$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/s9AAxceJstfmiRBuflIA4Bn_54I.roa File: s9AAxceJstfmiRBuflIA4Bn_54I.roa (raw, json) Hash identifier: Sl5XAZskEwwZ0Mn2RryAJDViL9p/HSWu6lZ3q3BFhnM= Subject key identifier: B3:D0:00:C5:C7:89:B2:D7:E6:89:10:6E:7E:52:00:E0:19:FF:E7:82 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C6F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s9AAxceJstfmiRBuflIA4Bn_54I.roa Signing time: Tue 01 Apr 2025 02:00:33 +0000 ROA not before: Tue 01 Apr 2025 02:00:33 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:00:33 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=B3D000C5C789B2D7E689106E7E5200E019FFE782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:4c:47:52:7f:be:65:8a:63:55:c1:55:90: a6:f4:28:7e:a4:99:a8:6e:5c:0e:ce:72:f1:f0:66: aa:52:45:9f:3a:70:6f:29:ab:ba:15:8d:3d:6e:29: 40:85:50:0d:c5:c4:16:e1:af:f9:2a:27:f4:db:8d: 4c:f0:25:6f:91:a9:9f:e7:cd:4c:16:a4:a9:c5:1f: bc:5e:ee:b4:0a:aa:a9:63:a0:9e:fe:34:21:ba:9e: 87:a6:1e:8f:fb:0d:f0:bf:fe:a7:eb:ea:8a:8b:d9: ef:8d:33:92:ce:3f:ae:b5:ba:e1:50:0c:99:88:ea: 69:5e:a4:71:99:cc:ff:16:8f:01:36:2e:1a:63:eb: be:67:29:a4:03:20:29:ff:c4:96:23:46:88:06:d9: f8:f6:c7:b4:97:2d:58:39:fe:5b:6a:7b:59:23:61: f0:64:d3:eb:c1:88:b0:28:97:8c:c7:20:a2:10:ab: 08:9c:59:40:e3:05:b6:ae:7b:b5:2a:9f:89:96:d0: d7:c0:5a:8c:82:1e:8c:53:52:7c:d7:d7:3e:1e:58: 8d:c9:06:f8:84:3c:21:76:90:df:69:87:4c:13:80: b6:8a:40:61:df:5d:aa:74:2d:cf:23:a8:96:aa:7a: a2:7a:80:a4:7d:cc:c9:8a:69:f0:53:f1:e4:a8:e0: b2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D0:00:C5:C7:89:B2:D7:E6:89:10:6E:7E:52:00:E0:19:FF:E7:82 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s9AAxceJstfmiRBuflIA4Bn_54I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.32.0/19 Signature Algorithm: sha256WithRSAEncryption 21:b2:8d:2e:e1:8d:05:5f:d8:d1:9b:ab:a1:37:7c:94:42:01: db:c9:88:bc:e7:1e:53:5e:05:e5:56:df:06:e2:62:1b:d5:a6: 89:11:c9:cf:28:e4:7b:97:78:9e:64:67:cd:52:a1:4f:1c:c4: d4:4b:f0:f1:b1:30:a5:d9:3b:3b:2f:48:e5:da:8b:f6:79:02: db:ba:a9:69:6e:60:6e:9b:06:95:5a:25:f4:e2:05:3e:ee:95: 75:a9:e1:79:a4:d5:d0:88:e3:bc:28:83:de:a4:21:4b:01:35: c1:9e:02:52:b1:27:66:c1:bf:a7:72:98:83:ef:73:ba:7f:a6: 64:ff:4d:d8:02:20:7e:69:c4:ed:f5:06:51:7e:5c:72:28:27: 5e:ed:f4:b2:0f:87:fb:d1:15:23:ba:99:f2:88:d0:d3:f8:a8: 0f:e6:b6:72:53:21:e7:1e:7f:ac:08:bd:e4:5b:f3:07:82:1d: c6:ff:5e:5b:0e:a7:79:02:5e:16:ae:18:6c:07:2a:33:9d:91: 5e:19:5e:9b:96:02:24:99:69:45:e5:33:68:d4:02:30:1e:eb: da:2b:d3:4f:91:f0:83:2d:52:58:f1:3e:40:2d:e4:77:c9:08: 53:77:2d:5e:d0:30:d8:9c:88:da:89:9e:da:6a:a8:7e:b8:3e: 04:1a:b1:bd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAwMzNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEIzRDAwMEM1Qzc4OUIy RDdFNjg5MTA2RTdFNTIwMEUwMTlGRkU3ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyIExHUn++ZYpjVcFVkKb0KH6kmahuXA7OcvHwZqpSRZ86cG8p q7oVjT1uKUCFUA3FxBbhr/kqJ/TbjUzwJW+RqZ/nzUwWpKnFH7xe7rQKqqljoJ7+ NCG6noemHo/7DfC//qfr6oqL2e+NM5LOP661uuFQDJmI6mlepHGZzP8WjwE2Lhpj 675nKaQDICn/xJYjRogG2fj2x7SXLVg5/ltqe1kjYfBk0+vBiLAol4zHIKIQqwic WUDjBbaue7Uqn4mW0NfAWoyCHoxTUnzX1z4eWI3JBviEPCF2kN9ph0wTgLaKQGHf Xap0Lc8jqJaqeqJ6gKR9zMmKafBT8eSo4LKtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUs9AAxceJstfmiRBuflIA4Bn/54IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3M5QUF4Y2VKc3RmbWlSQnVmbElBNEJuXzU0SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBQiAwDQYJKoZIhvcNAQELBQADggEBACGyjS7hjQVf2NGbq6E3fJRCAdvJ iLznHlNeBeVW3wbiYhvVpokRyc8o5HuXeJ5kZ81SoU8cxNRL8PGxMKXZOzsvSOXa i/Z5Atu6qWluYG6bBpVaJfTiBT7ulXWp4Xmk1dCI47wog96kIUsBNcGeAlKxJ2bB v6dymIPvc7p/pmT/TdgCIH5pxO31BlF+XHIoJ17t9LIPh/vRFSO6mfKI0NP4qA/m tnJTIecef6wIveRb8weCHcb/XlsOp3kCXhauGGwHKjOdkV4ZXpuWAiSZaUXlM2jU AjAe69or00+R8IMtUljxPkAt5HfJCFN3LV7QMNiciNqJntpqqH64PgQasb0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:54:01 2025 by rpki-client