$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lwNanwKc_5_wwSSIdLPif0cX09I.roa File: lwNanwKc_5_wwSSIdLPif0cX09I.roa (raw, json) Hash identifier: GshvjrlqF1SlovA/7pgBgTAazqEljBxk3MWwBxP7XGM= Subject key identifier: 97:03:5A:9F:02:9C:FF:9F:F0:C1:24:88:74:B3:E2:7F:47:17:D3:D2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F3B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lwNanwKc_5_wwSSIdLPif0cX09I.roa Signing time: Tue 10 Jun 2025 11:24:38 +0000 ROA not before: Tue 10 Jun 2025 11:24:38 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.79.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3899 (0xf3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:38 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=97035A9F029CFF9FF0C1248874B3E27F4717D3D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:79:eb:5e:d2:9c:a9:ea:46:6f:75:46:15:a1: 8b:38:74:0b:82:0f:b7:a1:c2:d8:ae:76:4c:bc:e2: 50:73:1a:02:df:ba:bb:f7:dd:32:a8:8b:08:a3:81: f8:6d:9e:19:b6:18:09:6b:7f:8b:8f:53:a2:9e:43: 83:3d:06:63:29:75:a5:12:ed:60:09:6f:61:95:87: c5:79:66:ed:a3:b7:9a:88:39:43:b9:5f:1b:73:79: 52:1e:ae:b0:0e:e5:f6:48:38:80:a5:83:12:c4:06: 41:29:3d:e1:31:da:2e:6a:43:73:d3:60:34:85:da: 6b:e8:46:79:ea:11:16:fc:b1:25:8b:f9:ce:2f:0c: 77:92:f3:16:28:99:d4:ad:46:bf:c7:e1:6b:94:0f: 23:53:30:f8:a5:a9:17:a9:71:1c:58:ce:9f:e7:4e: a9:82:25:1f:dd:24:92:05:f0:4c:9a:14:25:84:8f: 67:a8:0a:03:fe:fa:f2:33:30:47:d3:68:4b:f0:6b: fd:d0:66:35:fd:cb:31:fd:55:da:fd:c2:7e:bb:f4: 70:b7:09:7b:2f:2e:13:95:9e:c3:51:71:3b:7d:a8: 27:91:01:2d:98:1b:68:db:90:a2:f3:45:c0:02:89: f1:16:d1:78:ac:ac:4c:66:13:97:a0:0e:95:16:2f: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:03:5A:9F:02:9C:FF:9F:F0:C1:24:88:74:B3:E2:7F:47:17:D3:D2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lwNanwKc_5_wwSSIdLPif0cX09I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.48.0/21 Signature Algorithm: sha256WithRSAEncryption 37:87:1c:32:23:f4:e1:08:12:97:86:d9:97:73:99:ea:9d:ce: 8c:fc:db:f9:6d:f6:2c:72:8b:b6:4b:fb:ae:41:40:0c:ed:17: e9:a0:2f:2e:47:a4:a1:2a:17:9b:74:94:1d:a2:eb:39:05:10: ef:1f:51:7e:f1:1d:8d:eb:50:c5:fb:fb:a1:2c:4a:af:54:9e: 11:4f:80:51:16:a7:ed:13:af:3b:dd:fb:1b:61:77:eb:a1:da: 64:33:98:7e:ad:f5:3a:f4:01:63:7d:bd:2f:ea:a6:b8:d1:f6: ee:8a:52:d4:c7:b2:06:de:72:3b:e0:69:46:1b:45:91:48:31: e9:70:6a:1b:de:1a:75:79:9c:3e:9e:51:d8:b2:25:1a:ae:7a: 2b:97:4f:c4:5f:d9:1e:7a:29:74:75:84:e9:9e:75:f3:d7:e7: 94:d2:f9:a8:27:17:8d:56:d7:28:0c:d0:bc:aa:e2:2e:a7:2e: 3c:f2:e6:d1:58:48:4f:61:38:cf:ef:c6:65:59:a6:0b:51:0c: c6:49:bc:b3:6c:fc:23:96:6f:4d:49:bb:9b:91:d7:99:86:b8: 9f:0c:06:b1:c8:4a:85:db:be:dd:7e:6b:e8:a8:6e:a0:ca:22: 8a:09:95:00:c1:3b:aa:16:c5:9b:af:4a:e9:a5:96:b5:79:96: c9:cf:f4:72 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDzswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MzhaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDk3MDM1QTlGMDI5Q0ZG OUZGMEMxMjQ4ODc0QjNFMjdGNDcxN0QzRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUeete0pyp6kZvdUYVoYs4dAuCD7ehwtiudky84lBzGgLfurv3 3TKoiwijgfhtnhm2GAlrf4uPU6KeQ4M9BmMpdaUS7WAJb2GVh8V5Zu2jt5qIOUO5 XxtzeVIerrAO5fZIOIClgxLEBkEpPeEx2i5qQ3PTYDSF2mvoRnnqERb8sSWL+c4v DHeS8xYomdStRr/H4WuUDyNTMPilqRepcRxYzp/nTqmCJR/dJJIF8EyaFCWEj2eo CgP++vIzMEfTaEvwa/3QZjX9yzH9Vdr9wn679HC3CXsvLhOVnsNRcTt9qCeRAS2Y G2jbkKLzRcACifEW0XisrExmE5egDpUWL4Y1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlwNanwKc/5/wwSSIdLPif0cX09IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2x3TmFud0tjXzVfd3dTU0lkTFBpZjBjWDA5SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBTzAwDQYJKoZIhvcNAQELBQADggEBADeHHDIj9OEIEpeG2Zdzmeqdzoz8 2/lt9ixyi7ZL+65BQAztF+mgLy5HpKEqF5t0lB2i6zkFEO8fUX7xHY3rUMX7+6Es Sq9UnhFPgFEWp+0Trzvd+xthd+uh2mQzmH6t9Tr0AWN9vS/qprjR9u6KUtTHsgbe cjvgaUYbRZFIMelwahveGnV5nD6eUdiyJRqueiuXT8Rf2R56KXR1hOmedfPX55TS +agnF41W1ygM0Lyq4i6nLjzy5tFYSE9hOM/vxmVZpgtRDMZJvLNs/COWb01Ju5uR 15mGuJ8MBrHISoXbvt1+a+iobqDKIooJlQDBO6oWxZuvSumllrV5lsnP9HI= -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:48 2025 by rpki-client