$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/u4yf0Cx7Oe5OAmsy80B8356p1rw.roa File: u4yf0Cx7Oe5OAmsy80B8356p1rw.roa (raw, json) Hash identifier: S2zKcJCpxlPF+tHQJ8FYuh/FBSinLQqe0a9JmKT/jV0= Subject key identifier: BB:8C:9F:D0:2C:7B:39:EE:4E:02:6B:32:F3:40:7C:DF:9E:A9:D6:BC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C75 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/u4yf0Cx7Oe5OAmsy80B8356p1rw.roa Signing time: Tue 01 Apr 2025 02:00:36 +0000 ROA not before: Tue 01 Apr 2025 02:00:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.73.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3189 (0xc75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:00:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=BB8C9FD02C7B39EE4E026B32F3407CDF9EA9D6BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:03:8f:21:80:09:68:a6:f8:e1:7b:89:98:d8: 83:e1:98:60:0d:6d:5b:a4:56:3e:92:b6:1c:8b:fa: 82:bd:1d:e0:5d:58:d5:1b:b7:0f:db:05:78:bd:d4: 97:3c:25:ad:9b:6f:5c:77:72:a9:3c:3e:4e:32:6b: fa:51:e2:d9:a3:dd:51:73:62:2f:9b:f5:e9:1b:e2: 48:51:0a:1e:c7:71:33:c8:44:24:bb:4c:a5:a2:a5: f9:d8:0d:27:16:06:b8:99:1b:b2:15:65:60:e8:6f: af:8d:d9:4a:09:69:66:9f:5e:51:f9:dc:c9:53:01: f2:64:e4:5c:2f:ad:29:f1:5a:09:69:ab:67:8f:f1: 8b:bb:2b:61:2f:fa:3e:aa:88:88:a1:e1:9a:fc:de: fa:ab:61:5f:8c:f5:d6:3e:38:28:ed:19:5a:67:bd: 21:2e:fb:b1:9c:73:b7:2b:cb:d4:20:cd:7c:7f:31: 4b:55:f4:c8:6b:60:16:cd:6e:b7:35:74:14:95:85: 18:e8:b0:b3:bd:70:c9:95:ac:bc:86:02:d6:8c:b0: 4f:a8:34:0c:4c:92:55:f1:fe:23:19:57:c0:78:21: 04:46:c4:1e:33:2b:90:b4:23:27:ca:e1:df:c5:fa: 53:b6:d7:09:18:9d:35:30:0c:36:86:e4:ab:1e:ef: 32:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8C:9F:D0:2C:7B:39:EE:4E:02:6B:32:F3:40:7C:DF:9E:A9:D6:BC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/u4yf0Cx7Oe5OAmsy80B8356p1rw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.208.0/20 Signature Algorithm: sha256WithRSAEncryption 58:41:9b:8e:bb:bc:9f:d8:0a:58:db:cb:ba:91:5c:d5:b4:5a: fd:ed:6e:0a:76:be:14:c6:8f:ea:5a:22:b8:0b:75:b9:ce:a9: 8b:c2:15:f6:36:55:7f:70:b5:9e:63:59:6f:e7:32:5b:7d:6f: 7c:eb:96:e1:3d:ef:42:bb:d6:6b:9f:82:c0:93:e0:4d:86:27: e9:4d:77:5b:51:5e:9b:8d:96:4f:8d:4a:79:d3:71:ab:a1:04: 4d:6a:71:bd:8c:31:b6:40:47:7d:11:36:44:fd:06:cb:e4:ec: 48:09:74:8f:bc:0f:16:2d:88:b6:43:0d:48:48:83:b8:1f:de: 6c:17:42:53:34:8e:76:dc:04:13:dc:70:b5:2a:6c:6a:6f:ef: b1:38:8d:ae:d5:9b:8e:ce:b9:1e:08:5f:77:a3:82:4d:7c:b4: c9:d7:74:7d:9c:50:7f:6a:14:59:c0:05:33:7b:fe:eb:6b:29: 25:34:d0:f8:b6:55:ad:b5:7a:ec:d3:28:55:8b:dd:6a:17:89: a1:34:4d:a6:59:a6:14:76:83:ae:53:a4:c2:34:1d:34:77:c9: 3f:ee:01:72:38:02:8d:4a:09:1d:8c:e8:76:24:03:a5:2d:4e: 9f:73:b9:9f:c9:b9:88:ae:9f:7e:b6:28:2f:ef:bb:39:fa:07: 4a:3d:df:fd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAwMzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEJCOEM5RkQwMkM3QjM5 RUU0RTAyNkIzMkYzNDA3Q0RGOUVBOUQ2QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQA48hgAlopvjhe4mY2IPhmGANbVukVj6SthyL+oK9HeBdWNUb tw/bBXi91Jc8Ja2bb1x3cqk8Pk4ya/pR4tmj3VFzYi+b9ekb4khRCh7HcTPIRCS7 TKWipfnYDScWBriZG7IVZWDob6+N2UoJaWafXlH53MlTAfJk5FwvrSnxWglpq2eP 8Yu7K2Ev+j6qiIih4Zr83vqrYV+M9dY+OCjtGVpnvSEu+7Gcc7cry9QgzXx/MUtV 9MhrYBbNbrc1dBSVhRjosLO9cMmVrLyGAtaMsE+oNAxMklXx/iMZV8B4IQRGxB4z K5C0IyfK4d/F+lO21wkYnTUwDDaG5Kse7zLLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUu4yf0Cx7Oe5OAmsy80B8356p1rwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3U0eWYwQ3g3T2U1T0Ftc3k4MEI4MzU2cDFydy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBSdAwDQYJKoZIhvcNAQELBQADggEBAFhBm467vJ/YCljby7qRXNW0Wv3t bgp2vhTGj+paIrgLdbnOqYvCFfY2VX9wtZ5jWW/nMlt9b3zrluE970K71mufgsCT 4E2GJ+lNd1tRXpuNlk+NSnnTcauhBE1qcb2MMbZAR30RNkT9Bsvk7EgJdI+8DxYt iLZDDUhIg7gf3mwXQlM0jnbcBBPccLUqbGpv77E4ja7Vm47OuR4IX3ejgk18tMnX dH2cUH9qFFnABTN7/utrKSU00Pi2Va21euzTKFWL3WoXiaE0TaZZphR2g65TpMI0 HTR3yT/uAXI4Ao1KCR2M6HYkA6UtTp9zuZ/JuYiun362KC/vuzn6B0o93/0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:51:26 2025 by rpki-client