$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sdnBCJYkl9hnbilLuNNgKo9zTpo.roa File: sdnBCJYkl9hnbilLuNNgKo9zTpo.roa (raw, json) Hash identifier: xYQ+oYrekL6SA8oylLCN5GOJWSNEutYH0jx47CZUGhQ= Subject key identifier: B1:D9:C1:08:96:24:97:D8:67:6E:29:4B:B8:D3:60:2A:8F:73:4E:9A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D7B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sdnBCJYkl9hnbilLuNNgKo9zTpo.roa Signing time: Tue 01 Apr 2025 02:21:25 +0000 ROA not before: Tue 01 Apr 2025 02:21:25 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.74.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3451 (0xd7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:21:25 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=B1D9C108962497D8676E294BB8D3602A8F734E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:50:48:ec:ac:80:cd:a9:f7:7c:a2:0b:a8:c3: 15:3a:d9:35:99:48:92:bf:ed:d2:b1:b0:b3:af:7f: 07:9b:c5:5c:f1:9b:3a:d1:e9:08:4d:bf:4d:2d:a5: 86:7f:b3:99:e4:76:67:0d:eb:f4:1b:f2:f3:c6:57: 01:63:02:17:30:92:a0:f4:b9:ef:8e:06:2c:5e:a3: 94:b2:78:eb:8a:2d:07:6f:6f:c5:41:f6:b9:d9:9e: 1b:6a:53:3a:83:9b:c6:1d:b4:9a:9e:0e:c7:bf:c4: 9c:55:1d:f3:b1:20:3c:d1:ad:9c:78:c1:ea:86:b2: cf:81:76:29:36:a8:b2:6b:0e:c7:aa:e0:fe:c2:59: 11:5e:20:80:fa:71:d9:0d:13:e4:d4:21:b5:81:69: dc:f8:4c:cd:54:6c:0b:20:91:88:a7:73:e4:3a:d2: d0:71:db:3a:3d:b1:17:63:e5:90:3a:b4:11:0f:db: ee:d3:2c:34:e0:92:47:8e:87:72:11:a2:7b:15:a3: 37:ba:a0:41:a0:62:32:d2:4d:c1:c9:f4:68:a5:3f: 3c:0f:f8:72:b9:e1:73:3a:bc:73:bf:18:92:19:11: 93:2f:a9:20:70:ea:1a:1b:8e:46:1f:26:c0:54:3d: d0:de:5d:50:d1:b1:f8:91:b6:7b:46:72:2b:10:90: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D9:C1:08:96:24:97:D8:67:6E:29:4B:B8:D3:60:2A:8F:73:4E:9A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sdnBCJYkl9hnbilLuNNgKo9zTpo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.196.0/22 Signature Algorithm: sha256WithRSAEncryption ca:24:6e:b2:4f:2f:7a:16:c9:94:7e:9d:b3:09:4f:98:13:fa: 29:05:27:35:53:ee:f8:4e:c8:35:30:6b:0c:51:b5:49:46:dd: 4a:69:ad:1e:50:02:cb:57:78:01:22:be:24:02:e9:0e:63:fc: 98:f8:b8:21:5d:a0:47:ac:59:89:6e:c6:db:b8:97:f9:55:60: 32:eb:73:db:d1:49:9b:51:d9:53:d5:9d:ad:ec:f8:a1:5a:cc: f4:a3:6b:31:46:d1:dd:f3:3d:d5:33:92:fb:af:39:99:22:62: d6:d3:b6:4b:89:70:5c:37:da:54:ac:f3:82:b3:10:91:57:bd: df:ad:4c:18:09:5b:0d:11:36:1a:92:cd:14:5b:8f:1d:93:31: 90:d0:ee:d0:2c:b4:6d:34:c6:25:8d:75:32:db:f9:d6:33:db: 47:1c:9c:0d:e1:4e:fd:f4:01:4d:7e:36:9f:32:a2:5f:74:de: 44:d5:14:7a:bb:94:9a:18:e5:6c:78:5e:ea:37:64:f1:fa:d3: 29:44:af:e8:69:e1:e2:f2:f8:fe:15:d4:9d:4a:96:31:36:cc: ab:ca:f9:92:55:8c:e9:d0:48:86:0f:91:24:bc:90:30:c1:b5: 35:69:5e:93:fd:09:4c:40:97:1b:25:b0:98:e1:76:df:49:ee: fe:fe:40:6b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDXswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjIxMjVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEIxRDlDMTA4OTYyNDk3 RDg2NzZFMjk0QkI4RDM2MDJBOEY3MzRFOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvUEjsrIDNqfd8oguowxU62TWZSJK/7dKxsLOvfwebxVzxmzrR 6QhNv00tpYZ/s5nkdmcN6/Qb8vPGVwFjAhcwkqD0ue+OBixeo5SyeOuKLQdvb8VB 9rnZnhtqUzqDm8YdtJqeDse/xJxVHfOxIDzRrZx4weqGss+Bdik2qLJrDseq4P7C WRFeIID6cdkNE+TUIbWBadz4TM1UbAsgkYinc+Q60tBx2zo9sRdj5ZA6tBEP2+7T LDTgkkeOh3IRonsVoze6oEGgYjLSTcHJ9GilPzwP+HK54XM6vHO/GJIZEZMvqSBw 6hobjkYfJsBUPdDeXVDRsfiRtntGcisQkA/HAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsdnBCJYkl9hnbilLuNNgKo9zTpowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NkbkJDSllrbDlobmJpbEx1Tk5nS285elRwby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBSsQwDQYJKoZIhvcNAQELBQADggEBAMokbrJPL3oWyZR+nbMJT5gT+ikF JzVT7vhOyDUwawxRtUlG3UpprR5QAstXeAEiviQC6Q5j/Jj4uCFdoEesWYluxtu4 l/lVYDLrc9vRSZtR2VPVna3s+KFazPSjazFG0d3zPdUzkvuvOZkiYtbTtkuJcFw3 2lSs84KzEJFXvd+tTBgJWw0RNhqSzRRbjx2TMZDQ7tAstG00xiWNdTLb+dYz20cc nA3hTv30AU1+Np8yol903kTVFHq7lJoY5Wx4Xuo3ZPH60ylEr+hp4eLy+P4V1J1K ljE2zKvK+ZJVjOnQSIYPkSS8kDDBtTVpXpP9CUxAlxslsJjhdt9J7v7+QGs= -----END CERTIFICATE-----Generated at Wed Nov 5 13:53:23 2025 by rpki-client