:a0:e6:b0:55:78:6f:3f:18: 57:2b:39:29:50:2a:a1:18:76:8a:e6:f7:24:98:17:69:9d:e3: 49:b1:e8:18:10:e0:cf:c9:61:63:53:6c:21:2a:4b:2c:79:cf: 1c:8e:b6:89:50:79:54:e3:66:44:78:c0:ac:55:14:d1:2f:56: ee:9a:de:91 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MTBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYwNTI4QTBBRjNGM0U1 ODBCQ0IwNkU3NjZGRUU2MDhFNTFDOEJBQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBcZAL5+11rnNwccPq9JaVjLFkEJ0sH4+3eJS1UVwIqnCTCBn1 spXuSHvSCTOFG32qFO2Byr90WOLlvitNNfEijKt9xODc19YCaF38uZVbGmVpR8z5 iw1CoqndB0BffmRH5B1Xg5KgAkjYdeZka3znMe3lrsgAjQJ1CGcgG6i50voFTeZu W4uGyveTaljMknqO20EL0w1HEs/XUVPsKtjPTwjrFnALfNlTTtcr4TtL6PTkqP4E uCBUBdUbSIWfNdcPw79nOvI/jei/qMSDEfrCcjt0u4qV268qsG8sW0Fb3RL3YEDK qJ/yQOwCsFfYc6uxH3BdUjtbv36GJ2mm/p1LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYFKKCvPz5YC8sG52b+5gjlHIus8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1lGS0tDdlB6NVlDOHNHNTJiLTVnamxISXVzOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYBSEAwDQYJKoZIhvcNAQELBQADggEBAIDZusJe+wVr2wede3ZTZ7tKsj87 h5N+NX3hvBTpn0PP/VYNnUddasMEGheHSe0fn8S8/ijjvb3aKz4aoS4C66yfJDv/ n7RFPKOdv8NKe9jWwtRNSsHikL49iVPvQx6NPukA6R8qFv4sFF0ui4TUT6LqYfgm +1AVR3UydQ9BmwovsU3DZkN8hT/MrCrfvGseu17npnR8/eLHjB/W3D0fc9DfCZ5t WHYRGYJEKpaIlkK8o1zoytb3UuaGY/Bc3cqg5rBVeG8/GFcrOSlQKqEYdorm9ySY F2md40mx6BgQ4M/JYWNTbCEqSyx5zxyOtolQeVTjZkR4wKxVFNEvVu6a3pE= -----END CERTIFICATE-----Generated at Wed Nov 5 13:52:42 2025 by rpki-client