$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OQAyyTwGCUm31f2W8sk1tfzsexc.roa File: OQAyyTwGCUm31f2W8sk1tfzsexc.roa (raw, json) Hash identifier: i2nwRBi3BrvRevePyB7er9Q3NaELmxgLsv40FB4K6D0= Subject key identifier: 39:00:32:C9:3C:06:09:49:B7:D5:FD:96:F2:C9:35:B5:FC:EC:7B:17 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CB1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OQAyyTwGCUm31f2W8sk1tfzsexc.roa Signing time: Tue 01 Apr 2025 02:05:42 +0000 ROA not before: Tue 01 Apr 2025 02:05:42 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.73.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:42 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=390032C93C060949B7D5FD96F2C935B5FCEC7B17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a7:af:e9:28:bb:65:b7:6d:df:c6:ee:93:fd: 41:06:5f:73:0d:8c:39:1b:5e:cd:eb:3c:00:37:5a: c2:c2:c0:51:4a:b1:fd:c9:ef:dc:d0:ac:f4:67:71: e8:cd:2a:12:f6:97:d8:c2:05:35:aa:aa:67:72:ef: ed:05:e6:02:97:01:38:b7:ab:66:fe:a6:5f:be:ac: 6b:56:9f:40:44:e5:6f:9b:32:60:ff:47:0f:6a:b8: aa:bb:18:89:d0:f5:58:91:d9:42:5d:ab:32:68:a4: 99:9a:41:f8:60:f3:c3:6b:1a:df:fb:48:95:90:76: 82:17:d8:d3:b4:c2:5e:f7:03:a8:71:36:dd:f6:31: b9:37:37:8d:5f:dd:d9:37:33:95:5e:17:3c:e1:48: a3:f9:3e:7c:74:eb:67:e4:06:1a:2d:36:c9:11:03: d4:47:26:8f:32:ca:4b:72:43:e8:d6:95:74:9b:0a: 67:85:59:df:25:56:8f:ca:09:b3:68:8f:6d:3b:52: 85:04:50:ae:5b:e6:8a:17:73:53:d0:73:c4:26:6a: d8:bf:75:8a:95:27:fb:5c:18:14:98:7b:6e:7b:e1: e2:c6:a8:0d:80:19:f3:de:a4:e4:29:f5:b4:7d:f8: 83:14:6a:d0:a7:a0:4b:96:6b:ad:c8:25:7c:8c:79: d1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:00:32:C9:3C:06:09:49:B7:D5:FD:96:F2:C9:35:B5:FC:EC:7B:17 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OQAyyTwGCUm31f2W8sk1tfzsexc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.232.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:ec:08:22:1a:7c:c4:be:c8:41:14:40:63:27:b4:46:cd:eb: 6f:da:56:35:06:4c:f9:8d:4e:2b:c5:4f:06:a7:ea:83:a6:4e: 86:27:e0:75:dc:4b:5f:ff:2b:a6:bf:d5:fe:2d:d8:b0:6a:12: 1b:9c:e3:22:30:bc:2a:79:8c:0a:fd:9b:89:7f:ce:71:59:6e: 27:f5:2a:05:4e:8a:af:d2:fd:ae:88:ab:60:69:89:1e:41:ca: 29:6c:21:23:92:4a:f7:3f:e0:c7:ee:28:a2:dc:f0:73:aa:8e: fe:67:37:d8:e4:35:24:e0:2d:14:d0:1f:17:20:32:68:9a:41: 52:2e:d7:74:79:fa:4e:1a:fe:47:64:65:13:be:ca:dd:68:9c: 92:3c:35:8b:82:f0:7a:72:a2:0a:d1:8a:5d:05:9e:7b:3a:16: a5:44:9c:00:4b:5a:43:f2:5e:df:e8:b7:3e:c8:3d:bb:69:22: d2:d2:cc:9a:33:f4:e4:ce:ed:ed:7d:c8:51:e3:94:a2:8c:67: 0f:31:a3:86:8d:53:f3:9e:c0:77:ee:b7:2f:37:20:f5:b4:81: 55:e1:f7:8b:0e:31:04:2a:db:91:13:b5:74:e9:23:25:a4:3a: d3:70:67:dc:f8:73:e1:41:08:7a:80:c0:7d:a7:41:ed:d1:8d: d8:c2:73:ef -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM5MDAzMkM5M0MwNjA5 NDlCN0Q1RkQ5NkYyQzkzNUI1RkNFQzdCMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0p6/pKLtlt23fxu6T/UEGX3MNjDkbXs3rPAA3WsLCwFFKsf3J 79zQrPRncejNKhL2l9jCBTWqqmdy7+0F5gKXATi3q2b+pl++rGtWn0BE5W+bMmD/ Rw9quKq7GInQ9ViR2UJdqzJopJmaQfhg88NrGt/7SJWQdoIX2NO0wl73A6hxNt32 Mbk3N41f3dk3M5VeFzzhSKP5Pnx062fkBhotNskRA9RHJo8yyktyQ+jWlXSbCmeF Wd8lVo/KCbNoj207UoUEUK5b5ooXc1PQc8Qmati/dYqVJ/tcGBSYe2574eLGqA2A GfPepOQp9bR9+IMUatCnoEuWa63IJXyMedFhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOQAyyTwGCUm31f2W8sk1tfzsexcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09RQXl5VHdHQ1VtMzFmMlc4c2sxdGZ6c2V4Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBSegwDQYJKoZIhvcNAQELBQADggEBAJ/sCCIafMS+yEEUQGMntEbN62/a VjUGTPmNTivFTwan6oOmToYn4HXcS1//K6a/1f4t2LBqEhuc4yIwvCp5jAr9m4l/ znFZbif1KgVOiq/S/a6Iq2BpiR5ByilsISOSSvc/4MfuKKLc8HOqjv5nN9jkNSTg LRTQHxcgMmiaQVIu13R5+k4a/kdkZRO+yt1onJI8NYuC8HpyogrRil0Fnns6FqVE nABLWkPyXt/otz7IPbtpItLSzJoz9OTO7e19yFHjlKKMZw8xo4aNU/OewHfuty83 IPW0gVXh94sOMQQq25ETtXTpIyWkOtNwZ9z4c+FBCHqAwH2nQe3RjdjCc+8= -----END CERTIFICATE-----Generated at Fri Oct 24 13:45:10 2025 by rpki-client