$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oMgFVsnd_-DZBEnJh1S1MVVtuKY.roa File: oMgFVsnd_-DZBEnJh1S1MVVtuKY.roa (raw, json) Hash identifier: WbtJ6N/U/DUKcdqgYSRc2LYIhi6B/xsf6R8EiTLhfrY= Subject key identifier: A0:C8:05:56:C9:DD:FF:E0:D9:04:49:C9:87:54:B5:31:55:6D:B8:A6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D65 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oMgFVsnd_-DZBEnJh1S1MVVtuKY.roa Signing time: Tue 01 Apr 2025 02:19:18 +0000 ROA not before: Tue 01 Apr 2025 02:19:18 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3429 (0xd65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:18 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=A0C80556C9DDFFE0D90449C98754B531556DB8A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:80:18:67:38:23:0f:2c:86:ab:cc:19:86:33: cb:a2:ed:bd:29:01:fa:19:08:e6:14:c2:b2:37:e9: 9f:b3:7a:73:76:88:fc:72:b4:c7:f2:3a:09:5c:23: 41:86:66:85:02:27:2d:8d:d5:4e:b1:c8:63:d7:2d: 81:8b:cf:08:23:f6:a2:70:ac:26:65:b2:fb:4a:68: b0:80:3c:58:75:a9:d1:c0:d8:c9:cc:e2:1e:ee:9c: 2d:4d:69:23:e0:cd:17:81:48:c8:56:f8:18:b3:94: 98:2c:06:e9:c7:bf:0d:67:4f:76:b9:43:3d:b2:5d: 41:cd:5c:90:a2:9c:54:28:da:88:08:91:3e:8f:30: be:7e:3d:40:f8:51:57:75:2a:e2:71:66:b7:42:a0: 9b:54:60:b6:e7:23:13:f6:a3:f0:9d:9b:6a:21:aa: 7d:35:ca:07:5d:ab:ef:59:1a:dc:54:48:c2:60:73: 01:a0:59:f8:16:40:e8:9d:a0:39:8e:88:3b:f9:28: 60:68:fa:65:0a:f6:6c:f0:77:07:4a:7d:cf:40:a9: 85:9b:21:a1:0e:b7:90:ea:82:cf:bb:5c:06:0a:24: c3:83:67:8c:f1:2e:9d:27:90:56:5e:dc:d5:2e:de: 0c:db:46:55:33:4c:d2:4b:d3:87:ba:6e:6e:3d:cb: f9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C8:05:56:C9:DD:FF:E0:D9:04:49:C9:87:54:B5:31:55:6D:B8:A6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oMgFVsnd_-DZBEnJh1S1MVVtuKY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.80.0/23 Signature Algorithm: sha256WithRSAEncryption 34:d9:06:8f:50:c1:43:4e:58:0f:fe:73:cc:41:d1:31:eb:aa: 94:df:ee:ff:60:02:92:85:47:02:8b:27:c6:cc:57:a5:e5:30: b1:7f:0a:44:0e:aa:0c:e3:dd:77:02:08:28:b4:a6:2d:62:fc: 22:5f:d7:66:cf:12:1d:55:3d:bd:db:62:a5:e0:94:bf:6d:87: 2a:c2:b9:bb:ef:79:8b:d1:dd:54:05:23:44:36:10:f5:97:2e: 02:6b:43:14:37:64:56:ff:ac:91:9d:6f:14:92:27:72:93:5f: 67:d2:be:65:e7:a7:5d:06:90:1b:32:c4:b7:2f:ad:a7:9c:fe: be:36:6d:53:03:dc:e7:7e:17:0a:24:45:8f:70:31:8f:7f:82: 7f:e0:db:3f:be:bf:c8:26:60:e4:ce:9a:39:97:62:00:b1:d4: 52:35:0c:ba:4b:4a:b6:a3:bb:5e:cc:df:c0:ed:9a:d2:51:1a: 3d:81:2f:1b:1b:37:e5:84:89:b1:47:44:45:f6:0b:f2:66:97: 4f:2a:4b:46:55:20:77:39:03:fc:03:b1:34:24:a8:3f:fa:a4: 00:26:a0:58:26:1e:55:5a:ed:56:73:76:79:50:ee:06:a0:a7: ea:1a:f0:68:e0:fc:14:88:bc:f8:82:96:3c:5b:49:51:07:c6: 0d:e9:ad:e9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MThaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEEwQzgwNTU2QzlEREZG RTBEOTA0NDlDOTg3NTRCNTMxNTU2REI4QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXgBhnOCMPLIarzBmGM8ui7b0pAfoZCOYUwrI36Z+zenN2iPxy tMfyOglcI0GGZoUCJy2N1U6xyGPXLYGLzwgj9qJwrCZlsvtKaLCAPFh1qdHA2MnM 4h7unC1NaSPgzReBSMhW+BizlJgsBunHvw1nT3a5Qz2yXUHNXJCinFQo2ogIkT6P ML5+PUD4UVd1KuJxZrdCoJtUYLbnIxP2o/Cdm2ohqn01ygddq+9ZGtxUSMJgcwGg WfgWQOidoDmOiDv5KGBo+mUK9mzwdwdKfc9AqYWbIaEOt5Dqgs+7XAYKJMODZ4zx Lp0nkFZe3NUu3gzbRlUzTNJL04e6bm49y/kfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoMgFVsnd/+DZBEnJh1S1MVVtuKYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L29NZ0ZWc25kXy1EWkJFbkpoMVMxTVZWdHVLWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBT1AwDQYJKoZIhvcNAQELBQADggEBADTZBo9QwUNOWA/+c8xB0THrqpTf 7v9gApKFRwKLJ8bMV6XlMLF/CkQOqgzj3XcCCCi0pi1i/CJf12bPEh1VPb3bYqXg lL9thyrCubvveYvR3VQFI0Q2EPWXLgJrQxQ3ZFb/rJGdbxSSJ3KTX2fSvmXnp10G kBsyxLcvraec/r42bVMD3Od+FwokRY9wMY9/gn/g2z++v8gmYOTOmjmXYgCx1FI1 DLpLSraju17M38DtmtJRGj2BLxsbN+WEibFHREX2C/Jml08qS0ZVIHc5A/wDsTQk qD/6pAAmoFgmHlVa7VZzdnlQ7gagp+oa8Gjg/BSIvPiCljxbSVEHxg3prek= -----END CERTIFICATE-----Generated at Fri Oct 24 13:43:56 2025 by rpki-client