$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WV3RmwxehMO-YuRRJ_3hK4yd9vU.roa File: WV3RmwxehMO-YuRRJ_3hK4yd9vU.roa (raw, json) Hash identifier: CFEovtIKeUBPAszJdLTEfcnnO0qhy5MKazIY4DwiXHI= Subject key identifier: 59:5D:D1:9B:0C:5E:84:C3:BE:62:E4:51:27:FD:E1:2B:8C:9D:F6:F5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FCE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WV3RmwxehMO-YuRRJ_3hK4yd9vU.roa Signing time: Wed 27 Aug 2025 05:26:51 +0000 ROA not before: Wed 27 Aug 2025 05:26:51 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 9605 IP address blocks: 27.230.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4046 (0xfce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Aug 27 05:26:51 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=595DD19B0C5E84C3BE62E45127FDE12B8C9DF6F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:bc:82:04:b2:63:a1:cf:cb:30:2d:df:60: 52:7d:d8:33:f7:2b:89:d6:f7:c8:ba:2f:2e:73:4f: 57:1c:7d:fa:8f:45:c1:7d:81:f9:99:7c:ef:e9:b1: 53:2a:2f:a9:75:44:27:16:c3:2d:f1:20:3e:ad:4c: 7b:4b:64:c2:18:43:15:6b:7c:11:40:b1:16:e6:70: 9b:0e:57:01:c1:6f:7c:3c:bf:f5:c3:02:3e:bc:82: 28:62:9a:03:cc:f3:87:6b:b3:b4:d7:57:57:5d:23: ee:b0:52:b7:ca:37:e4:d7:d9:3f:34:28:4b:4c:4d: b0:03:0b:fd:70:b2:8c:2d:dd:f5:eb:87:7e:a2:b5: c1:60:ed:33:f7:32:3b:a5:48:dc:5a:1a:7b:56:c1: 9c:20:75:1d:70:84:e8:9a:64:f2:a1:45:14:eb:10: 5f:69:0f:71:1f:5b:3c:63:9d:25:12:42:4d:bd:d3: fb:ab:d9:9e:fb:ec:83:52:0a:a7:4a:b0:45:08:58: cc:d5:d0:5c:66:cc:8c:e1:58:c0:4b:3a:13:78:82: d3:4e:1a:64:ac:c1:fd:cc:e1:b0:05:fd:bd:6f:e3: 30:e0:f4:45:24:ae:cb:8e:44:fe:d1:35:ed:95:3e: 0e:da:cf:48:7c:a7:7e:2d:ce:dc:71:22:38:16:8e: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5D:D1:9B:0C:5E:84:C3:BE:62:E4:51:27:FD:E1:2B:8C:9D:F6:F5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WV3RmwxehMO-YuRRJ_3hK4yd9vU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.43.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:3a:35:08:3b:4b:e5:17:0d:16:48:10:e3:7a:31:6e:48:ae: 99:4c:8a:7a:fc:01:66:b5:1c:82:b0:e1:00:ee:08:4e:aa:4e: 68:ae:36:54:15:a1:59:41:3d:fc:ac:28:ae:48:f7:7c:41:1a: 29:f9:c1:7b:85:f3:9e:be:4b:ff:07:4c:ce:38:ef:1b:f6:74: e2:4d:76:b6:73:cb:fe:26:ea:9c:25:89:42:83:0b:fc:6d:d6: 5a:d8:c1:16:57:08:77:f9:d0:57:0b:53:a9:1c:e5:85:8f:90: 52:1b:a2:90:1f:cb:9c:08:6f:b3:cc:19:bb:59:13:ec:03:1b: f8:5e:b5:78:87:2d:cd:94:43:83:96:f6:d9:2f:90:c2:e8:41: aa:cd:1e:27:b6:a7:ee:f5:50:b5:e3:f1:d6:12:d3:f5:41:c8: 45:f1:25:b1:e0:e0:6f:5b:a8:ad:3f:91:25:c1:ab:66:8a:57: dc:e2:66:c2:7e:89:72:ac:e5:97:02:fb:97:07:c3:ad:84:4d: 75:22:3d:e3:d6:33:4a:1d:49:af:0d:a8:fc:74:35:06:1a:bd: d5:50:44:14:52:8c:23:58:01:f8:4b:01:6a:8a:d9:2d:15:29: fe:e3:bf:78:1b:84:bc:58:98:d4:c6:c4:6e:fa:97:c2:a3:12: cb:42:67:69 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA4Mjcw NTI2NTFaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU5NUREMTlCMEM1RTg0 QzNCRTYyRTQ1MTI3RkRFMTJCOEM5REY2RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+g7yCBLJjoc/LMC3fYFJ92DP3K4nW98i6Ly5zT1ccffqPRcF9 gfmZfO/psVMqL6l1RCcWwy3xID6tTHtLZMIYQxVrfBFAsRbmcJsOVwHBb3w8v/XD Aj68gihimgPM84drs7TXV1ddI+6wUrfKN+TX2T80KEtMTbADC/1wsowt3fXrh36i tcFg7TP3MjulSNxaGntWwZwgdR1whOiaZPKhRRTrEF9pD3EfWzxjnSUSQk290/ur 2Z777INSCqdKsEUIWMzV0FxmzIzhWMBLOhN4gtNOGmSswf3M4bAF/b1v4zDg9EUk rsuORP7RNe2VPg7az0h8p34tztxxIjgWjrnzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWV3RmwxehMO+YuRRJ/3hK4yd9vUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1dWM1Jtd3hlaE1PLVl1UlJKXzNoSzR5ZDl2VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAb5iswDQYJKoZIhvcNAQELBQADggEBAC86NQg7S+UXDRZIEON6MW5IrplM inr8AWa1HIKw4QDuCE6qTmiuNlQVoVlBPfysKK5I93xBGin5wXuF856+S/8HTM44 7xv2dOJNdrZzy/4m6pwliUKDC/xt1lrYwRZXCHf50FcLU6kc5YWPkFIbopAfy5wI b7PMGbtZE+wDG/hetXiHLc2UQ4OW9tkvkMLoQarNHie2p+71ULXj8dYS0/VByEXx JbHg4G9bqK0/kSXBq2aKV9ziZsJ+iXKs5ZcC+5cHw62ETXUiPePWM0odSa8NqPx0 NQYavdVQRBRSjCNYAfhLAWqK2S0VKf7jv3gbhLxYmNTGxG76l8KjEstCZ2k= -----END CERTIFICATE-----Generated at Sun Sep 7 07:04:59 2025 by rpki-client