$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nISsIo99pPudpME_zqBWxwoe_DA.roa File: nISsIo99pPudpME_zqBWxwoe_DA.roa (raw, json) Hash identifier: C4S4Ysk9ZOP5pz7kPY+q4lj+ezGwhtRfUY63zuGc8kU= Subject key identifier: 9C:84:AC:22:8F:7D:A4:FB:9D:A4:C1:3F:CE:A0:56:C7:0A:1E:FC:30 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C26 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nISsIo99pPudpME_zqBWxwoe_DA.roa Signing time: Tue 01 Apr 2025 01:54:03 +0000 ROA not before: Tue 01 Apr 2025 01:54:03 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3110 (0xc26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:54:03 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=9C84AC228F7DA4FB9DA4C13FCEA056C70A1EFC30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d5:c7:27:71:0d:2e:fc:fa:12:c5:6b:8a:a2: 5f:58:43:71:0c:69:9a:53:f4:c7:35:91:76:67:c3: 10:a0:3b:f8:08:f9:03:18:d2:6b:0c:e6:24:12:80: d0:7f:54:d9:47:b6:73:e1:d6:03:5f:3d:94:92:3a: 06:90:0a:37:fc:49:18:00:52:d9:37:23:71:0a:b7: 8d:5f:18:5b:40:cd:2a:1f:ab:12:96:91:e7:7e:cc: 3d:78:36:b7:fa:26:15:e5:49:fd:8c:b8:b1:33:3c: 47:19:87:70:0c:32:8b:e8:8a:25:bf:67:de:b9:f8: bc:31:cf:fd:4d:cc:98:51:c5:de:4e:d9:52:09:4a: b5:38:66:80:9e:b0:58:50:6f:ba:cc:ca:1a:d0:e1: 0f:86:a8:a5:3f:42:20:61:8f:b5:60:8f:47:60:42: 5c:88:7c:4c:56:c7:d1:30:26:29:82:93:8f:e1:b2: a8:36:bb:c7:9a:8f:fa:4a:be:bf:27:21:41:9e:79: cd:b3:1b:f5:6b:2b:bf:8f:de:ab:1f:bd:9c:9b:02: d8:4e:3d:c1:f4:c9:f9:53:b3:cf:ca:e3:0c:f6:cb: a9:d7:32:b2:92:ee:f3:2c:03:f1:7e:05:30:81:5a: 71:de:31:8c:20:ac:a4:fe:d6:65:24:1f:77:26:1b: bd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:84:AC:22:8F:7D:A4:FB:9D:A4:C1:3F:CE:A0:56:C7:0A:1E:FC:30 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nISsIo99pPudpME_zqBWxwoe_DA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.16.0/22 Signature Algorithm: sha256WithRSAEncryption 04:1e:a8:ec:6b:da:19:93:1e:c5:ba:52:a1:c9:0f:e9:e2:42: 42:c1:f4:3a:35:6b:7e:65:15:f9:85:93:43:7b:76:28:f7:ba: 6a:e0:93:f0:3a:c5:55:01:96:0a:e3:d3:74:08:b8:86:a6:50: 7b:5d:64:60:50:ee:8d:38:18:f8:18:6b:03:d3:41:d1:5f:30: b1:6d:f3:5b:6b:6f:cb:bd:3f:67:bb:b8:e5:07:dc:92:9f:7e: bd:33:ed:00:2a:3d:9d:67:0e:01:9a:30:db:52:8b:a6:15:62: d2:6d:16:44:52:e5:c2:65:e9:e2:d3:fe:e4:76:48:40:90:00: e9:97:c0:3a:28:4c:ea:cb:29:8f:99:f9:1e:f8:f9:65:d4:a1: ff:61:70:3f:0d:a0:a2:7b:a0:ea:9f:9b:54:d1:9b:0b:9e:1a: 25:c9:5e:e7:ab:11:5e:2f:9a:f9:03:24:cf:4b:5c:97:81:9e: 57:55:20:11:81:bb:98:96:98:fc:23:d0:91:e2:73:8e:66:6c: 35:18:14:b1:1a:49:09:11:1c:fe:d1:1f:03:5e:51:1c:de:1f: 8e:2e:a3:d6:eb:10:36:b3:32:d7:85:b3:7a:8e:9d:5c:39:1a: e5:70:9e:a7:ad:0a:79:25:9b:e5:79:a2:8b:7e:e6:d4:2d:47: 93:18:56:72 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDCYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU0MDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlDODRBQzIyOEY3REE0 RkI5REE0QzEzRkNFQTA1NkM3MEExRUZDMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDl1ccncQ0u/PoSxWuKol9YQ3EMaZpT9Mc1kXZnwxCgO/gI+QMY 0msM5iQSgNB/VNlHtnPh1gNfPZSSOgaQCjf8SRgAUtk3I3EKt41fGFtAzSofqxKW ked+zD14Nrf6JhXlSf2MuLEzPEcZh3AMMovoiiW/Z965+Lwxz/1NzJhRxd5O2VIJ SrU4ZoCesFhQb7rMyhrQ4Q+GqKU/QiBhj7Vgj0dgQlyIfExWx9EwJimCk4/hsqg2 u8eaj/pKvr8nIUGeec2zG/VrK7+P3qsfvZybAthOPcH0yflTs8/K4wz2y6nXMrKS 7vMsA/F+BTCBWnHeMYwgrKT+1mUkH3cmG71hAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnISsIo99pPudpME/zqBWxwoe/DAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L25JU3NJbzk5cFB1ZHBNRV96cUJXeHdvZV9EQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc0hAwDQYJKoZIhvcNAQELBQADggEBAAQeqOxr2hmTHsW6UqHJD+niQkLB 9Do1a35lFfmFk0N7dij3umrgk/A6xVUBlgrj03QIuIamUHtdZGBQ7o04GPgYawPT QdFfMLFt81trb8u9P2e7uOUH3JKffr0z7QAqPZ1nDgGaMNtSi6YVYtJtFkRS5cJl 6eLT/uR2SECQAOmXwDooTOrLKY+Z+R74+WXUof9hcD8NoKJ7oOqfm1TRmwueGiXJ XuerEV4vmvkDJM9LXJeBnldVIBGBu5iWmPwj0JHic45mbDUYFLEaSQkRHP7RHwNe URzeH44uo9brEDazMteFs3qOnVw5GuVwnqetCnklm+V5oot+5tQtR5MYVnI= -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:12 2025 by rpki-client