$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dym24W0589uGsdIxg2ImgmSqpu8.roa File: dym24W0589uGsdIxg2ImgmSqpu8.roa (raw, json) Hash identifier: 0PdAyU9zD9Npwle8TXbtpCikRcWHOdINjl/+lFFoVB8= Subject key identifier: 77:29:B6:E1:6D:39:F3:DB:86:B1:D2:31:83:62:26:82:64:AA:A6:EF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B4D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dym24W0589uGsdIxg2ImgmSqpu8.roa Signing time: Tue 01 Apr 2025 01:33:15 +0000 ROA not before: Tue 01 Apr 2025 01:33:15 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2893 (0xb4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:33:15 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=7729B6E16D39F3DB86B1D2318362268264AAA6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:19:1d:47:00:e7:b1:ae:95:9d:df:d3:ac: d4:8e:99:5f:22:66:fe:c8:41:f8:68:37:ce:e4:f3: db:b1:28:98:fd:b9:9d:8e:c2:62:c2:72:4b:0c:1e: 0c:35:85:4d:80:f7:7d:da:63:f8:33:9d:f3:ab:b0: c6:ab:7f:89:49:c0:12:45:77:94:0c:5d:be:3d:bc: 9a:92:1e:6f:75:f2:24:45:91:78:b0:0a:07:75:cf: 02:81:e6:a7:ac:54:0d:3a:a7:b0:41:de:5c:60:fc: 38:ac:47:94:a8:9c:a5:5d:80:5f:2d:8e:f6:a3:62: dc:73:5b:8f:40:11:bb:28:e2:b0:95:fb:cb:c4:a3: 88:20:7b:de:e8:44:a0:9a:b2:62:96:22:da:4b:ab: 0a:a6:c7:8f:a9:0d:9e:14:89:c8:62:10:2f:07:53: 6f:27:57:4b:09:58:df:e5:82:19:90:43:da:15:d3: 1d:57:0a:62:a0:c6:5e:02:b8:00:69:37:9f:71:61: da:a2:d6:78:51:f9:dd:c0:47:2d:d8:45:eb:74:df: 80:5b:b4:8b:f7:42:96:39:90:7b:5b:f3:9a:41:2c: 20:1c:28:fd:c3:6d:79:8b:c8:bc:2c:97:02:04:fa: 44:e5:b6:2e:68:15:03:4d:1f:49:d3:ed:a4:1c:d0: b4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:29:B6:E1:6D:39:F3:DB:86:B1:D2:31:83:62:26:82:64:AA:A6:EF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dym24W0589uGsdIxg2ImgmSqpu8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.176.0/21 Signature Algorithm: sha256WithRSAEncryption 37:d0:0b:ab:c2:c0:9b:9d:90:91:1b:5c:97:66:77:1e:df:b1: be:db:f7:fa:de:18:2c:64:a0:7d:1f:50:07:65:66:31:3e:58: 58:2a:4c:f8:1b:04:73:94:0e:85:8a:f0:93:7e:5a:44:f5:08: 78:b7:da:60:27:f1:35:41:60:9a:f0:19:fa:1d:cf:5f:93:14: 78:3c:db:ee:ce:9a:d3:69:bf:b2:bc:fd:a3:89:91:78:13:10: 5a:d6:76:c7:b2:11:71:00:8f:09:a3:8d:d3:6f:f9:2b:1b:01: 8a:a0:55:a8:bf:79:ca:06:38:d6:fe:56:77:df:f2:a4:64:15: 4c:05:2d:7b:1d:fe:15:88:8d:8f:c4:73:6c:71:16:c2:56:a0: 3f:6c:1b:3d:d7:13:ba:46:f0:19:b5:2a:5a:b3:3e:fd:3f:ac: f0:9e:8a:65:29:c6:8d:53:b1:4d:40:21:48:9c:3f:19:62:06: 7e:91:84:a7:f5:78:e8:00:c6:b6:4f:b2:33:55:8f:0c:0d:cf: aa:7c:e1:e0:86:1b:24:b2:2e:19:2c:7e:64:ea:37:2f:da:a5: 69:e1:f8:64:45:1b:66:99:f4:05:48:d1:84:0b:29:c1:3c:e6: 78:c8:70:0a:33:ab:0d:6c:cc:d4:8f:fe:75:8d:19:8f:72:b2: 0c:d6:b4:dc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC00wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTMzMTVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc3MjlCNkUxNkQzOUYz REI4NkIxRDIzMTgzNjIyNjgyNjRBQUE2RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ5RkdRwDnsa6Vnd/TrNSOmV8iZv7IQfhoN87k89uxKJj9uZ2O wmLCcksMHgw1hU2A933aY/gznfOrsMarf4lJwBJFd5QMXb49vJqSHm918iRFkXiw Cgd1zwKB5qesVA06p7BB3lxg/DisR5SonKVdgF8tjvajYtxzW49AEbso4rCV+8vE o4gge97oRKCasmKWItpLqwqmx4+pDZ4UichiEC8HU28nV0sJWN/lghmQQ9oV0x1X CmKgxl4CuABpN59xYdqi1nhR+d3ARy3YRet034BbtIv3QpY5kHtb85pBLCAcKP3D bXmLyLwslwIE+kTlti5oFQNNH0nT7aQc0LRNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdym24W0589uGsdIxg2ImgmSqpu8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2R5bTI0VzA1ODl1R3NkSXhnMkltZ21TcXB1OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBS7AwDQYJKoZIhvcNAQELBQADggEBADfQC6vCwJudkJEbXJdmdx7fsb7b 9/reGCxkoH0fUAdlZjE+WFgqTPgbBHOUDoWK8JN+WkT1CHi32mAn8TVBYJrwGfod z1+TFHg82+7OmtNpv7K8/aOJkXgTEFrWdseyEXEAjwmjjdNv+SsbAYqgVai/ecoG ONb+Vnff8qRkFUwFLXsd/hWIjY/Ec2xxFsJWoD9sGz3XE7pG8Bm1KlqzPv0/rPCe imUpxo1TsU1AIUicPxliBn6RhKf1eOgAxrZPsjNVjwwNz6p84eCGGySyLhksfmTq Ny/apWnh+GRFG2aZ9AVI0YQLKcE85njIcAozqw1szNSP/nWNGY9ysgzWtNw= -----END CERTIFICATE-----Generated at Wed Nov 5 20:19:10 2025 by rpki-client