$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qWQlVa6sVZ6QLkMUBH4Xavf6ou4.roa File: qWQlVa6sVZ6QLkMUBH4Xavf6ou4.roa (raw, json) Hash identifier: 5NAB68RE4SYXX5cY1uzkiPzQGFtWjyjmKR0Y+cHeBZA= Subject key identifier: A9:64:25:55:AE:AC:55:9E:90:2E:43:14:04:7E:17:6A:F7:FA:A2:EE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CB9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qWQlVa6sVZ6QLkMUBH4Xavf6ou4.roa Signing time: Tue 01 Apr 2025 02:05:46 +0000 ROA not before: Tue 01 Apr 2025 02:05:46 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:46 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=A9642555AEAC559E902E4314047E176AF7FAA2EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:16:19:d6:25:b8:9a:8f:a7:b4:0b:e3:3e: 11:6e:f9:d0:a8:24:7e:36:4d:fc:8c:b5:cb:b0:7a: 5f:90:20:af:90:82:2a:95:f7:b4:89:4d:85:16:f4: d8:15:40:8f:04:52:8b:01:57:a4:33:72:a8:8e:9e: a2:13:cd:9a:ff:14:cc:bf:49:0e:e7:b9:97:4e:fc: 9e:e2:58:07:89:cd:42:31:b1:d5:6f:ca:b6:29:bf: 32:f7:55:71:91:18:7c:16:dc:25:4b:fe:6a:cc:7f: 3d:bc:c9:e1:3c:35:8b:43:e5:9e:ff:b7:22:2d:27: 90:8d:37:d7:e3:86:a9:60:14:e1:b9:d7:33:93:76: 9c:4a:03:d1:bc:5f:15:5a:e5:6b:17:41:6b:79:cb: bc:5e:4a:2d:94:c8:38:ec:8e:aa:c6:df:b5:33:fe: c8:27:ef:dc:8f:20:a6:e7:45:63:9a:b6:f6:2f:f5: 98:bd:89:81:ff:bf:1d:19:23:4a:21:78:9c:6f:71: 0d:b5:83:59:59:7b:50:1d:68:7f:bb:06:17:49:5e: b8:86:4a:54:52:30:04:47:ac:3d:cc:79:2f:68:74: 54:dd:9e:28:92:54:8d:e1:d7:77:6e:0c:3e:32:36: e3:5c:14:ae:d7:0c:28:84:93:36:3f:47:c2:2d:8c: 9e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:64:25:55:AE:AC:55:9E:90:2E:43:14:04:7E:17:6A:F7:FA:A2:EE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qWQlVa6sVZ6QLkMUBH4Xavf6ou4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.3.0/24 Signature Algorithm: sha256WithRSAEncryption c4:7e:69:1a:85:4a:f5:11:20:8a:ed:e9:1b:f4:e3:99:40:98: b4:48:96:d4:11:3c:15:47:8b:14:a5:2b:7b:bc:58:53:64:8b: a0:1e:bc:82:3d:e6:a7:e1:ad:31:be:27:45:c2:aa:17:8c:20: 27:92:eb:be:2a:44:04:3e:c0:bf:c9:52:12:91:69:42:1a:d2: 1e:25:b8:ca:21:38:98:51:68:42:2a:30:79:15:c0:7d:60:09: 45:e9:88:c4:4c:26:a5:fb:43:5c:f9:33:47:6e:10:be:9f:9b: f1:58:7d:74:4c:f0:48:6d:f9:57:83:1a:ab:b1:5a:14:2a:0c: 99:bb:23:7c:55:e5:3a:a7:bb:84:5f:29:00:7e:dd:c0:10:55: 8c:b2:50:b7:6b:28:a3:a4:34:d4:9c:9e:20:3a:5e:a0:6e:11: 4c:23:d0:8e:9c:00:87:5d:4b:e9:09:ec:b3:5f:49:33:e5:53: 11:e1:74:31:be:89:1c:7f:40:92:97:d7:e6:87:c1:c8:b9:2f: b5:44:61:20:27:e6:06:51:bb:34:7f:f6:5a:98:7e:43:96:9b: ae:1f:f1:73:fd:8b:00:4a:93:44:25:6b:62:e9:12:07:84:7a: a5:3d:da:db:2f:54:ff:5d:d0:c3:98:19:bd:68:8e:1e:26:6b: c8:94:0a:39 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE5NjQyNTU1QUVBQzU1 OUU5MDJFNDMxNDA0N0UxNzZBRjdGQUEyRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4DxYZ1iW4mo+ntAvjPhFu+dCoJH42TfyMtcuwel+QIK+QgiqV 97SJTYUW9NgVQI8EUosBV6QzcqiOnqITzZr/FMy/SQ7nuZdO/J7iWAeJzUIxsdVv yrYpvzL3VXGRGHwW3CVL/mrMfz28yeE8NYtD5Z7/tyItJ5CNN9fjhqlgFOG51zOT dpxKA9G8XxVa5WsXQWt5y7xeSi2UyDjsjqrG37Uz/sgn79yPIKbnRWOatvYv9Zi9 iYH/vx0ZI0oheJxvcQ21g1lZe1AdaH+7BhdJXriGSlRSMARHrD3MeS9odFTdniiS VI3h13duDD4yNuNcFK7XDCiEkzY/R8ItjJ4VAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqWQlVa6sVZ6QLkMUBH4Xavf6ou4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3FXUWxWYTZzVlo2UUxrTVVCSDRYYXZmNm91NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABTwMwDQYJKoZIhvcNAQELBQADggEBAMR+aRqFSvURIIrt6Rv045lAmLRI ltQRPBVHixSlK3u8WFNki6AevII95qfhrTG+J0XCqheMICeS674qRAQ+wL/JUhKR aUIa0h4luMohOJhRaEIqMHkVwH1gCUXpiMRMJqX7Q1z5M0duEL6fm/FYfXRM8Eht +VeDGquxWhQqDJm7I3xV5Tqnu4RfKQB+3cAQVYyyULdrKKOkNNScniA6XqBuEUwj 0I6cAIddS+kJ7LNfSTPlUxHhdDG+iRx/QJKX1+aHwci5L7VEYSAn5gZRuzR/9lqY fkOWm64f8XP9iwBKk0Qla2LpEgeEeqU92tsvVP9d0MOYGb1ojh4ma8iUCjk= -----END CERTIFICATE-----Generated at Fri Oct 24 13:42:04 2025 by rpki-client