$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/82HZ8Zz4OpiwEoAlx5n_32mjV3A.roa File: 82HZ8Zz4OpiwEoAlx5n_32mjV3A.roa (raw, json) Hash identifier: 7HowPHHPNIYt9AM+cqM3DPf/W6ZAj/O1OyyzEA1QKqM= Subject key identifier: F3:61:D9:F1:9C:F8:3A:98:B0:12:80:25:C7:99:FF:DF:69:A3:57:70 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F5C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/82HZ8Zz4OpiwEoAlx5n_32mjV3A.roa Signing time: Tue 10 Jun 2025 11:28:33 +0000 ROA not before: Tue 10 Jun 2025 11:28:33 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.79.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3932 (0xf5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:28:33 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=F361D9F19CF83A98B0128025C799FFDF69A35770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:ef:54:46:11:39:53:58:71:91:94:97:c2: 45:dd:90:e4:22:2c:2f:12:0e:de:e4:a8:ce:b8:60: a7:ac:7d:94:22:21:ff:79:25:9d:b8:39:8a:06:73: ca:cb:86:c5:84:8f:69:36:17:58:ef:ec:3f:5a:87: fe:2b:9c:aa:68:9f:e7:27:de:2c:7e:6c:8f:e9:55: 00:c7:14:5a:37:f9:95:37:f1:ec:d2:24:89:a3:5e: de:5c:bd:b9:7e:85:f8:26:68:ee:86:cb:fe:dd:6e: 23:70:9e:e6:2e:22:8f:b7:2d:03:c4:57:92:6c:85: 3e:5d:f2:5c:4c:ca:6e:b2:6d:9d:21:69:54:a9:14: d1:ab:57:3a:71:a2:6b:7d:1f:eb:4d:e2:d7:ea:1b: f6:80:f7:b3:ec:eb:2e:e0:19:fb:fb:01:f0:60:d6: 77:0e:fa:32:c9:ea:2b:7a:1a:71:fd:e6:8a:ea:5c: 91:bc:bf:dc:5d:b5:80:3e:fc:a8:7d:97:ae:c7:64: 66:aa:25:ce:74:84:59:88:f9:20:63:e3:76:b8:04: 05:8d:11:be:9f:ce:da:bc:82:f6:59:f7:cc:2c:3e: 2f:31:c7:97:42:47:69:19:fe:b3:30:f8:b3:76:39: 54:f7:a1:4f:f7:6a:af:4e:15:16:e5:3c:be:59:07: a6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:61:D9:F1:9C:F8:3A:98:B0:12:80:25:C7:99:FF:DF:69:A3:57:70 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/82HZ8Zz4OpiwEoAlx5n_32mjV3A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.128.0/20 Signature Algorithm: sha256WithRSAEncryption 0f:c2:4f:6f:0b:97:80:f7:2d:69:70:0c:d3:a9:1c:d7:e1:e3: 40:c5:d8:05:3b:ed:57:4d:cd:7b:f7:7e:20:28:9a:f1:d2:70: 6d:43:13:bd:68:5f:0d:b9:c2:44:5a:c8:d4:30:e7:ae:72:01: f3:8b:3f:f2:dc:8e:cb:b4:0b:77:b7:a8:4e:1f:3d:72:f0:16: 5d:ba:1e:96:6d:61:34:5d:a2:e5:42:65:96:66:13:9d:a2:91: c3:b3:28:4a:d7:9c:81:4c:a5:d3:92:7a:9f:82:8e:80:58:f1: 96:2e:3e:27:96:38:4b:5b:cc:eb:12:d4:10:4a:5b:33:bc:ef: 59:03:ff:1a:cd:4e:ac:4f:7f:c9:ff:2a:e5:ed:b2:e7:ef:e6: 2f:26:58:09:49:bb:b0:1b:e2:f3:4c:61:08:60:0a:8e:86:0d: 79:c2:23:78:68:d4:1d:85:36:c5:fc:b0:d2:a3:e6:fd:91:58: 5e:07:e3:f6:f6:42:b2:6f:ca:93:0e:c3:f0:12:86:29:f8:eb: f3:e8:4d:3c:5a:87:1c:39:94:fe:ec:d6:3f:a7:d7:c3:f0:c3: 77:d6:d7:34:6e:e3:89:26:bb:ce:67:69:e3:d4:95:55:fe:b8: 34:0f:c5:51:7c:c3:48:a1:08:3e:7a:96:af:72:23:9b:cf:09: bc:b7:a8:88 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD1wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI4MzNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEYzNjFEOUYxOUNGODNB OThCMDEyODAyNUM3OTlGRkRGNjlBMzU3NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Wu9URhE5U1hxkZSXwkXdkOQiLC8SDt7kqM64YKesfZQiIf95 JZ24OYoGc8rLhsWEj2k2F1jv7D9ah/4rnKpon+cn3ix+bI/pVQDHFFo3+ZU38ezS JImjXt5cvbl+hfgmaO6Gy/7dbiNwnuYuIo+3LQPEV5JshT5d8lxMym6ybZ0haVSp FNGrVzpxomt9H+tN4tfqG/aA97Ps6y7gGfv7AfBg1ncO+jLJ6it6GnH95orqXJG8 v9xdtYA+/Kh9l67HZGaqJc50hFmI+SBj43a4BAWNEb6fztq8gvZZ98wsPi8xx5dC R2kZ/rMw+LN2OVT3oU/3aq9OFRblPL5ZB6YzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU82HZ8Zz4OpiwEoAlx5n/32mjV3AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzgySFo4Wno0T3Bpd0VvQWx4NW5fMzJtalYzQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBT4AwDQYJKoZIhvcNAQELBQADggEBAA/CT28Ll4D3LWlwDNOpHNfh40DF 2AU77VdNzXv3fiAomvHScG1DE71oXw25wkRayNQw565yAfOLP/Lcjsu0C3e3qE4f PXLwFl26HpZtYTRdouVCZZZmE52ikcOzKErXnIFMpdOSep+CjoBY8ZYuPieWOEtb zOsS1BBKWzO871kD/xrNTqxPf8n/KuXtsufv5i8mWAlJu7Ab4vNMYQhgCo6GDXnC I3ho1B2FNsX8sNKj5v2RWF4H4/b2QrJvypMOw/AShin46/PoTTxahxw5lP7s1j+n 18Pww3fW1zRu44kmu85naePUlVX+uDQPxVF8w0ihCD56lq9yI5vPCby3qIg= -----END CERTIFICATE-----Generated at Fri Oct 24 13:42:45 2025 by rpki-client