$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xn74e1tZnSO4ky7pv7ydNUhZLlQ.roa File: xn74e1tZnSO4ky7pv7ydNUhZLlQ.roa (raw, json) Hash identifier: MNb8+sWEyZJT0N+8ZfMMRt+u6VkCOh0GFvmvNHFsmmA= Subject key identifier: C6:7E:F8:7B:5B:59:9D:23:B8:93:2E:E9:BF:BC:9D:35:48:59:2E:54 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DDF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xn74e1tZnSO4ky7pv7ydNUhZLlQ.roa Signing time: Tue 01 Apr 2025 02:27:27 +0000 ROA not before: Tue 01 Apr 2025 02:27:27 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3551 (0xddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:27 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C67EF87B5B599D23B8932EE9BFBC9D3548592E54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:ba:18:65:3d:e2:56:ba:e8:c2:c1:61:97: bb:81:82:e4:b8:ec:b4:41:f4:d1:55:9f:59:a8:6d: eb:4d:04:83:3b:4c:a3:bc:0a:e0:e8:1e:94:10:38: 63:85:cc:8e:24:3d:b2:78:a0:cc:8b:44:11:c6:1d: 67:47:9f:0c:94:8f:ea:c2:6f:bb:57:2d:13:9c:f8: 27:6d:66:72:43:ab:91:59:4f:79:c3:47:f0:4a:46: d1:1f:f1:4a:3e:f9:ad:15:89:d2:7e:63:93:10:25: 40:ba:cc:da:f3:78:c3:9f:ab:4a:e2:09:12:b4:a4: 50:39:51:46:70:a2:27:e4:77:03:c5:72:33:8f:23: 61:b3:5f:49:03:00:d6:ef:ee:14:c6:a7:d8:80:96: 8c:dd:24:1c:38:9f:54:f9:b2:75:5e:a4:a2:dc:9d: ed:7b:2e:6a:09:19:fa:a6:cf:3a:1a:6f:26:2c:45: 8f:f7:f2:b1:11:b7:7f:ba:11:94:08:64:0b:5c:22: 2f:8f:04:1a:40:89:8b:57:ef:dc:90:c1:b7:76:77: 83:64:d3:53:e3:cc:c2:15:02:b3:59:06:29:d6:d7: ab:d3:a9:9f:0b:5c:95:31:16:66:b2:dd:eb:ac:cf: 76:84:b2:5d:46:1e:06:96:5f:77:53:d9:ed:1c:4d: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7E:F8:7B:5B:59:9D:23:B8:93:2E:E9:BF:BC:9D:35:48:59:2E:54 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xn74e1tZnSO4ky7pv7ydNUhZLlQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.11.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:fb:4b:58:77:12:a1:c4:5d:1a:4f:94:0f:10:d2:6f:ab:6c: b9:65:42:3a:98:ac:f8:42:7a:d0:4a:42:00:8e:f1:40:e6:5a: 59:32:b5:8b:f7:c0:f6:f5:0c:30:fe:c3:e7:14:59:2c:d5:14: 59:90:21:cf:30:fb:34:6b:67:ae:8f:99:76:42:2b:16:81:f7: e2:4e:a1:fb:38:9a:16:24:0f:3e:63:ce:3b:c5:f2:0b:e3:af: 0b:e4:a2:7d:00:77:12:60:d4:c1:ca:63:94:7b:c2:03:c3:b4: 88:7e:0d:53:67:91:56:30:0d:fe:13:a8:d2:99:66:cf:77:59: 89:f7:12:bc:e0:aa:53:4b:86:43:01:e7:5c:d9:08:b0:c2:4b: e7:ea:26:40:86:27:e3:e6:e6:e8:43:09:0b:dd:56:29:e3:fe: 83:ba:a4:d7:4c:4f:8a:ce:97:ac:61:ef:d6:17:bd:c5:8c:4a: 1a:9f:1d:fe:03:40:c3:09:b9:a9:6b:ab:20:6e:ea:9e:f0:bb: e6:e3:34:b5:69:13:5c:42:f1:1d:58:d7:5b:1c:1e:ef:be:3b: c4:a8:0a:5b:12:50:fd:06:3a:51:ef:6f:d4:bc:f0:85:09:54: a5:bf:7e:2c:66:c8:62:1a:a7:f0:79:be:d7:5b:1d:bf:11:29: c9:50:82:39 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MjdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM2N0VGODdCNUI1OTlE MjNCODkzMkVFOUJGQkM5RDM1NDg1OTJFNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAcroYZT3iVrrowsFhl7uBguS47LRB9NFVn1mobetNBIM7TKO8 CuDoHpQQOGOFzI4kPbJ4oMyLRBHGHWdHnwyUj+rCb7tXLROc+CdtZnJDq5FZT3nD R/BKRtEf8Uo++a0VidJ+Y5MQJUC6zNrzeMOfq0riCRK0pFA5UUZwoifkdwPFcjOP I2GzX0kDANbv7hTGp9iAlozdJBw4n1T5snVepKLcne17LmoJGfqmzzoabyYsRY/3 8rERt3+6EZQIZAtcIi+PBBpAiYtX79yQwbd2d4Nk01PjzMIVArNZBinW16vTqZ8L XJUxFmay3eusz3aEsl1GHgaWX3dT2e0cTVQrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxn74e1tZnSO4ky7pv7ydNUhZLlQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3huNzRlMXRablNPNGt5N3B2N3lkTlVoWkxsUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABTwswDQYJKoZIhvcNAQELBQADggEBAH37S1h3EqHEXRpPlA8Q0m+rbLll QjqYrPhCetBKQgCO8UDmWlkytYv3wPb1DDD+w+cUWSzVFFmQIc8w+zRrZ66PmXZC KxaB9+JOofs4mhYkDz5jzjvF8gvjrwvkon0AdxJg1MHKY5R7wgPDtIh+DVNnkVYw Df4TqNKZZs93WYn3ErzgqlNLhkMB51zZCLDCS+fqJkCGJ+Pm5uhDCQvdVinj/oO6 pNdMT4rOl6xh79YXvcWMShqfHf4DQMMJualrqyBu6p7wu+bjNLVpE1xC8R1Y11sc Hu++O8SoClsSUP0GOlHvb9S88IUJVKW/fixmyGIap/B5vtdbHb8RKclQgjk= -----END CERTIFICATE-----Generated at Fri Oct 24 13:43:56 2025 by rpki-client