$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kXfXvgSEoh7cczia1ngrWp3D1ec.roa File: kXfXvgSEoh7cczia1ngrWp3D1ec.roa (raw, json) Hash identifier: ginvQmdMfu/u09/PmJywpVE8GjXeUPtNH+GYwIaTBRo= Subject key identifier: 91:77:D7:BE:04:84:A2:1E:DC:73:38:9A:D6:78:2B:5A:9D:C3:D5:E7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F22 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kXfXvgSEoh7cczia1ngrWp3D1ec.roa Signing time: Tue 10 Jun 2025 11:20:25 +0000 ROA not before: Tue 10 Jun 2025 11:20:25 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.74.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3874 (0xf22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:20:25 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=9177D7BE0484A21EDC73389AD6782B5A9DC3D5E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:8f:0a:4e:f5:b8:ba:63:27:ba:14:78:38: f9:b7:37:32:36:ca:3e:90:b2:86:18:87:a3:e2:c3: 8b:d8:cb:6f:cc:17:6c:db:f1:78:de:ec:08:60:f1: 20:79:a4:38:08:73:bf:40:b1:6f:c0:45:f9:ea:28: 7a:ff:31:5d:14:c4:89:06:7c:38:53:85:73:23:81: 80:b0:a6:b2:4c:c3:30:0e:dc:6f:58:14:2a:d0:7e: d7:22:80:a2:46:e0:29:e2:11:e9:9f:34:d9:ae:11: cb:b1:b3:1a:a9:a8:ac:74:ac:4c:ae:ae:7d:11:48: 48:a6:b1:c3:f1:76:28:7e:48:cc:21:8e:94:ed:f2: 6c:14:bf:07:94:7f:fa:51:57:31:8c:a5:38:0f:99: 24:df:56:d5:4e:d8:fa:e9:cc:7e:fb:44:84:3d:3e: e9:ef:20:d5:a9:fd:34:47:16:72:ba:4c:9d:6d:66: 01:43:ab:f4:04:07:f2:59:32:06:99:1b:37:a5:28: c5:ef:a4:1b:36:59:11:f7:20:37:01:b8:c7:9a:8f: 92:32:72:0f:9f:a0:e9:52:4a:91:47:a5:f0:5d:7a: 3e:06:47:74:63:5d:d0:5e:62:09:11:82:19:56:56: 1c:0d:d2:4c:06:76:7d:59:74:ed:7e:77:33:ae:24: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:77:D7:BE:04:84:A2:1E:DC:73:38:9A:D6:78:2B:5A:9D:C3:D5:E7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kXfXvgSEoh7cczia1ngrWp3D1ec.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.96.0/19 Signature Algorithm: sha256WithRSAEncryption 2d:be:24:dc:7a:02:16:28:c9:a8:01:e5:a9:99:e7:d6:16:c1: 74:30:a8:21:78:59:24:40:88:b2:1d:88:3b:69:7e:4a:06:d1: 7e:37:09:6a:39:dc:36:12:d7:b8:75:7d:e6:fa:aa:c7:99:94: 2d:30:b1:e2:1b:13:03:4b:6c:c0:23:8a:31:b3:aa:37:7b:d2: 16:65:99:ce:40:f5:cf:1f:2d:f3:6f:1d:28:b2:06:92:45:ec: c0:31:c3:93:24:f5:08:cc:91:41:cb:a7:56:ce:94:20:1a:22: 36:da:69:fc:c0:b5:a1:8f:78:8e:55:18:f7:b6:8a:64:c5:f4: 2e:2c:be:c1:14:11:81:ab:32:4a:85:fb:5e:25:e6:5d:f7:2a: e7:86:61:b9:a3:a1:3f:47:89:d0:dc:82:da:d7:8d:e8:e1:da: a1:a9:59:93:1c:b2:b8:01:00:2e:42:a6:1a:a5:45:2a:67:af: f8:fa:7e:57:6b:a0:49:0a:5f:0e:8e:88:cc:d4:a4:a1:77:ca: c0:bd:dc:28:93:91:38:55:d0:8e:3e:4b:d7:1d:51:38:0b:2b: 0c:88:08:54:54:16:d3:db:ad:7e:d3:8b:32:29:42:c3:bc:5f: 20:8f:a7:87:09:b1:04:63:66:b9:f2:8b:39:ce:ce:79:76:37: eb:6d:b6:41 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDyIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTIwMjVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDkxNzdEN0JFMDQ4NEEy MUVEQzczMzg5QUQ2NzgyQjVBOURDM0Q1RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnL48KTvW4umMnuhR4OPm3NzI2yj6QsoYYh6Piw4vYy2/MF2zb 8Xje7Ahg8SB5pDgIc79AsW/ARfnqKHr/MV0UxIkGfDhThXMjgYCwprJMwzAO3G9Y FCrQftcigKJG4CniEemfNNmuEcuxsxqpqKx0rEyurn0RSEimscPxdih+SMwhjpTt 8mwUvweUf/pRVzGMpTgPmSTfVtVO2PrpzH77RIQ9PunvINWp/TRHFnK6TJ1tZgFD q/QEB/JZMgaZGzelKMXvpBs2WRH3IDcBuMeaj5Iycg+foOlSSpFHpfBdej4GR3Rj XdBeYgkRghlWVhwN0kwGdn1ZdO1+dzOuJAbNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkXfXvgSEoh7cczia1ngrWp3D1ecwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2tYZlh2Z1NFb2g3Y2N6aWExbmdyV3AzRDFlYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBSmAwDQYJKoZIhvcNAQELBQADggEBAC2+JNx6AhYoyagB5amZ59YWwXQw qCF4WSRAiLIdiDtpfkoG0X43CWo53DYS17h1feb6qseZlC0wseIbEwNLbMAjijGz qjd70hZlmc5A9c8fLfNvHSiyBpJF7MAxw5Mk9QjMkUHLp1bOlCAaIjbaafzAtaGP eI5VGPe2imTF9C4svsEUEYGrMkqF+14l5l33KueGYbmjoT9HidDcgtrXjejh2qGp WZMcsrgBAC5CphqlRSpnr/j6fldroEkKXw6OiMzUpKF3ysC93CiTkThV0I4+S9cd UTgLKwyICFRUFtPbrX7TizIpQsO8XyCPp4cJsQRjZrnyiznOznl2N+tttkE= -----END CERTIFICATE-----Generated at Fri Oct 24 13:48:00 2025 by rpki-client