$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-s2IFKCLjx25I3wwAix4TXyPxt0.roa File: -s2IFKCLjx25I3wwAix4TXyPxt0.roa (raw, json) Hash identifier: 35fc7jVU/VD1o3rq6Oh1RZ+nhwqvx3oXaTr1nYi6DcQ= Subject key identifier: FA:CD:88:14:A0:8B:8F:1D:B9:23:7C:30:02:2C:78:4D:7C:8F:C6:DD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F0D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-s2IFKCLjx25I3wwAix4TXyPxt0.roa Signing time: Tue 10 Jun 2025 11:16:54 +0000 ROA not before: Tue 10 Jun 2025 11:16:54 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.158.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3853 (0xf0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:54 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=FACD8814A08B8F1DB9237C30022C784D7C8FC6DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a3:42:40:08:d7:8a:51:a1:21:91:30:c1:dd: 30:54:69:d2:08:85:2f:91:9e:a7:34:15:b6:d5:ba: 2f:56:3a:d6:34:33:fb:55:72:4d:a0:7f:1f:fe:45: b3:4b:8b:0c:40:bc:18:82:22:cf:d1:45:76:d6:e2: 3b:6a:8f:73:6c:6b:54:12:fb:e6:3d:5f:28:40:8c: 59:2a:af:36:80:70:b3:2a:bb:65:55:d0:37:99:9a: 1b:dc:90:e2:57:af:43:be:27:6d:8f:3c:44:c2:00: 4b:be:b4:fc:dd:23:30:76:f1:be:5b:74:77:c2:08: c8:70:9d:f8:79:b6:ee:1f:43:3e:96:6b:c1:d2:c3: 83:9b:71:4a:a7:c6:42:19:fc:59:ce:43:6c:df:67: 0b:bc:8f:9f:c8:8b:dd:3f:1b:53:e3:2e:a3:5d:f0: c1:66:4d:6f:56:11:64:42:ef:17:a8:1b:2d:8e:44: d6:3a:f2:1e:f2:21:c2:69:e6:8d:12:9f:d9:de:29: 8f:07:61:e5:23:cb:af:4a:66:02:cd:3a:b0:9f:38: f0:a2:a0:d3:16:0f:4d:96:80:49:cf:a3:16:39:64: d2:29:d0:54:e3:34:30:61:09:22:47:4e:b0:07:45: 2f:e9:93:34:8f:36:55:d5:41:91:f3:4c:c1:01:8b: 65:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CD:88:14:A0:8B:8F:1D:B9:23:7C:30:02:2C:78:4D:7C:8F:C6:DD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-s2IFKCLjx25I3wwAix4TXyPxt0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.136.0/22 Signature Algorithm: sha256WithRSAEncryption e3:ca:40:46:b6:80:7e:cd:03:8d:b7:2e:1d:8a:dc:fa:ac:bc: 05:4c:35:78:4e:0f:fa:17:96:7d:29:bc:6c:7b:5b:a0:55:e4: 94:a9:a5:c7:66:e0:ec:89:6c:ae:a0:8a:dd:9c:30:58:9a:56: bf:a2:13:dc:c8:20:d9:9e:9e:c7:f1:1a:8b:ce:e1:5c:00:f2: f6:ed:1c:b3:f6:bd:82:51:83:96:b7:8d:c2:41:98:34:30:9e: 81:cc:fc:a5:00:ad:c3:fc:b0:ca:19:7c:6f:91:18:27:eb:27: b0:6c:17:88:d0:24:d1:f6:a6:ff:d4:4e:da:9d:43:23:5b:0a: 89:36:db:f0:ac:fd:0a:12:a3:8c:3a:85:cc:00:08:6b:72:d8: 5d:f3:2e:26:8b:09:e4:9b:1e:67:0d:1a:7c:1c:b7:9a:f3:ea: 7e:de:18:5e:db:34:5c:0d:28:a1:64:37:68:0b:e7:d9:c9:5d: 3b:76:52:42:0c:04:05:26:ce:90:29:32:4f:d5:a9:da:da:af: e2:02:9e:67:15:90:1b:d2:fa:ca:ce:a4:20:81:36:57:04:48: 28:bf:ea:9c:bf:83:76:9c:b4:93:84:12:70:e5:d8:2a:ec:3d: 74:8a:7d:19:e5:16:3e:42:70:f7:24:54:4d:d6:c3:71:e7:6b: ea:18:46:70 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NTRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEZBQ0Q4ODE0QTA4QjhG MURCOTIzN0MzMDAyMkM3ODREN0M4RkM2REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYo0JACNeKUaEhkTDB3TBUadIIhS+Rnqc0FbbVui9WOtY0M/tV ck2gfx/+RbNLiwxAvBiCIs/RRXbW4jtqj3Nsa1QS++Y9XyhAjFkqrzaAcLMqu2VV 0DeZmhvckOJXr0O+J22PPETCAEu+tPzdIzB28b5bdHfCCMhwnfh5tu4fQz6Wa8HS w4ObcUqnxkIZ/FnOQ2zfZwu8j5/Ii90/G1PjLqNd8MFmTW9WEWRC7xeoGy2ORNY6 8h7yIcJp5o0Sn9neKY8HYeUjy69KZgLNOrCfOPCioNMWD02WgEnPoxY5ZNIp0FTj NDBhCSJHTrAHRS/pkzSPNlXVQZHzTMEBi2XZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+s2IFKCLjx25I3wwAix4TXyPxt0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Ly1zMklGS0NMangyNUkzd3dBaXg0VFh5UHh0MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJunogwDQYJKoZIhvcNAQELBQADggEBAOPKQEa2gH7NA423Lh2K3PqsvAVM NXhOD/oXln0pvGx7W6BV5JSppcdm4OyJbK6git2cMFiaVr+iE9zIINmensfxGovO 4VwA8vbtHLP2vYJRg5a3jcJBmDQwnoHM/KUArcP8sMoZfG+RGCfrJ7BsF4jQJNH2 pv/UTtqdQyNbCok22/Cs/QoSo4w6hcwACGty2F3zLiaLCeSbHmcNGnwct5rz6n7e GF7bNFwNKKFkN2gL59nJXTt2UkIMBAUmzpApMk/Vqdrar+ICnmcVkBvS+srOpCCB NlcESCi/6py/g3actJOEEnDl2CrsPXSKfRnlFj5CcPckVE3Ww3Hna+oYRnA= -----END CERTIFICATE-----Generated at Fri Oct 24 13:43:56 2025 by rpki-client