$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YjjqGmzAW58TSBdKu0dPehDwAKI.roa File: YjjqGmzAW58TSBdKu0dPehDwAKI.roa (raw, json) Hash identifier: wSwF21alF6drt0oJ8NIDpUxL1+1OrOHHeDjGLhNqpvM= Subject key identifier: 62:38:EA:1A:6C:C0:5B:9F:13:48:17:4A:BB:47:4F:7A:10:F0:00:A2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DB2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YjjqGmzAW58TSBdKu0dPehDwAKI.roa Signing time: Tue 01 Apr 2025 02:24:43 +0000 ROA not before: Tue 01 Apr 2025 02:24:43 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3506 (0xdb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:43 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=6238EA1A6CC05B9F1348174ABB474F7A10F000A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:88:8a:49:52:c8:42:50:22:05:cc:74:18: f1:a9:7a:4b:b0:71:b6:56:6d:1b:3e:16:1c:6c:60: 07:f1:a4:54:ce:e3:86:69:d9:41:fb:b0:73:d9:64: fa:29:22:4c:39:44:e3:a0:4a:ce:83:8c:f9:e7:cd: 90:fe:cc:80:49:b4:43:a3:8d:ef:1d:70:8b:06:f1: cf:ac:35:ad:e5:a3:fc:29:d7:c1:d0:d2:31:f9:8d: 0b:05:bf:82:7a:30:e9:f7:c0:c3:b5:f1:d6:04:73: a1:e2:c2:da:63:19:aa:6a:c4:f5:3f:a2:52:e0:4a: 8e:b2:5d:a1:88:c6:c3:c6:1f:2f:68:50:c4:7c:7f: 64:40:f9:6f:35:f0:a8:8d:fe:d5:5b:41:d0:cb:c1: 39:11:3d:86:36:88:01:7a:22:74:ac:a8:0f:47:d5: dc:a6:97:0c:04:89:87:b7:4e:18:2b:91:a4:20:c3: eb:9f:27:75:44:d9:7b:f5:28:9e:c2:d3:73:70:7a: 05:d1:f2:ac:90:2c:87:43:22:27:7e:8a:b6:ee:eb: d2:f5:8a:c6:e1:a3:a9:8f:8e:84:c6:80:6e:ae:0d: 94:af:30:4d:12:ed:9f:74:f5:4e:5f:4d:f3:7b:90: 71:ce:7b:75:a9:5c:8d:13:48:af:f2:6b:34:03:07: 75:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:38:EA:1A:6C:C0:5B:9F:13:48:17:4A:BB:47:4F:7A:10:F0:00:A2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YjjqGmzAW58TSBdKu0dPehDwAKI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.246.0/23 Signature Algorithm: sha256WithRSAEncryption 20:0a:22:da:c4:ca:e8:e6:4b:17:41:a5:51:eb:a8:5a:54:d8: 50:59:03:54:12:f5:aa:39:ed:ce:92:f4:f5:6c:cc:20:7f:e0: d8:3e:36:e0:1f:bc:92:d0:df:52:f7:c7:8d:26:db:9c:b1:d7: 45:5e:69:3a:79:63:a0:6e:68:3e:44:d7:14:e8:f3:31:ea:2e: 43:be:aa:b9:13:86:af:56:31:b8:41:a7:99:88:c2:21:dc:8f: da:06:d4:a6:63:93:69:58:05:f3:7d:41:04:4c:3a:16:6d:78: fb:57:8b:81:fb:d9:05:23:ca:06:4d:36:73:4e:02:dc:3a:b8: f7:66:c0:ec:a4:40:2b:1f:c8:6c:17:9f:1a:2a:93:b8:66:4a: 01:36:2c:9a:7b:fe:b8:f1:88:69:ac:37:6d:6d:bd:e5:1b:dd: 85:ae:ce:d4:a2:cd:7f:af:ac:c0:ba:7b:e1:3f:f9:06:2d:f2: 12:b6:27:b6:55:d2:74:28:bb:97:4e:f8:64:10:a7:6d:ff:4c: 6f:c0:f4:af:11:cd:8b:0f:55:1b:6f:01:a7:56:fd:30:26:40: d1:64:a3:2f:f9:8e:52:3a:f9:58:da:3a:5a:37:54:76:57:33: c7:75:23:1a:81:16:8e:3d:d0:6a:98:0d:2f:88:98:40:bd:2d: bf:a6:36:33 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0NDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYyMzhFQTFBNkNDMDVC OUYxMzQ4MTc0QUJCNDc0RjdBMTBGMDAwQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDByYiKSVLIQlAiBcx0GPGpekuwcbZWbRs+FhxsYAfxpFTO44Zp 2UH7sHPZZPopIkw5ROOgSs6DjPnnzZD+zIBJtEOjje8dcIsG8c+sNa3lo/wp18HQ 0jH5jQsFv4J6MOn3wMO18dYEc6HiwtpjGapqxPU/olLgSo6yXaGIxsPGHy9oUMR8 f2RA+W818KiN/tVbQdDLwTkRPYY2iAF6InSsqA9H1dymlwwEiYe3ThgrkaQgw+uf J3VE2Xv1KJ7C03NwegXR8qyQLIdDIid+irbu69L1isbho6mPjoTGgG6uDZSvME0S 7Z909U5fTfN7kHHOe3WpXI0TSK/yazQDB3WdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYjjqGmzAW58TSBdKu0dPehDwAKIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1lqanFHbXpBVzU4VFNCZEt1MGRQZWhEd0FLSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS/YwDQYJKoZIhvcNAQELBQADggEBACAKItrEyujmSxdBpVHrqFpU2FBZ A1QS9ao57c6S9PVszCB/4Ng+NuAfvJLQ31L3x40m25yx10VeaTp5Y6BuaD5E1xTo 8zHqLkO+qrkThq9WMbhBp5mIwiHcj9oG1KZjk2lYBfN9QQRMOhZtePtXi4H72QUj ygZNNnNOAtw6uPdmwOykQCsfyGwXnxoqk7hmSgE2LJp7/rjxiGmsN21tveUb3YWu ztSizX+vrMC6e+E/+QYt8hK2J7ZV0nQou5dO+GQQp23/TG/A9K8RzYsPVRtvAadW /TAmQNFkoy/5jlI6+VjaOlo3VHZXM8d1IxqBFo490GqYDS+ImEC9Lb+mNjM= -----END CERTIFICATE-----Generated at Fri Oct 24 13:45:13 2025 by rpki-client