$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mHDirXukMjSMj00YpKl-px_1z6E.roa File: mHDirXukMjSMj00YpKl-px_1z6E.roa (raw, json) Hash identifier: 4jOwhfgeE4mfBA8EKZ6oCP2wmCB5zB5wpAyxs1yfeMw= Subject key identifier: 98:70:E2:AD:7B:A4:32:34:8C:8F:4D:18:A4:A9:7E:A7:1F:F5:CF:A1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F40 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mHDirXukMjSMj00YpKl-px_1z6E.roa Signing time: Tue 10 Jun 2025 11:24:40 +0000 ROA not before: Tue 10 Jun 2025 11:24:40 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 27.230.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3904 (0xf40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:40 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=9870E2AD7BA432348C8F4D18A4A97EA71FF5CFA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:9b:a1:4a:e4:12:78:52:cc:99:3c:ed:32:8e: b9:36:a5:2b:41:ac:75:35:24:c6:26:b2:88:fd:42: ad:41:db:64:e6:3e:3e:be:46:79:7f:88:95:95:13: 16:9c:54:67:78:a3:35:58:21:23:31:c0:5f:19:09: 67:c0:1a:f2:9b:8b:03:cd:e2:47:e2:48:26:23:e3: 75:4b:d0:9b:e2:bb:31:34:6f:c8:8c:a3:e9:58:c0: c5:3b:09:97:42:fd:29:ee:c3:22:66:09:d8:59:3f: 26:45:f2:5f:0d:ec:a4:50:6d:70:5b:eb:f0:ee:c3: 80:57:00:49:c7:8d:3c:ad:a5:73:9c:fd:98:a4:91: e9:66:94:c3:0c:a5:2f:1a:42:7a:dd:24:df:58:c5: b6:af:d0:07:f5:93:c2:d2:e1:7c:8d:3d:68:40:7b: e0:a5:45:ef:75:0c:59:03:65:cb:5e:ef:28:00:8b: d7:74:98:93:ad:88:02:07:61:8e:71:51:dd:27:2f: f5:f8:6f:22:7c:98:9e:b5:f8:db:97:c3:68:47:aa: ca:fe:96:8a:fe:12:c3:32:bd:8d:d9:39:72:d1:fc: a0:ce:71:33:66:98:9f:91:84:37:40:f0:a8:94:5f: 73:76:af:ea:54:4b:98:ac:ff:12:71:21:24:72:0f: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:70:E2:AD:7B:A4:32:34:8C:8F:4D:18:A4:A9:7E:A7:1F:F5:CF:A1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mHDirXukMjSMj00YpKl-px_1z6E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.60.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:6b:7c:e2:aa:6d:3e:b2:99:6f:70:27:97:51:ac:37:c2:97: 06:3a:b7:a3:d2:f7:87:36:19:a4:a7:4e:e1:d1:6d:58:92:f8: f1:e7:04:87:7c:19:22:61:74:5a:f2:f2:e4:22:d6:19:ed:08: 66:8e:04:c4:d2:6b:4c:3a:9f:52:27:68:1c:c0:72:f0:f8:db: b9:d1:20:7d:a2:23:e9:73:69:a3:9e:1d:8b:ef:fe:29:75:6e: 6f:05:23:f7:37:ee:00:3c:96:74:ac:de:39:f2:95:5f:58:c3: be:01:41:af:e7:64:cc:6d:f9:4d:f3:a8:f7:e9:0a:b6:5f:97: b1:25:5b:ff:bc:dc:6e:06:5b:30:93:a1:d7:be:90:a3:72:6f: f2:13:f2:38:0b:77:6d:53:47:f5:e0:f2:24:e6:98:39:c1:c6: 00:7f:61:09:08:9b:76:ab:59:9f:4a:e2:69:cc:f0:c5:d9:e6: 92:62:b3:06:30:95:3a:8a:41:c6:3c:61:6f:6a:d2:0e:a1:a2: 51:e5:22:d4:1e:ea:19:0b:e5:69:c7:83:0d:e8:c7:7a:bc:84: b9:c9:54:35:28:88:ef:09:5f:61:7b:21:3c:30:04:e3:93:a4: a4:d9:b0:fb:a0:03:e8:96:9a:7c:83:fe:b6:1a:8c:29:5c:bf: 25:f6:14:d9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD0AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0NDBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDk4NzBFMkFEN0JBNDMy MzQ4QzhGNEQxOEE0QTk3RUE3MUZGNUNGQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4m6FK5BJ4UsyZPO0yjrk2pStBrHU1JMYmsoj9Qq1B22TmPj6+ Rnl/iJWVExacVGd4ozVYISMxwF8ZCWfAGvKbiwPN4kfiSCYj43VL0JviuzE0b8iM o+lYwMU7CZdC/SnuwyJmCdhZPyZF8l8N7KRQbXBb6/Duw4BXAEnHjTytpXOc/Zik kelmlMMMpS8aQnrdJN9Yxbav0Af1k8LS4XyNPWhAe+ClRe91DFkDZcte7ygAi9d0 mJOtiAIHYY5xUd0nL/X4byJ8mJ61+NuXw2hHqsr+lor+EsMyvY3ZOXLR/KDOcTNm mJ+RhDdA8KiUX3N2r+pUS5is/xJxISRyD6tdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmHDirXukMjSMj00YpKl+px/1z6EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L21IRGlyWHVrTWpTTWowMFlwS2wtcHhfMXo2RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIb5jwwDQYJKoZIhvcNAQELBQADggEBAHprfOKqbT6ymW9wJ5dRrDfClwY6 t6PS94c2GaSnTuHRbViS+PHnBId8GSJhdFry8uQi1hntCGaOBMTSa0w6n1InaBzA cvD427nRIH2iI+lzaaOeHYvv/il1bm8FI/c37gA8lnSs3jnylV9Yw74BQa/nZMxt +U3zqPfpCrZfl7ElW/+83G4GWzCTode+kKNyb/IT8jgLd21TR/Xg8iTmmDnBxgB/ YQkIm3arWZ9K4mnM8MXZ5pJiswYwlTqKQcY8YW9q0g6holHlItQe6hkL5WnHgw3o x3q8hLnJVDUoiO8JX2F7ITwwBOOTpKTZsPugA+iWmnyD/rYajClcvyX2FNk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:05 2025 by rpki-client