$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lYwTZzvV-UW5i0M6uktLFr0rY_o.roa File: lYwTZzvV-UW5i0M6uktLFr0rY_o.roa (raw, json) Hash identifier: ZD3w5jwEhkMI0x5tzy4XeZuhRkSCQ4zU1T7xHMfEQY0= Subject key identifier: 95:8C:13:67:3B:D5:F9:45:B9:8B:43:3A:BA:4B:4B:16:BD:2B:63:FA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DB6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lYwTZzvV-UW5i0M6uktLFr0rY_o.roa Signing time: Tue 01 Apr 2025 02:24:44 +0000 ROA not before: Tue 01 Apr 2025 02:24:44 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 11:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3510 (0xdb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:44 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=958C13673BD5F945B98B433ABA4B4B16BD2B63FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:3a:bd:86:a5:6b:91:b5:cd:0f:f9:d6:c0: 1f:13:42:43:81:99:db:f4:a1:7a:05:7a:3d:58:2c: 01:39:20:08:6f:4d:cf:e8:b8:8c:ec:f8:e5:43:03: fa:97:c2:80:b3:0e:a8:b0:cb:8f:45:b4:60:64:0f: 26:a1:90:79:87:0c:5e:0f:7c:3e:f4:46:67:9e:d7: 70:a4:7b:01:17:4d:9f:1b:75:be:ac:8a:03:ba:9f: 5f:c1:0d:6b:4f:04:7f:9e:47:31:77:f2:21:f5:c8: c7:98:a2:70:4c:c9:66:2e:a4:44:97:9a:71:c3:9e: 1b:4c:9b:fa:7a:40:44:38:94:9a:53:f6:e6:ca:24: 25:7a:9f:45:b6:ea:2f:e8:36:a8:6e:67:13:bf:c2: 5a:e9:c3:79:ac:85:61:b5:ae:49:50:ed:78:95:28: 99:1d:32:dc:18:57:e8:f8:8d:6a:77:58:03:1f:ee: 8f:99:45:f2:95:f9:ea:65:31:fe:cd:0a:3f:3a:f8: 15:92:cc:29:0c:e7:2c:7f:33:34:7c:7a:cf:29:ee: cb:cf:b8:fd:93:85:b6:eb:6c:5f:60:de:c5:59:45: 8d:a5:65:dc:07:fd:aa:ba:26:0c:88:e3:d2:87:d3: b2:50:35:78:54:a5:b9:5a:1f:57:ad:4b:d4:49:5a: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8C:13:67:3B:D5:F9:45:B9:8B:43:3A:BA:4B:4B:16:BD:2B:63:FA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lYwTZzvV-UW5i0M6uktLFr0rY_o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.24.0/21 Signature Algorithm: sha256WithRSAEncryption c1:e1:4c:bf:9c:96:5c:5f:0c:5d:94:3a:36:22:38:2c:1c:39: 07:42:3f:c3:aa:41:26:11:88:94:79:05:bf:69:02:7b:5a:d4: d5:49:bc:06:0e:de:f2:bf:81:cc:62:f0:cb:cf:58:ff:e0:95: e2:d8:ad:58:e7:6c:5c:80:8e:b7:3f:7d:d5:7b:85:41:f6:02: 1e:e1:4a:8d:85:78:60:e8:c9:ed:e7:95:ea:e5:1c:06:f2:ea: 41:cb:bd:e0:e8:fb:3d:0e:61:7c:32:c5:5d:18:25:91:82:01: 87:12:e2:03:0d:39:6e:ff:1c:1a:69:a1:05:50:08:ec:fa:22: 4c:57:95:c6:19:af:d2:ab:4e:8c:06:e0:69:82:d1:42:87:8b: 05:41:9b:65:ff:3c:d4:18:fb:6e:44:56:25:71:0a:a0:59:e7: f6:6b:17:c8:11:3e:9d:b9:28:4d:7a:18:72:99:ff:dc:5e:1f: e2:d8:7b:95:e9:e1:a1:95:c6:44:97:e2:30:d8:0b:89:61:5c: 56:d2:9c:2b:ca:a0:88:05:3f:40:ee:bf:e8:51:f8:c2:d8:3d: c0:e8:32:83:5c:d0:82:17:3c:ac:1c:49:39:c1:3b:28:98:46: 45:af:46:36:2a:14:dc:61:72:7f:91:2d:d2:41:23:96:78:b7: 64:e6:0d:2d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0NDRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk1OEMxMzY3M0JENUY5 NDVCOThCNDMzQUJBNEI0QjE2QkQyQjYzRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsjzq9hqVrkbXND/nWwB8TQkOBmdv0oXoFej1YLAE5IAhvTc/o uIzs+OVDA/qXwoCzDqiwy49FtGBkDyahkHmHDF4PfD70Rmee13CkewEXTZ8bdb6s igO6n1/BDWtPBH+eRzF38iH1yMeYonBMyWYupESXmnHDnhtMm/p6QEQ4lJpT9ubK JCV6n0W26i/oNqhuZxO/wlrpw3mshWG1rklQ7XiVKJkdMtwYV+j4jWp3WAMf7o+Z RfKV+eplMf7NCj86+BWSzCkM5yx/MzR8es8p7svPuP2ThbbrbF9g3sVZRY2lZdwH /aq6JgyI49KH07JQNXhUpblaH1etS9RJWrsrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlYwTZzvV+UW5i0M6uktLFr0rY/owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2xZd1RaenZWLVVXNWkwTTZ1a3RMRnIwcllfby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBQhgwDQYJKoZIhvcNAQELBQADggEBAMHhTL+cllxfDF2UOjYiOCwcOQdC P8OqQSYRiJR5Bb9pAnta1NVJvAYO3vK/gcxi8MvPWP/gleLYrVjnbFyAjrc/fdV7 hUH2Ah7hSo2FeGDoye3nlerlHAby6kHLveDo+z0OYXwyxV0YJZGCAYcS4gMNOW7/ HBppoQVQCOz6IkxXlcYZr9KrTowG4GmC0UKHiwVBm2X/PNQY+25EViVxCqBZ5/Zr F8gRPp25KE16GHKZ/9xeH+LYe5Xp4aGVxkSX4jDYC4lhXFbSnCvKoIgFP0Duv+hR +MLYPcDoMoNc0IIXPKwcSTnBOyiYRkWvRjYqFNxhcn+RLdJBI5Z4t2TmDS0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:58 2025 by rpki-client