$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GE9mLizN-S2AMJyo8WdRLW3tqDI.roa File: GE9mLizN-S2AMJyo8WdRLW3tqDI.roa (raw, json) Hash identifier: 8+NBv980QfBkwBcwNj1ya+b5qvg6DwiAqMV1YUwpnSI= Subject key identifier: 18:4F:66:2E:2C:CD:F9:2D:80:30:9C:A8:F1:67:51:2D:6D:ED:A8:32 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E19 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GE9mLizN-S2AMJyo8WdRLW3tqDI.roa Signing time: Tue 01 Apr 2025 02:31:33 +0000 ROA not before: Tue 01 Apr 2025 02:31:33 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.73.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3609 (0xe19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:31:33 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=184F662E2CCDF92D80309CA8F167512D6DEDA832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:2a:82:e9:90:1f:88:1d:20:e3:5f:6a:e5: ff:da:08:2a:ef:73:f4:10:84:39:67:55:0c:c6:75: db:eb:d0:cf:de:88:93:8f:35:03:e8:24:dd:86:f8: af:a5:30:82:e9:93:99:05:30:c8:13:8c:a6:1e:c1: 4f:50:83:2f:c4:c6:c3:74:ac:a7:f3:eb:1c:7b:bf: 72:b1:fb:44:68:43:77:a5:2b:ba:79:b1:f9:c8:fc: ba:17:5a:ab:53:f3:e9:0e:88:1d:3a:af:e0:13:df: 46:f1:67:c4:0b:10:76:52:db:44:47:f9:e7:46:ed: 0e:3f:d8:d7:42:01:8f:c8:4e:9a:58:a7:a4:04:86: 76:93:63:8a:b3:e9:9d:e7:df:0e:60:1e:67:87:7a: ba:90:78:d4:a6:31:d0:b7:f7:0a:d9:6c:93:49:bf: 3a:e9:7d:12:00:d4:0a:49:fa:db:76:5a:3a:47:2a: 06:12:44:f0:55:05:48:93:1c:f8:f8:ea:93:1e:38: 8b:6e:dd:bc:5b:34:95:cb:ad:59:1d:6f:3f:2f:65: 96:2b:fa:3e:01:59:3c:04:ea:7e:29:fd:fe:66:ee: 70:27:5c:76:db:fa:2e:4f:ad:5c:9b:97:a8:dc:b3: 79:96:9e:20:35:23:c7:df:a8:a0:1d:7a:08:51:52: 8f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4F:66:2E:2C:CD:F9:2D:80:30:9C:A8:F1:67:51:2D:6D:ED:A8:32 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GE9mLizN-S2AMJyo8WdRLW3tqDI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.75.0/24 Signature Algorithm: sha256WithRSAEncryption aa:16:85:48:11:b4:e1:70:5f:82:d1:2d:63:14:19:d9:59:8e: 0d:0e:13:7f:1f:4b:b9:d6:5c:eb:84:d6:27:9f:7b:dc:56:25: d8:c8:66:53:f1:dd:ac:ad:64:3f:39:98:3c:70:36:6c:3a:85: d7:94:25:03:58:4d:2b:34:1a:03:cf:6d:65:f7:33:94:5c:04: 4b:d4:b0:ec:c7:46:70:c1:1b:02:1d:8d:a0:11:7d:c1:16:c8: 37:ae:82:7f:37:2d:f7:74:9b:22:8a:50:4d:26:72:4a:43:d4: 61:44:d3:fc:c9:28:c6:3d:7b:61:a9:6e:34:6f:5c:59:c9:ce: 4b:c7:9b:bb:b8:2b:fb:08:e3:4a:03:6d:ed:3b:58:af:94:c0: 92:a4:45:13:81:d4:7f:dd:5f:ce:ce:48:39:4f:02:1e:f8:d7: 97:2f:d5:13:c6:f5:87:32:84:60:12:e1:55:fb:eb:f8:55:6a: a9:9d:07:6d:dd:6a:dd:2c:f4:24:8b:0a:c7:7f:74:69:df:7d: ee:b3:8c:be:9b:9c:72:1b:6e:5a:dc:16:8b:6f:63:e3:f1:d3: ad:5a:94:80:75:a7:5b:c2:92:c7:b5:24:68:ee:74:6e:09:6e: 69:74:a4:16:2a:b1:d8:02:dc:da:4f:04:e3:58:40:c8:7c:0a: 38:38:5a:37 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMxMzNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE4NEY2NjJFMkNDREY5 MkQ4MDMwOUNBOEYxNjc1MTJENkRFREE4MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMYyqC6ZAfiB0g419q5f/aCCrvc/QQhDlnVQzGddvr0M/eiJOP NQPoJN2G+K+lMILpk5kFMMgTjKYewU9Qgy/ExsN0rKfz6xx7v3Kx+0RoQ3elK7p5 sfnI/LoXWqtT8+kOiB06r+AT30bxZ8QLEHZS20RH+edG7Q4/2NdCAY/ITppYp6QE hnaTY4qz6Z3n3w5gHmeHerqQeNSmMdC39wrZbJNJvzrpfRIA1ApJ+tt2WjpHKgYS RPBVBUiTHPj46pMeOItu3bxbNJXLrVkdbz8vZZYr+j4BWTwE6n4p/f5m7nAnXHbb +i5PrVybl6jcs3mWniA1I8ffqKAdeghRUo/VAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGE9mLizN+S2AMJyo8WdRLW3tqDIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0dFOW1MaXpOLVMyQU1KeW84V2RSTFczdHFESS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSUswDQYJKoZIhvcNAQELBQADggEBAKoWhUgRtOFwX4LRLWMUGdlZjg0O E38fS7nWXOuE1iefe9xWJdjIZlPx3aytZD85mDxwNmw6hdeUJQNYTSs0GgPPbWX3 M5RcBEvUsOzHRnDBGwIdjaARfcEWyDeugn83Lfd0myKKUE0mckpD1GFE0/zJKMY9 e2GpbjRvXFnJzkvHm7u4K/sI40oDbe07WK+UwJKkRROB1H/dX87OSDlPAh7415cv 1RPG9YcyhGAS4VX76/hVaqmdB23dat0s9CSLCsd/dGnffe6zjL6bnHIbblrcFotv Y+Px061alIB1p1vCkse1JGjudG4Jbml0pBYqsdgC3NpPBONYQMh8Cjg4Wjc= -----END CERTIFICATE-----Generated at Fri Oct 24 13:45:12 2025 by rpki-client