$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qnSXveQmj2Ps_mt9jNb2o-JzXhk.roa File: qnSXveQmj2Ps_mt9jNb2o-JzXhk.roa (raw, json) Hash identifier: mQz9Rnmi5svfFmLpeSjeUVtwk8iyc/W0DHg00cK40Kg= Subject key identifier: AA:74:97:BD:E4:26:8F:63:EC:FE:6B:7D:8C:D6:F6:A3:E2:73:5E:19 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EB3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qnSXveQmj2Ps_mt9jNb2o-JzXhk.roa Signing time: Tue 10 Jun 2025 11:04:50 +0000 ROA not before: Tue 10 Jun 2025 11:04:50 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 219.114.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3763 (0xeb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:04:50 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=AA7497BDE4268F63ECFE6B7D8CD6F6A3E2735E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:79:e4:ab:23:09:a0:23:f8:78:bc:c0:cb:3b: a6:65:60:1d:00:0f:8d:18:f5:57:7f:6b:40:2c:4b: 13:22:c4:15:e8:9d:08:70:87:4d:9f:d5:c9:85:e1: 50:1b:2b:97:49:68:d5:0b:b9:76:9e:eb:64:a4:7e: 20:32:a2:6c:b2:e1:92:1b:81:35:5b:e3:0b:e5:44: ce:bc:52:74:18:ce:e3:eb:14:aa:b3:09:3a:24:9c: ee:23:0d:6e:e0:c7:96:19:19:0a:2a:49:2b:6b:34: 8a:c4:b9:20:16:4c:82:6b:eb:04:f4:3c:01:b2:6a: fd:1d:89:65:4e:ac:56:15:de:e8:cb:6b:7f:68:41: 22:4c:99:52:e7:99:c0:90:06:65:4a:43:8d:21:e8: b5:d8:d4:47:05:1e:af:1a:84:0e:22:79:6e:f4:92: 82:d5:96:4c:ab:85:34:9f:fe:42:e0:01:f6:a3:21: b2:14:31:48:dc:06:48:b7:5b:f2:35:8b:34:1e:57: 39:55:b7:7b:dd:ac:bf:8c:72:b7:19:e1:a7:0b:5a: 04:7d:a1:b5:1f:15:d2:ba:65:c8:ef:15:a0:8e:90: cb:7e:15:0b:f2:1b:1b:62:77:2f:4e:fb:3e:87:99: 11:81:87:4a:10:87:62:bb:aa:b0:b7:ff:29:75:03: 53:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:74:97:BD:E4:26:8F:63:EC:FE:6B:7D:8C:D6:F6:A3:E2:73:5E:19 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qnSXveQmj2Ps_mt9jNb2o-JzXhk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.188.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:a9:30:d5:64:31:4d:39:b9:eb:78:4b:7d:7e:62:57:0d:8c: 1c:a1:e1:6d:83:06:cc:54:77:6d:b8:5f:5d:7e:fa:1c:20:c3: f8:94:3a:1d:42:f3:84:38:79:4a:7c:d7:1c:38:99:f9:95:09: f2:1b:47:be:04:e4:a7:51:e6:ed:96:d7:09:f9:4d:d9:e8:a0: 88:c3:4e:e3:74:b4:b4:e2:c3:76:ab:4a:36:72:57:ad:e1:8b: a9:72:5c:25:a9:7e:71:30:6d:79:65:30:dc:3a:24:ca:1d:64: c9:80:1a:0f:bb:cb:03:e2:c3:61:28:90:79:da:48:b0:79:0b: e3:44:75:f6:e6:16:d2:95:01:89:fd:ae:ee:ba:a8:2e:b1:71: b1:7e:5f:f9:9d:a1:e7:59:1a:96:05:4a:9f:34:47:de:15:76: 9f:1a:e7:96:07:4c:fc:c7:53:69:b6:fe:f3:3c:71:af:e1:40: 96:e0:6b:df:aa:8c:c0:6a:8f:a7:33:4e:f2:b1:e9:0b:1d:6b: d1:c6:27:0d:69:8b:ac:b8:1c:2c:e7:e4:1b:c2:8d:5d:4e:ee: 88:f0:66:b8:83:ec:58:8d:c0:76:08:84:bf:ba:c2:28:79:4e: 12:8b:e1:3c:99:d8:34:6c:7b:5d:0d:e0:94:a9:59:13:ee:6c: c1:cd:7d:8f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDrMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA0NTBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEFBNzQ5N0JERTQyNjhG NjNFQ0ZFNkI3RDhDRDZGNkEzRTI3MzVFMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDueeSrIwmgI/h4vMDLO6ZlYB0AD40Y9Vd/a0AsSxMixBXonQhw h02f1cmF4VAbK5dJaNULuXae62SkfiAyomyy4ZIbgTVb4wvlRM68UnQYzuPrFKqz CToknO4jDW7gx5YZGQoqSStrNIrEuSAWTIJr6wT0PAGyav0diWVOrFYV3ujLa39o QSJMmVLnmcCQBmVKQ40h6LXY1EcFHq8ahA4ieW70koLVlkyrhTSf/kLgAfajIbIU MUjcBki3W/I1izQeVzlVt3vdrL+McrcZ4acLWgR9obUfFdK6ZcjvFaCOkMt+FQvy Gxtidy9O+z6HmRGBh0oQh2K7qrC3/yl1A1PPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqnSXveQmj2Ps/mt9jNb2o+JzXhkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3FuU1h2ZVFtajJQc19tdDlqTmIyby1Kelhoay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHbcrwwDQYJKoZIhvcNAQELBQADggEBACypMNVkMU05uet4S31+YlcNjByh 4W2DBsxUd224X11++hwgw/iUOh1C84Q4eUp81xw4mfmVCfIbR74E5KdR5u2W1wn5 TdnooIjDTuN0tLTiw3arSjZyV63hi6lyXCWpfnEwbXllMNw6JModZMmAGg+7ywPi w2EokHnaSLB5C+NEdfbmFtKVAYn9ru66qC6xcbF+X/mdoedZGpYFSp80R94Vdp8a 55YHTPzHU2m2/vM8ca/hQJbga9+qjMBqj6czTvKx6Qsda9HGJw1pi6y4HCzn5BvC jV1O7ojwZriD7FiNwHYIhL+6wih5ThKL4TyZ2DRse10N4JSpWRPubMHNfY8= -----END CERTIFICATE-----Generated at Wed Nov 5 18:51:33 2025 by rpki-client