$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_zY_i9ave3T7XcxF_gL7JotS8Zw.roa File: _zY_i9ave3T7XcxF_gL7JotS8Zw.roa (raw, json) Hash identifier: MOgKcsMOmVUI1cqYpeqDVmeLni/mG/k6ywvBtqnPG+k= Subject key identifier: FF:36:3F:8B:D6:AF:7B:74:FB:5D:CC:45:FE:02:FB:26:8B:52:F1:9C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F61 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_zY_i9ave3T7XcxF_gL7JotS8Zw.roa Signing time: Tue 10 Jun 2025 11:32:26 +0000 ROA not before: Tue 10 Jun 2025 11:32:26 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.66.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3937 (0xf61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:26 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=FF363F8BD6AF7B74FB5DCC45FE02FB268B52F19C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8d:d6:17:61:b6:06:fe:e3:73:21:b5:ed:bc: f1:aa:b6:92:a0:e8:f9:f1:0c:5c:3b:14:fb:21:cd: fa:b2:a6:63:47:2f:24:2f:61:6e:a8:e4:28:f2:ca: 71:08:ac:bc:4c:16:c5:79:f1:5d:90:cc:5e:59:2c: 87:dc:8e:eb:cf:5a:29:43:a3:2e:88:ea:d5:40:f3: 9c:ab:1a:7c:ab:29:55:16:24:47:e3:a7:b1:49:2b: 8a:f1:3d:96:cd:c0:d2:ad:53:76:43:09:3a:88:e6: aa:40:a6:26:13:29:87:b8:2d:48:49:41:0e:b6:f5: 6a:65:42:e0:03:5d:8a:8e:01:81:c5:74:63:95:9a: ef:16:bc:6e:31:62:46:a2:a8:5f:38:a9:86:dd:bf: aa:cc:e6:28:c1:1c:92:43:07:55:b7:65:29:55:5a: 64:92:8a:f2:cc:3e:3a:97:8a:d9:52:7a:98:70:f6: 22:83:4e:c0:68:78:cd:8a:57:02:91:e7:84:9c:00: 1e:c9:96:a4:c9:e6:da:c6:b5:6c:77:a9:5e:85:50: 03:d2:9e:07:e4:32:53:42:d5:d0:8a:b3:df:e0:a9: 61:63:08:a8:b9:47:ad:d9:c3:83:aa:f2:d5:a7:35: 43:28:8f:55:02:f1:23:33:52:9f:27:02:da:af:40: 48:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:36:3F:8B:D6:AF:7B:74:FB:5D:CC:45:FE:02:FB:26:8B:52:F1:9C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_zY_i9ave3T7XcxF_gL7JotS8Zw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.28.0/22 Signature Algorithm: sha256WithRSAEncryption 79:bf:a4:55:a6:d2:60:54:c9:9b:1a:c2:88:78:0a:4d:ad:5e: 90:b2:a7:39:a7:23:f4:bc:a5:c9:a9:2b:b4:82:46:c3:00:46: 8b:d7:c0:33:f2:8f:8e:12:b7:cf:9e:cf:1d:f4:a9:1f:fe:1b: cf:70:1e:06:f1:f7:f7:e3:6b:25:40:d3:1a:93:ec:e9:b0:10: 60:65:24:84:24:a5:08:b9:8d:54:f1:dc:5f:1f:58:83:80:b0: 0c:ab:cc:74:68:0b:5b:1a:b9:bb:f1:13:e0:13:77:07:f3:70: 3d:95:c6:91:a1:e9:25:a7:7e:51:d2:e7:3b:22:3a:ce:84:1f: eb:00:9e:dc:2e:85:0f:e8:e9:1e:76:be:58:b0:f8:bf:a0:2e: 7a:f4:08:8a:b8:21:86:01:96:87:8c:c1:2b:f0:6f:5c:f4:70: 67:b8:38:29:36:3c:ad:15:59:6d:c7:91:fa:25:6a:99:a5:67: 08:76:3f:7c:9a:8a:e0:69:0c:97:96:30:e1:36:8a:5e:8b:e6: d9:85:17:42:da:41:52:d8:0e:e9:9a:13:77:c5:33:72:43:6e: 69:66:48:f0:c1:c2:3c:44:e0:5f:5d:82:84:07:2e:4a:dc:b8: bd:e0:db:d3:28:33:a0:47:7a:a3:93:26:52:d2:87:b1:7e:37: 5e:6d:f4:62 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD2EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMjZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEZGMzYzRjhCRDZBRjdC NzRGQjVEQ0M0NUZFMDJGQjI2OEI1MkYxOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcjdYXYbYG/uNzIbXtvPGqtpKg6PnxDFw7FPshzfqypmNHLyQv YW6o5CjyynEIrLxMFsV58V2QzF5ZLIfcjuvPWilDoy6I6tVA85yrGnyrKVUWJEfj p7FJK4rxPZbNwNKtU3ZDCTqI5qpApiYTKYe4LUhJQQ629WplQuADXYqOAYHFdGOV mu8WvG4xYkaiqF84qYbdv6rM5ijBHJJDB1W3ZSlVWmSSivLMPjqXitlSephw9iKD TsBoeM2KVwKR54ScAB7JlqTJ5trGtWx3qV6FUAPSngfkMlNC1dCKs9/gqWFjCKi5 R63Zw4Oq8tWnNUMoj1UC8SMzUp8nAtqvQEg9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/zY/i9ave3T7XcxF/gL7JotS8ZwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L196WV9pOWF2ZTNUN1hjeEZfZ0w3Sm90Uzhady5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBQhwwDQYJKoZIhvcNAQELBQADggEBAHm/pFWm0mBUyZsawoh4Ck2tXpCy pzmnI/S8pcmpK7SCRsMARovXwDPyj44St8+ezx30qR/+G89wHgbx9/fjayVA0xqT 7OmwEGBlJIQkpQi5jVTx3F8fWIOAsAyrzHRoC1saubvxE+ATdwfzcD2VxpGh6SWn flHS5zsiOs6EH+sAntwuhQ/o6R52vliw+L+gLnr0CIq4IYYBloeMwSvwb1z0cGe4 OCk2PK0VWW3HkfolapmlZwh2P3yaiuBpDJeWMOE2il6L5tmFF0LaQVLYDumaE3fF M3JDbmlmSPDBwjxE4F9dgoQHLkrcuL3g29MoM6BHeqOTJlLSh7F+N15t9GI= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:20 2025 by rpki-client