$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YY5Pu3mJ0PUcszqXnEVDp_rebN4.roa File: YY5Pu3mJ0PUcszqXnEVDp_rebN4.roa (raw, json) Hash identifier: kLdGd41r7LG6dB62m+ZiOfu0TPuRbURFQivRBYhwE8w= Subject key identifier: 61:8E:4F:BB:79:89:D0:F5:1C:B3:3A:97:9C:45:43:A7:FA:DE:6C:DE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CA9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YY5Pu3mJ0PUcszqXnEVDp_rebN4.roa Signing time: Tue 01 Apr 2025 02:05:38 +0000 ROA not before: Tue 01 Apr 2025 02:05:38 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:38 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=618E4FBB7989D0F51CB33A979C4543A7FADE6CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5b:d3:3e:19:dd:33:7b:b1:92:d5:2f:55:cd: 4a:40:4c:e6:45:dd:01:a2:c6:db:a3:1b:17:d7:ca: 0d:f9:72:ee:a0:5d:c3:cc:a8:58:bf:e1:4a:76:43: 3f:ee:d1:3c:82:2a:4c:0b:f3:4a:38:dd:62:6e:7c: b4:c1:8e:35:23:bb:c5:e8:cb:b2:4f:40:20:98:47: a9:9b:8b:d8:c8:32:c8:b5:f3:06:9b:4c:08:b1:9e: 29:b7:9f:de:c8:c7:03:74:79:50:ce:6f:63:70:8e: d6:22:bc:0d:82:8f:0c:01:d6:54:06:e2:a1:68:c9: b7:99:73:06:6c:10:ac:3b:04:70:bb:01:ff:37:88: f7:8e:4f:66:14:73:b0:73:ed:5b:a3:f7:0f:8c:41: 7d:63:f7:74:57:19:45:d2:62:e5:3a:5b:c8:30:8c: 7b:a7:02:30:a2:51:58:f0:33:77:29:51:e5:30:25: 6b:d5:62:31:a2:0f:02:31:3d:00:10:e7:e8:90:41: 38:5f:f0:53:f4:31:b7:f2:ef:fb:a9:16:93:e5:f4: 51:a4:cb:06:8f:4a:5c:de:bf:71:29:cd:e2:58:fc: 6e:1d:09:00:1c:c7:c0:a0:0a:88:d1:49:97:89:0b: 28:95:0b:f6:b4:39:0a:31:f4:79:a4:27:e4:a9:cc: ce:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8E:4F:BB:79:89:D0:F5:1C:B3:3A:97:9C:45:43:A7:FA:DE:6C:DE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YY5Pu3mJ0PUcszqXnEVDp_rebN4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.32.0/20 Signature Algorithm: sha256WithRSAEncryption 54:95:34:85:a0:d5:3c:0f:33:b6:2a:ec:69:6b:29:c0:31:18: e5:09:fe:cd:f8:a1:94:e0:d8:14:f8:bb:3c:78:9c:23:66:28: 01:d3:8c:46:f0:4c:68:1e:ed:63:cc:45:17:61:72:73:8e:42: b9:ce:8c:7b:34:8e:a0:c9:3f:6b:fb:d8:60:90:06:e5:e4:4f: 04:e1:bc:a2:1b:7a:89:36:05:a0:30:f9:f3:7c:a0:84:0f:6a: 62:e7:58:6f:d0:95:c7:55:6f:2d:3f:9b:5c:2a:b8:67:55:dc: c4:c7:28:e1:7d:49:21:ff:c9:ec:a4:e1:43:00:a1:86:f7:d0: 79:f9:ef:b3:7c:af:1a:0f:e3:c7:e3:d9:3b:01:84:51:13:09: aa:cc:4c:8b:22:ea:3e:6f:1c:86:76:56:56:b0:4d:44:32:0c: 3e:f4:f4:0c:fa:d9:7f:ee:f5:fe:35:9f:07:53:fc:d5:c9:ab: b4:45:f3:58:00:6d:87:a6:74:a2:8b:6b:6a:15:eb:88:9b:2a: e3:19:3e:b9:3b:7e:d7:82:fd:0e:4f:55:35:3c:4f:7a:53:2b: 4d:fe:e6:ab:4f:d7:2e:dc:8b:e9:8b:ac:78:dd:31:4e:1b:46: a6:ce:50:26:18:6c:cb:48:60:30:4d:8b:90:c3:ff:03:29:b1: a7:da:72:16 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1MzhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYxOEU0RkJCNzk4OUQw RjUxQ0IzM0E5NzlDNDU0M0E3RkFERTZDREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTW9M+Gd0ze7GS1S9VzUpATOZF3QGixtujGxfXyg35cu6gXcPM qFi/4Up2Qz/u0TyCKkwL80o43WJufLTBjjUju8Xoy7JPQCCYR6mbi9jIMsi18wab TAixnim3n97IxwN0eVDOb2NwjtYivA2CjwwB1lQG4qFoybeZcwZsEKw7BHC7Af83 iPeOT2YUc7Bz7Vuj9w+MQX1j93RXGUXSYuU6W8gwjHunAjCiUVjwM3cpUeUwJWvV YjGiDwIxPQAQ5+iQQThf8FP0Mbfy7/upFpPl9FGkywaPSlzev3EpzeJY/G4dCQAc x8CgCojRSZeJCyiVC/a0OQox9HmkJ+SpzM51AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYY5Pu3mJ0PUcszqXnEVDp/rebN4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1lZNVB1M21KMFBVY3N6cVhuRVZEcF9yZWJONC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATc0iAwDQYJKoZIhvcNAQELBQADggEBAFSVNIWg1TwPM7Yq7GlrKcAxGOUJ /s34oZTg2BT4uzx4nCNmKAHTjEbwTGge7WPMRRdhcnOOQrnOjHs0jqDJP2v72GCQ BuXkTwThvKIbeok2BaAw+fN8oIQPamLnWG/QlcdVby0/m1wquGdV3MTHKOF9SSH/ yeyk4UMAoYb30Hn577N8rxoP48fj2TsBhFETCarMTIsi6j5vHIZ2VlawTUQyDD70 9Az62X/u9f41nwdT/NXJq7RF81gAbYemdKKLa2oV64ibKuMZPrk7fteC/Q5PVTU8 T3pTK03+5qtP1y7ci+mLrHjdMU4bRqbOUCYYbMtIYDBNi5DD/wMpsafachY= -----END CERTIFICATE-----Generated at Wed Nov 5 15:52:59 2025 by rpki-client