$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0iRWk2NGlFR85e3ihmrKzGyaDdQ.roa File: 0iRWk2NGlFR85e3ihmrKzGyaDdQ.roa (raw, json) Hash identifier: EpPKejT6JaWOsxZvMu26Xe5SzABwC85m2jRhCjYM28A= Subject key identifier: D2:24:56:93:63:46:94:54:7C:E5:ED:E2:86:6A:CA:CC:6C:9A:0D:D4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C40 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0iRWk2NGlFR85e3ihmrKzGyaDdQ.roa Signing time: Tue 01 Apr 2025 01:57:17 +0000 ROA not before: Tue 01 Apr 2025 01:57:17 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 110.163.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:17 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D2245693634694547CE5EDE2866ACACC6C9A0DD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:64:95:74:12:26:fd:e7:c5:53:ed:39:62: 51:63:06:3e:ae:03:7e:66:3a:7a:15:77:99:db:e1: 1e:12:de:84:a5:80:95:2a:2b:13:16:fd:91:ff:ad: 8b:5d:e6:73:12:c3:7d:fe:24:ab:92:f4:a2:6b:00: de:26:b2:ba:82:f3:4f:d8:45:d0:a8:52:7f:41:b1: b0:be:ff:f2:a7:bb:b6:9a:31:ff:e2:aa:c0:cb:20: 66:ee:c0:92:9a:ee:4a:ee:39:f0:34:0a:b0:c1:74: 71:05:c7:b6:a5:32:6c:6e:d2:3d:ed:9b:33:f9:d1: 59:a8:f7:83:90:01:ac:63:6e:13:46:8b:b6:f7:06: af:91:fd:aa:26:c8:cb:b2:18:8b:b5:cf:a5:d8:d5: 97:b7:3f:00:ff:1b:9e:e4:81:76:d5:f6:46:79:5a: aa:fc:bb:4e:f6:0c:3b:cf:75:13:83:e4:60:03:84: b0:00:43:18:a1:57:09:0d:93:c7:02:ef:e6:ae:e1: f2:1b:ae:67:ad:de:a3:e2:da:4a:bb:a1:af:53:b5: 4a:f2:e8:c8:56:7e:a3:5c:73:b3:94:a5:8d:9f:0a: 9e:51:19:e4:2b:37:48:eb:03:22:48:ae:81:20:96: 38:1e:7a:27:17:08:f6:13:7f:70:56:f4:f4:36:4f: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:24:56:93:63:46:94:54:7C:E5:ED:E2:86:6A:CA:CC:6C:9A:0D:D4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0iRWk2NGlFR85e3ihmrKzGyaDdQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.163.6.0/23 Signature Algorithm: sha256WithRSAEncryption 61:3c:28:2a:71:1b:6a:33:53:59:f9:07:78:5d:23:5b:15:81: 0a:ea:22:7c:93:48:ac:35:37:d5:b6:57:06:21:55:62:dc:54: 88:d0:df:34:4a:6e:33:86:92:00:e2:05:69:22:13:95:62:76: 91:a2:60:23:63:93:ef:81:22:03:17:33:f8:86:38:58:31:8f: 23:5e:44:0e:3e:52:3f:8c:e2:8f:0b:a7:ba:6e:46:46:68:0e: ef:09:c6:e8:5f:ab:a4:72:60:ee:a4:05:6b:4c:cb:8b:fa:1d: 71:fa:57:00:0b:16:6b:c7:45:1b:16:fc:26:1e:25:b7:7a:32: 73:73:30:cb:30:13:a3:53:48:2b:4e:a1:3c:ec:69:a4:78:99: 71:2d:e5:30:4b:ce:da:a9:33:0a:fa:6e:1a:81:db:db:bf:6e: 13:26:35:bf:60:67:5b:f9:c6:b4:06:d7:fb:02:96:bc:12:90: 1d:97:d9:3a:2e:55:1f:e7:5f:7c:a7:e2:7b:db:a5:33:f2:29: 97:58:65:3c:23:3c:11:89:f0:1f:4e:07:01:1d:6c:49:52:2e: 3f:0e:5f:4d:52:ae:f8:3a:a7:a4:34:2e:45:d7:ea:d4:57:6b: 6a:05:1c:8e:a7:c1:3a:fd:a4:8b:51:d1:e9:e8:35:d1:d9:c7: a1:b5:d3:cb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MTdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQyMjQ1NjkzNjM0Njk0 NTQ3Q0U1RURFMjg2NkFDQUNDNkM5QTBERDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT8GSVdBIm/efFU+05YlFjBj6uA35mOnoVd5nb4R4S3oSlgJUq KxMW/ZH/rYtd5nMSw33+JKuS9KJrAN4msrqC80/YRdCoUn9BsbC+//Knu7aaMf/i qsDLIGbuwJKa7kruOfA0CrDBdHEFx7alMmxu0j3tmzP50Vmo94OQAaxjbhNGi7b3 Bq+R/aomyMuyGIu1z6XY1Ze3PwD/G57kgXbV9kZ5Wqr8u072DDvPdROD5GADhLAA QxihVwkNk8cC7+au4fIbrmet3qPi2kq7oa9TtUry6MhWfqNcc7OUpY2fCp5RGeQr N0jrAyJIroEgljgeeicXCPYTf3BW9PQ2Txh5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0iRWk2NGlFR85e3ihmrKzGyaDdQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzBpUldrMk5HbEZSODVlM2lobXJLekd5YURkUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFuowYwDQYJKoZIhvcNAQELBQADggEBAGE8KCpxG2ozU1n5B3hdI1sVgQrq InyTSKw1N9W2VwYhVWLcVIjQ3zRKbjOGkgDiBWkiE5VidpGiYCNjk++BIgMXM/iG OFgxjyNeRA4+Uj+M4o8Lp7puRkZoDu8Jxuhfq6RyYO6kBWtMy4v6HXH6VwALFmvH RRsW/CYeJbd6MnNzMMswE6NTSCtOoTzsaaR4mXEt5TBLztqpMwr6bhqB29u/bhMm Nb9gZ1v5xrQG1/sClrwSkB2X2TouVR/nX3yn4nvbpTPyKZdYZTwjPBGJ8B9OBwEd bElSLj8OX01Srvg6p6Q0LkXX6tRXa2oFHI6nwTr9pItR0enoNdHZx6G108s= -----END CERTIFICATE-----Generated at Fri Oct 24 13:43:57 2025 by rpki-client