$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MvqTPUuRBQdI6F21I6-LEuFEcnI.roa File: MvqTPUuRBQdI6F21I6-LEuFEcnI.roa (raw, json) Hash identifier: xGwulCHZsV5IC2kWDGOx0jG13l+foYAgm2kVH/DAqPc= Subject key identifier: 32:FA:93:3D:4B:91:05:07:48:E8:5D:B5:23:AF:8B:12:E1:44:72:72 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BC7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MvqTPUuRBQdI6F21I6-LEuFEcnI.roa Signing time: Tue 01 Apr 2025 01:43:47 +0000 ROA not before: Tue 01 Apr 2025 01:43:47 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.76.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3015 (0xbc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:43:47 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=32FA933D4B91050748E85DB523AF8B12E1447272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:f9:b8:56:50:65:d3:51:c9:c5:4e:bd:1b: c9:aa:cc:66:11:5c:44:7c:d1:91:1d:44:13:8d:d9: 74:a8:c2:19:1c:5e:87:7c:6a:ca:7d:cf:5f:7a:85: f7:d0:98:9c:a3:5e:fa:3a:63:31:56:13:52:3d:3a: 4d:00:d4:10:7e:28:fb:84:63:4d:bb:84:b0:cc:48: 05:30:a4:88:49:16:83:f9:de:0f:77:fc:38:0e:89: 2f:18:79:c7:2d:e6:8a:69:84:04:db:67:d5:b3:86: d2:1a:a1:1d:76:49:95:fd:dd:3d:e2:dd:6d:63:1f: 58:c5:8d:f7:21:a5:9d:46:20:35:c8:38:39:c8:eb: c6:ff:f4:92:e6:b6:53:5a:cd:39:48:ce:7d:f0:e8: 58:34:30:97:98:9d:ca:d7:c3:55:3a:6f:da:ed:06: 6f:2d:19:58:33:1a:2e:a1:c5:0c:62:20:ac:2c:ff: 5b:a1:26:f0:e0:5d:6f:7e:79:4f:b8:41:22:0c:88: fa:f1:3f:28:43:20:5f:61:89:03:b5:de:38:21:65: 16:fa:55:6a:d8:c4:00:f9:f9:6d:88:7a:89:d6:d9: c2:d2:bb:6d:02:03:12:4c:1e:65:38:77:88:5a:94: dc:28:73:98:ce:1c:c4:c3:6d:9d:4e:ed:d4:06:a3: 7a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FA:93:3D:4B:91:05:07:48:E8:5D:B5:23:AF:8B:12:E1:44:72:72 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MvqTPUuRBQdI6F21I6-LEuFEcnI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.152.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:e9:fc:25:27:2a:93:bc:2d:da:42:5d:8e:59:ab:d8:06:aa: ae:94:f8:1f:66:17:b7:11:54:d2:30:36:7e:62:b2:1c:07:9a: 9d:58:f2:60:80:ec:bb:9f:60:fe:20:3e:c5:09:a1:65:f3:be: 81:49:4e:ad:a3:a2:1d:11:07:a8:e8:38:af:c4:b6:c1:d7:2b: 11:34:e9:b7:5d:d6:6c:af:88:bb:6a:b2:49:d7:fe:27:17:5e: ac:09:f5:d6:12:33:61:83:4e:af:1b:59:8f:a2:c5:e4:56:b6: 9f:10:ab:d2:fe:4e:d9:09:52:68:dd:bf:f0:ea:3d:82:73:d8: 22:b1:c7:fe:01:ac:bc:0f:e9:d0:a7:f5:a3:43:20:ae:3c:36: 8a:4b:cf:9d:b7:e3:b7:af:e8:6f:9b:47:34:f6:be:c5:ea:5a: 66:ca:a4:6e:91:76:06:87:76:68:b3:ed:e5:23:95:84:32:bf: 87:b5:49:68:ff:ce:c4:55:a6:dc:7c:09:f4:d1:12:0f:c8:a8: 3c:6a:81:12:ea:03:80:f2:94:dd:f9:56:d5:3b:44:57:ab:4e: eb:3a:24:e9:3a:08:15:19:21:6f:16:c6:e9:c4:c7:ca:fb:2c: ec:3f:d7:ee:7e:51:9d:b7:53:01:ce:db:44:1f:e8:1b:28:c3: 87:7b:6d:95 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQzNDdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMyRkE5MzNENEI5MTA1 MDc0OEU4NURCNTIzQUY4QjEyRTE0NDcyNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCzvm4VlBl01HJxU69G8mqzGYRXER80ZEdRBON2XSowhkcXod8 asp9z196hffQmJyjXvo6YzFWE1I9Ok0A1BB+KPuEY027hLDMSAUwpIhJFoP53g93 /DgOiS8Yecct5opphATbZ9WzhtIaoR12SZX93T3i3W1jH1jFjfchpZ1GIDXIODnI 68b/9JLmtlNazTlIzn3w6Fg0MJeYncrXw1U6b9rtBm8tGVgzGi6hxQxiIKws/1uh JvDgXW9+eU+4QSIMiPrxPyhDIF9hiQO13jghZRb6VWrYxAD5+W2IeonW2cLSu20C AxJMHmU4d4halNwoc5jOHMTDbZ1O7dQGo3r7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMvqTPUuRBQdI6F21I6+LEuFEcnIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L012cVRQVXVSQlFkSTZGMjFJNi1MRXVGRWNuSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBTJgwDQYJKoZIhvcNAQELBQADggEBAGvp/CUnKpO8LdpCXY5Zq9gGqq6U +B9mF7cRVNIwNn5ishwHmp1Y8mCA7LufYP4gPsUJoWXzvoFJTq2joh0RB6joOK/E tsHXKxE06bdd1myviLtqsknX/icXXqwJ9dYSM2GDTq8bWY+ixeRWtp8Qq9L+TtkJ Umjdv/DqPYJz2CKxx/4BrLwP6dCn9aNDIK48NopLz52347ev6G+bRzT2vsXqWmbK pG6RdgaHdmiz7eUjlYQyv4e1SWj/zsRVptx8CfTREg/IqDxqgRLqA4DylN35VtU7 RFerTus6JOk6CBUZIW8WxunEx8r7LOw/1+5+UZ23UwHO20Qf6Bsow4d7bZU= -----END CERTIFICATE-----Generated at Fri Oct 24 13:42:05 2025 by rpki-client