$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PsBHyP9_ecTg4RYuAwN-umJSS0o.roa File: PsBHyP9_ecTg4RYuAwN-umJSS0o.roa (raw, json) Hash identifier: Pgb4MEdgNIBTwAhoMyQQ9xacNQHU/eG0RibqHng6r0Y= Subject key identifier: 3E:C0:47:C8:FF:7F:79:C4:E0:E1:16:2E:03:03:7E:BA:62:52:4B:4A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B84 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PsBHyP9_ecTg4RYuAwN-umJSS0o.roa Signing time: Tue 01 Apr 2025 01:36:53 +0000 ROA not before: Tue 01 Apr 2025 01:36:53 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 110.163.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2948 (0xb84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:36:53 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=3EC047C8FF7F79C4E0E1162E03037EBA62524B4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:3a:c2:4f:e8:99:0c:9f:ab:e3:b2:1c:12: 72:57:e2:00:ff:c6:33:e5:c8:94:c5:13:61:69:e9: 4d:cd:15:53:4e:7b:24:0e:70:29:96:49:b1:4f:d9: 31:eb:e4:69:c9:9e:b5:36:81:ae:73:1a:23:5f:ed: e5:32:4e:df:40:cd:25:bd:94:cd:96:42:79:e4:1c: 24:bd:07:a7:2e:72:e7:39:af:a8:d1:f8:73:de:87: d0:7d:4f:70:2f:8c:80:c9:48:22:63:56:61:3f:48: ed:a2:f3:c9:6f:c8:97:32:11:4d:1f:0d:f1:02:c6: 41:c6:d9:39:d1:9b:94:6a:6a:03:c9:11:7d:b0:42: ef:db:ff:db:d2:80:2a:50:a9:f3:58:2d:3a:74:cb: 4d:8c:8c:67:c7:90:ca:69:8a:44:14:dd:0a:96:8c: 65:37:e6:a3:02:66:19:a6:1b:17:e2:3b:6a:0d:2b: b8:9a:0b:42:30:8e:70:e1:52:ef:51:8f:6b:c5:33: ce:b4:88:24:0a:b5:8d:58:e6:57:16:ea:0d:88:2e: 28:96:de:53:3d:06:a8:63:01:c6:72:bc:6e:40:a4: 44:6f:2a:18:e8:ab:39:0b:eb:fc:35:ba:8c:01:ca: 0f:2b:5c:af:d3:2a:ac:c9:d6:5e:8b:42:20:f7:4f: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C0:47:C8:FF:7F:79:C4:E0:E1:16:2E:03:03:7E:BA:62:52:4B:4A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PsBHyP9_ecTg4RYuAwN-umJSS0o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.163.58.0/24 Signature Algorithm: sha256WithRSAEncryption c9:c4:c7:22:ed:28:3e:ed:03:cd:5c:27:4e:e1:b8:d0:39:87: 59:6e:f5:ee:da:18:a4:23:f0:b8:4c:0c:53:fb:4f:49:65:5b: 08:da:5e:a3:b8:f5:81:ec:96:34:af:e3:84:28:88:c1:9f:a1: d3:d3:07:23:c0:dd:88:df:f5:99:69:06:ba:a2:05:04:e7:2f: 92:69:f2:48:ff:15:dd:1d:4b:e5:f2:3e:59:26:9e:86:e3:16: 28:48:3d:28:01:46:e0:e9:79:8e:53:7f:e0:dd:5e:4b:fc:61: 8d:16:92:90:e7:09:a5:5d:fe:e1:6c:df:71:df:32:a5:b9:ca: 92:c4:40:36:84:4d:88:e3:1d:28:7e:6f:bf:16:ea:0a:b2:14: f2:26:cf:7e:f2:c1:dd:42:b5:3c:72:41:bd:15:43:84:bf:63: 60:c8:70:dd:1e:44:8f:a6:b3:89:9d:90:e3:07:d0:e7:5f:be: 59:8c:c7:34:27:1b:4e:81:1c:b6:52:c6:16:6c:e3:65:b1:4d: ff:ee:fa:d2:bf:7f:10:f7:6b:a0:30:d3:03:a0:01:0f:71:2a: 6c:8f:a9:50:9b:24:f6:18:ce:7e:d0:dc:a4:90:9b:45:52:9a: 6a:3d:ef:5c:92:25:f2:3a:05:bd:33:7d:9a:5e:d2:e6:bf:49: 72:8b:19:81 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM2NTNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNFQzA0N0M4RkY3Rjc5 QzRFMEUxMTYyRTAzMDM3RUJBNjI1MjRCNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHFDrCT+iZDJ+r47IcEnJX4gD/xjPlyJTFE2Fp6U3NFVNOeyQO cCmWSbFP2THr5GnJnrU2ga5zGiNf7eUyTt9AzSW9lM2WQnnkHCS9B6cucuc5r6jR +HPeh9B9T3AvjIDJSCJjVmE/SO2i88lvyJcyEU0fDfECxkHG2TnRm5RqagPJEX2w Qu/b/9vSgCpQqfNYLTp0y02MjGfHkMppikQU3QqWjGU35qMCZhmmGxfiO2oNK7ia C0IwjnDhUu9Rj2vFM860iCQKtY1Y5lcW6g2ILiiW3lM9BqhjAcZyvG5ApERvKhjo qzkL6/w1uowByg8rXK/TKqzJ1l6LQiD3Txz9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPsBHyP9/ecTg4RYuAwN+umJSS0owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BzQkh5UDlfZWNUZzRSWXVBd04tdW1KU1Mwby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABuozowDQYJKoZIhvcNAQELBQADggEBAMnExyLtKD7tA81cJ07huNA5h1lu 9e7aGKQj8LhMDFP7T0llWwjaXqO49YHsljSv44QoiMGfodPTByPA3Yjf9ZlpBrqi BQTnL5Jp8kj/Fd0dS+XyPlkmnobjFihIPSgBRuDpeY5Tf+DdXkv8YY0WkpDnCaVd /uFs33HfMqW5ypLEQDaETYjjHSh+b78W6gqyFPImz37ywd1CtTxyQb0VQ4S/Y2DI cN0eRI+ms4mdkOMH0OdfvlmMxzQnG06BHLZSxhZs42WxTf/u+tK/fxD3a6Aw0wOg AQ9xKmyPqVCbJPYYzn7Q3KSQm0VSmmo971ySJfI6Bb0zfZpe0ua/SXKLGYE= -----END CERTIFICATE-----Generated at Fri Oct 24 13:47:29 2025 by rpki-client