$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bCr1APq19SebUTrZs7P2AxQ_hI0.roa File: bCr1APq19SebUTrZs7P2AxQ_hI0.roa (raw, json) Hash identifier: qnpkpykKFxX8ZLjymuM9q2JYRwyOJSPcSwsQFk5AS8k= Subject key identifier: 6C:2A:F5:00:FA:B5:F5:27:9B:51:3A:D9:B3:B3:F6:03:14:3F:84:8D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D9D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bCr1APq19SebUTrZs7P2AxQ_hI0.roa Signing time: Tue 01 Apr 2025 02:21:40 +0000 ROA not before: Tue 01 Apr 2025 02:21:40 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 219.114.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3485 (0xd9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:21:40 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=6C2AF500FAB5F5279B513AD9B3B3F603143F848D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:47:4b:f6:0b:b6:1e:b3:d3:a8:2f:d1:1e:c7: 8b:c5:06:19:b8:3a:a9:7b:c6:37:c1:9a:88:4b:85: c3:06:e7:f8:80:ee:ac:bc:a5:46:e7:14:4c:a1:94: 3c:ce:ec:91:f6:3b:3c:37:53:7b:7a:a4:13:ad:fe: 51:3d:c0:1d:7d:99:28:a1:8f:09:4c:7b:da:33:a8: ac:0b:f7:d4:47:2d:25:e8:89:01:87:6a:97:09:d1: b9:47:50:68:f6:04:06:1c:11:c6:ea:21:51:68:48: cc:75:89:d2:df:23:55:40:a8:55:39:1d:76:d1:d3: d5:b7:c7:4e:ec:4d:83:9b:5b:c4:78:f9:9c:50:9b: e9:17:d0:a8:3d:06:60:65:59:b3:2b:e9:f4:a0:79: 3e:7a:58:8f:94:84:11:03:ac:d6:f5:a8:36:24:12: 2e:1e:12:56:c2:3d:3c:dc:78:ea:d7:fb:2a:d5:e4: 64:2f:7c:bf:a6:cc:3e:a9:d0:61:06:ed:9e:47:06: cd:b8:11:fa:51:12:48:1a:bc:18:58:e8:d3:9f:2e: 25:f1:aa:96:ea:9c:71:1e:6e:36:16:ad:11:6f:13: d4:58:33:f4:38:b5:5c:da:91:2c:84:64:7c:53:81: d1:de:a2:5e:0a:91:54:3d:d4:66:60:e1:46:84:02: 86:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2A:F5:00:FA:B5:F5:27:9B:51:3A:D9:B3:B3:F6:03:14:3F:84:8D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bCr1APq19SebUTrZs7P2AxQ_hI0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.186.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:ff:ec:10:19:e4:5c:93:81:da:f9:df:21:7c:27:42:67:7a: d7:52:c7:f9:2f:b9:91:d7:c6:20:76:1c:17:8c:07:5d:a2:fd: 4f:c7:2c:f2:a7:69:4a:fb:11:07:06:2a:44:39:40:5c:3e:a7: a6:4f:45:3e:45:92:78:2e:56:6f:f0:4d:0c:a4:df:e7:38:8e: 18:23:d8:fe:d0:e9:f9:b7:a4:9b:84:21:03:ae:e0:67:61:0b: 49:cb:f4:56:bc:44:5a:47:d9:c7:41:ef:a7:1a:a4:b5:20:b7: 87:55:71:a2:c5:cf:90:d6:e8:7d:14:ec:a2:92:84:5d:da:7e: 5c:0a:cb:0f:c2:a7:1a:e5:02:3f:97:36:8c:11:38:49:3d:76: 12:5b:fe:09:64:86:72:98:18:58:72:a6:a8:41:3b:bb:ca:84: b2:c2:d9:97:d9:d5:a7:44:55:dc:47:8e:6d:2d:2d:b5:03:8f: 0d:7c:7b:5d:bd:a8:2b:b6:f4:9e:5d:45:55:45:77:2f:b3:2c: 70:8b:5a:4e:3b:1c:6a:73:5f:95:36:b2:92:ee:fe:bb:35:b9: 12:50:35:cf:53:e7:5a:90:10:2c:ed:56:98:21:d9:fa:42:7e: ff:b8:cb:17:dc:8e:e1:84:b8:e0:da:bc:30:ee:b6:42:39:57: 37:20:8e:2a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDZ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjIxNDBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZDMkFGNTAwRkFCNUY1 Mjc5QjUxM0FEOUIzQjNGNjAzMTQzRjg0OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwR0v2C7Yes9OoL9Eex4vFBhm4Oql7xjfBmohLhcMG5/iA7qy8 pUbnFEyhlDzO7JH2Ozw3U3t6pBOt/lE9wB19mSihjwlMe9ozqKwL99RHLSXoiQGH apcJ0blHUGj2BAYcEcbqIVFoSMx1idLfI1VAqFU5HXbR09W3x07sTYObW8R4+ZxQ m+kX0Kg9BmBlWbMr6fSgeT56WI+UhBEDrNb1qDYkEi4eElbCPTzceOrX+yrV5GQv fL+mzD6p0GEG7Z5HBs24EfpREkgavBhY6NOfLiXxqpbqnHEebjYWrRFvE9RYM/Q4 tVzakSyEZHxTgdHeol4KkVQ91GZg4UaEAobxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbCr1APq19SebUTrZs7P2AxQ/hI0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2JDcjFBUHExOVNlYlVUclpzN1AyQXhRX2hJMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADbcrowDQYJKoZIhvcNAQELBQADggEBAF//7BAZ5FyTgdr53yF8J0JnetdS x/kvuZHXxiB2HBeMB12i/U/HLPKnaUr7EQcGKkQ5QFw+p6ZPRT5FknguVm/wTQyk 3+c4jhgj2P7Q6fm3pJuEIQOu4GdhC0nL9Fa8RFpH2cdB76capLUgt4dVcaLFz5DW 6H0U7KKShF3aflwKyw/CpxrlAj+XNowROEk9dhJb/glkhnKYGFhypqhBO7vKhLLC 2ZfZ1adEVdxHjm0tLbUDjw18e129qCu29J5dRVVFdy+zLHCLWk47HGpzX5U2spLu /rs1uRJQNc9T51qQECztVpgh2fpCfv+4yxfcjuGEuODavDDutkI5Vzcgjio= -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:11 2025 by rpki-client