$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/q630UQGncUUEPndjJXCsGF5MtWM.roa File: q630UQGncUUEPndjJXCsGF5MtWM.roa (raw, json) Hash identifier: dxU07M6QKoGz5NGLOfoQhpXQhL1rTljfsdEuAxXJYDo= Subject key identifier: AB:AD:F4:51:01:A7:71:45:04:3E:77:63:25:70:AC:18:5E:4C:B5:63 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F0E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q630UQGncUUEPndjJXCsGF5MtWM.roa Signing time: Tue 10 Jun 2025 11:16:55 +0000 ROA not before: Tue 10 Jun 2025 11:16:55 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 211.14.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3854 (0xf0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:55 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=ABADF45101A77145043E77632570AC185E4CB563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:c4:82:44:4d:49:af:5e:7b:ed:c6:fc:da: 2a:fb:08:6b:02:6e:21:6e:4a:48:aa:4e:81:9b:b9: 6f:ec:2a:44:56:aa:5f:fe:fa:fb:69:8d:39:b2:bb: 48:f8:44:d2:14:45:6e:78:6f:f1:73:68:a9:1e:06: 5c:69:05:6e:ca:9b:c1:25:9c:0d:d3:72:b9:a5:ed: 9b:08:dc:1a:e4:6a:27:a7:d0:e5:3a:e7:e0:10:ce: b3:02:8b:be:70:17:6e:49:7e:ea:dc:68:04:0a:9f: 37:47:de:d8:4d:bb:fb:87:08:00:53:1c:3e:ff:c3: 7d:0b:87:6a:9a:c8:f1:98:c2:89:32:e9:8d:40:5b: 17:91:be:f8:26:c1:e7:f0:16:a7:79:6e:07:a8:6c: a5:73:76:97:72:75:dc:9b:b8:58:dc:ec:a9:08:ef: 2f:57:2d:be:ea:2f:5d:4f:09:af:79:c2:53:d2:0b: dc:97:39:22:f5:cf:aa:9e:fa:40:7b:14:97:a5:1c: 0e:1d:a5:e8:63:dd:9e:d9:24:78:26:db:76:eb:cb: 6f:fb:c5:91:b0:82:d6:23:52:67:c4:20:74:da:5b: 92:7e:14:19:ff:b1:8c:68:90:76:e6:e0:d4:02:9e: 3d:eb:99:fe:f7:a9:4e:57:80:43:ab:fd:5e:81:b0: 59:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AD:F4:51:01:A7:71:45:04:3E:77:63:25:70:AC:18:5E:4C:B5:63 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q630UQGncUUEPndjJXCsGF5MtWM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.93.0/24 Signature Algorithm: sha256WithRSAEncryption 31:f9:1d:a4:62:df:4e:40:4f:91:20:dd:57:e7:dc:fe:fe:a6: 9a:98:d0:e2:d4:c6:71:ce:e6:12:74:24:bb:c1:63:24:c4:fd: 78:9e:01:03:30:79:1d:85:78:93:db:12:cc:3e:75:48:c1:be: b0:de:00:a5:35:ac:68:af:51:3b:4c:7e:ca:a8:e8:5d:dc:68: 72:8b:bd:f8:06:a2:fa:9b:9b:b5:8a:40:52:fa:3d:ce:7c:57: 9f:e1:15:2c:26:7b:82:cd:be:a0:f4:3b:02:67:e8:11:ee:43: e5:4e:1d:8a:b0:1a:42:d3:e7:8a:d1:5e:8b:be:09:77:f8:cc: cb:19:e3:ed:a4:28:9c:6d:4c:5a:28:d0:6c:32:2a:06:4b:a4: 5b:0c:5c:29:0c:45:4a:1f:db:a5:e9:87:0d:4f:bd:da:77:b1: 02:9d:12:8c:c8:30:a3:bc:87:f8:fa:0c:f1:1f:1d:36:98:29: 1e:d7:92:b6:6e:ac:2a:52:05:41:56:1e:40:29:3b:ef:e3:7b: 17:eb:f0:d1:45:e4:38:01:0c:f7:5a:a2:46:8c:f6:0e:d2:6f: c4:6b:b1:15:f9:55:1a:b8:89:27:9f:a1:cc:4d:70:ae:70:a0: 30:e5:3c:0d:05:d3:b7:36:32:68:6b:6c:d6:bd:8c:98:74:73: f1:56:a0:90 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NTVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEFCQURGNDUxMDFBNzcx NDUwNDNFNzc2MzI1NzBBQzE4NUU0Q0I1NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrzcSCRE1Jr1577cb82ir7CGsCbiFuSkiqToGbuW/sKkRWql/+ +vtpjTmyu0j4RNIURW54b/FzaKkeBlxpBW7Km8ElnA3Tcrml7ZsI3Brkaien0OU6 5+AQzrMCi75wF25JfurcaAQKnzdH3thNu/uHCABTHD7/w30Lh2qayPGYwoky6Y1A WxeRvvgmwefwFqd5bgeobKVzdpdyddybuFjc7KkI7y9XLb7qL11PCa95wlPSC9yX OSL1z6qe+kB7FJelHA4dpehj3Z7ZJHgm23bry2/7xZGwgtYjUmfEIHTaW5J+FBn/ sYxokHbm4NQCnj3rmf73qU5XgEOr/V6BsFlZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUq630UQGncUUEPndjJXCsGF5MtWMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3E2MzBVUUduY1VVRVBuZGpKWENzR0Y1TXRXTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADTDl0wDQYJKoZIhvcNAQELBQADggEBADH5HaRi305AT5Eg3Vfn3P7+ppqY 0OLUxnHO5hJ0JLvBYyTE/XieAQMweR2FeJPbEsw+dUjBvrDeAKU1rGivUTtMfsqo 6F3caHKLvfgGovqbm7WKQFL6Pc58V5/hFSwme4LNvqD0OwJn6BHuQ+VOHYqwGkLT 54rRXou+CXf4zMsZ4+2kKJxtTFoo0GwyKgZLpFsMXCkMRUof26Xphw1Pvdp3sQKd EozIMKO8h/j6DPEfHTaYKR7XkrZurCpSBUFWHkApO+/jexfr8NFF5DgBDPdaokaM 9g7Sb8RrsRX5VRq4iSefocxNcK5woDDlPA0F07c2MmhrbNa9jJh0c/FWoJA= -----END CERTIFICATE-----Generated at Wed Nov 5 17:19:34 2025 by rpki-client