$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yu4r8MtfeaXfX2Q5zpqXkEdNvc8.roa File: Yu4r8MtfeaXfX2Q5zpqXkEdNvc8.roa (raw, json) Hash identifier: JRMYXPlcrB3Rs0Eg8IN7ggFcFib8o566/cf2TtwmWsg= Subject key identifier: 62:EE:2B:F0:CB:5F:79:A5:DF:5F:64:39:CE:9A:97:90:47:4D:BD:CF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F23 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yu4r8MtfeaXfX2Q5zpqXkEdNvc8.roa Signing time: Tue 10 Jun 2025 11:20:25 +0000 ROA not before: Tue 10 Jun 2025 11:20:25 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.159.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3875 (0xf23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:20:25 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=62EE2BF0CB5F79A5DF5F6439CE9A9790474DBDCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:dc:85:84:e7:07:40:31:66:e3:4f:3f:b0: 6f:9a:1c:08:35:fd:b5:39:25:df:e4:76:b2:bd:b3: fc:86:3f:b7:77:50:c4:25:fc:52:36:b9:44:44:3c: e5:0d:06:f2:3f:d1:76:fb:e9:cf:3f:07:3c:a4:00: c9:25:77:c1:b3:22:60:04:43:53:50:65:2d:e6:ce: 9d:88:d0:24:3c:f1:bb:b5:bf:e7:a8:f3:b9:85:f8: 59:ae:54:73:75:50:87:cc:54:8e:1c:0e:22:0c:ae: 0e:7b:19:7a:15:1d:47:a0:a1:8f:69:5f:d4:22:7d: 90:8c:67:84:e9:67:b7:e3:6c:93:7e:71:1b:30:29: c2:5d:b6:1b:f1:aa:08:c9:f8:a0:1b:ac:e6:35:1f: fe:80:33:6b:58:15:23:b9:49:76:bb:ff:1f:52:0f: 9d:bd:8b:13:34:89:f5:69:79:4d:eb:3d:94:4c:f8: d1:7c:70:13:bb:68:9a:1e:fb:6b:0d:6b:a0:b1:5d: b4:ec:54:5d:83:01:20:89:59:1d:72:dd:fd:d3:9c: a1:2b:db:d6:34:6e:3b:03:d2:85:d5:f7:53:23:5a: 8e:8a:1c:2a:c9:6a:d4:1f:cf:78:37:bc:f7:76:2c: 03:de:a1:6d:20:f2:2d:7a:7b:3b:e8:ff:9f:0f:90: 8f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EE:2B:F0:CB:5F:79:A5:DF:5F:64:39:CE:9A:97:90:47:4D:BD:CF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yu4r8MtfeaXfX2Q5zpqXkEdNvc8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.220.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:b1:79:2b:13:ce:d0:25:8a:36:28:d8:6a:11:a1:3a:ae:b7: f0:3e:2a:86:44:7c:1d:9f:64:c3:5b:c2:d0:4d:f8:e1:88:d3: 82:47:05:ab:42:ab:a1:94:66:a2:b6:36:d4:19:21:03:f8:9f: 78:53:5f:af:0e:3f:42:29:a4:41:20:d9:14:cf:71:7a:99:26: ae:6f:53:3c:4b:2d:cc:2f:58:ef:10:18:d5:25:f6:89:b8:16: a4:36:cb:b4:81:34:34:41:89:8e:d6:fa:94:c6:4d:5a:0b:95: 50:40:fd:56:2f:67:4a:3c:7d:fb:ed:eb:9a:e3:bc:2b:98:e4: 1f:15:86:8c:18:e1:fc:2a:13:11:da:3b:6c:ab:48:ff:ad:d5: 76:83:25:0d:a8:36:dd:f7:c6:d5:3c:0e:a4:6a:6f:d5:fd:65: 91:43:f8:00:dd:d9:2b:73:6b:a3:22:a7:a7:4f:d4:67:8c:a9: 07:81:fc:1d:c5:cc:54:fa:9d:8c:e4:53:3d:38:1b:21:2d:a4: 2d:b9:f9:f5:56:35:1f:3f:2a:7d:12:9d:5e:ac:ae:0d:4f:e5: 87:80:4f:48:30:76:9c:f2:43:74:31:6e:ad:2c:1e:50:03:fd: 30:e4:7f:5c:72:39:ce:3e:44:c1:04:05:7c:0c:58:0f:f9:7e: af:6d:9c:87 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDyMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTIwMjVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDYyRUUyQkYwQ0I1Rjc5 QTVERjVGNjQzOUNFOUE5NzkwNDc0REJEQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8bdyFhOcHQDFm408/sG+aHAg1/bU5Jd/kdrK9s/yGP7d3UMQl /FI2uUREPOUNBvI/0Xb76c8/BzykAMkld8GzImAEQ1NQZS3mzp2I0CQ88bu1v+eo 87mF+FmuVHN1UIfMVI4cDiIMrg57GXoVHUegoY9pX9QifZCMZ4TpZ7fjbJN+cRsw KcJdthvxqgjJ+KAbrOY1H/6AM2tYFSO5SXa7/x9SD529ixM0ifVpeU3rPZRM+NF8 cBO7aJoe+2sNa6CxXbTsVF2DASCJWR1y3f3TnKEr29Y0bjsD0oXV91MjWo6KHCrJ atQfz3g3vPd2LAPeoW0g8i16ezvo/58PkI/lAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYu4r8MtfeaXfX2Q5zpqXkEdNvc8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1l1NHI4TXRmZWFYZlgyUTV6cHFYa0VkTnZjOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALcn9wwDQYJKoZIhvcNAQELBQADggEBAI6xeSsTztAlijYo2GoRoTqut/A+ KoZEfB2fZMNbwtBN+OGI04JHBatCq6GUZqK2NtQZIQP4n3hTX68OP0IppEEg2RTP cXqZJq5vUzxLLcwvWO8QGNUl9om4FqQ2y7SBNDRBiY7W+pTGTVoLlVBA/VYvZ0o8 ffvt65rjvCuY5B8VhowY4fwqExHaO2yrSP+t1XaDJQ2oNt33xtU8DqRqb9X9ZZFD +ADd2Stza6Mip6dP1GeMqQeB/B3FzFT6nYzkUz04GyEtpC25+fVWNR8/Kn0SnV6s rg1P5YeAT0gwdpzyQ3Qxbq0sHlAD/TDkf1xyOc4+RMEEBXwMWA/5fq9tnIc= -----END CERTIFICATE-----Generated at Wed Nov 5 20:15:45 2025 by rpki-client