$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hm_ZDKmn06zhaL61jf9NJnfowZc.roa File: Hm_ZDKmn06zhaL61jf9NJnfowZc.roa (raw, json) Hash identifier: 87o2UoqtWb+lRsnANdyiPiUCh1M4ijPfpecNivq+aZE= Subject key identifier: 1E:6F:D9:0C:A9:A7:D3:AC:E1:68:BE:B5:8D:FF:4D:26:77:E8:C1:97 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BFE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hm_ZDKmn06zhaL61jf9NJnfowZc.roa Signing time: Tue 01 Apr 2025 01:51:28 +0000 ROA not before: Tue 01 Apr 2025 01:51:28 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 110.162.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:28 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1E6FD90CA9A7D3ACE168BEB58DFF4D2677E8C197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0f:fc:d2:c7:22:d4:b4:b7:f9:a3:68:fb:e3: 63:57:49:f2:cc:88:d9:51:03:3b:5c:4b:2a:74:45: 9d:a2:10:41:07:a1:e3:4d:c8:64:f6:9b:b0:fb:2d: 44:29:a7:26:9c:f8:61:b5:a5:1b:98:9d:36:81:dd: fa:0c:cd:5c:63:f5:5a:5d:f7:d7:7b:5e:e4:87:7d: a3:72:ce:fb:60:bd:5d:8c:eb:ee:b2:f8:5c:6d:43: 07:96:8a:e4:12:64:bd:27:dd:35:72:9a:47:7f:1b: 58:b0:f4:4c:6f:58:fe:37:1f:64:32:ca:7e:f1:54: 68:56:58:bc:9e:05:0a:bc:df:d6:16:2b:3b:6a:12: d9:8d:67:6c:d2:48:2d:53:15:8f:96:69:18:78:a1: 67:a8:12:e8:78:fb:9b:ff:29:45:8e:f5:7a:fc:03: 64:f7:2e:39:ec:ec:75:38:6c:20:80:f5:3c:af:e7: d6:7c:48:95:10:87:91:82:40:37:bb:48:cd:34:fc: 30:d8:0b:f3:9f:77:1e:37:f5:d1:3a:6c:c5:b2:31: c0:8d:02:5f:16:f5:a2:2f:c6:de:c8:27:af:4f:db: 67:93:15:a0:78:dd:c5:84:0b:1f:3f:2b:00:95:52: dc:b6:de:a4:0f:18:02:9f:63:19:80:88:e9:b4:75: 6c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6F:D9:0C:A9:A7:D3:AC:E1:68:BE:B5:8D:FF:4D:26:77:E8:C1:97 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hm_ZDKmn06zhaL61jf9NJnfowZc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.162.96.0/19 Signature Algorithm: sha256WithRSAEncryption b8:71:70:34:f4:76:1c:97:13:74:74:f4:49:c7:f9:fb:d7:ec: 36:79:b5:7f:d7:4f:2f:34:4a:9a:ca:38:a9:5b:c4:fa:35:e5: bc:45:78:cf:eb:f3:fd:fc:46:a7:b4:6f:78:14:d6:81:25:d8: a0:ba:1e:af:06:0b:ca:d3:97:0e:93:92:ff:b4:25:cd:9b:ab: f3:97:ba:5b:5a:f6:3e:e6:5d:5a:7a:7b:b9:84:79:17:ad:f3: 63:a3:5f:61:53:53:a0:0b:27:9f:15:e4:53:3f:88:31:d5:e3: ae:c2:c6:c3:54:ba:09:b4:d6:31:56:c4:92:da:31:b7:ae:c2: 12:22:c3:40:a6:40:f5:32:b5:37:df:66:44:ce:2e:64:fe:e1: 31:97:0e:59:0a:cc:55:a2:ce:30:0e:e0:a3:6c:7c:79:40:75: a6:aa:b6:ea:b3:b8:53:9b:8f:d6:6c:33:c2:73:f1:16:34:8c: 06:57:25:90:15:35:15:5d:8e:89:7e:fb:4a:b0:78:22:9a:e1: 90:01:33:64:c4:ce:2d:99:06:3c:ef:43:73:28:3b:f3:85:5d: 8c:4c:e7:b2:df:b3:b2:ac:51:1a:cf:0a:9a:4e:c6:4d:14:52: 99:df:b7:43:59:f2:66:01:7d:e1:8c:76:3a:03:36:6f:49:5a: 4d:5b:d4:98 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMjhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFFNkZEOTBDQTlBN0Qz QUNFMTY4QkVCNThERkY0RDI2NzdFOEMxOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoD/zSxyLUtLf5o2j742NXSfLMiNlRAztcSyp0RZ2iEEEHoeNN yGT2m7D7LUQppyac+GG1pRuYnTaB3foMzVxj9Vpd99d7XuSHfaNyzvtgvV2M6+6y +FxtQweWiuQSZL0n3TVymkd/G1iw9ExvWP43H2Qyyn7xVGhWWLyeBQq839YWKztq EtmNZ2zSSC1TFY+WaRh4oWeoEuh4+5v/KUWO9Xr8A2T3Ljns7HU4bCCA9Tyv59Z8 SJUQh5GCQDe7SM00/DDYC/Ofdx439dE6bMWyMcCNAl8W9aIvxt7IJ69P22eTFaB4 3cWECx8/KwCVUty23qQPGAKfYxmAiOm0dWw/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHm/ZDKmn06zhaL61jf9NJnfowZcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0htX1pES21uMDZ6aGFMNjFqZjlOSm5mb3daYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVuomAwDQYJKoZIhvcNAQELBQADggEBALhxcDT0dhyXE3R09EnH+fvX7DZ5 tX/XTy80SprKOKlbxPo15bxFeM/r8/38Rqe0b3gU1oEl2KC6Hq8GC8rTlw6Tkv+0 Jc2bq/OXulta9j7mXVp6e7mEeRet82OjX2FTU6ALJ58V5FM/iDHV467CxsNUugm0 1jFWxJLaMbeuwhIiw0CmQPUytTffZkTOLmT+4TGXDlkKzFWizjAO4KNsfHlAdaaq tuqzuFObj9ZsM8Jz8RY0jAZXJZAVNRVdjol++0qweCKa4ZABM2TEzi2ZBjzvQ3Mo O/OFXYxM57Lfs7KsURrPCppOxk0UUpnft0NZ8mYBfeGMdjoDNm9JWk1b1Jg= -----END CERTIFICATE-----Generated at Fri Oct 24 13:42:02 2025 by rpki-client