$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yriZP0d4qzfc-4hVcvyNkydsc_s.roa File: yriZP0d4qzfc-4hVcvyNkydsc_s.roa (raw, json) Hash identifier: HlqFD4vSvdRmJrRjceTqyLdHtoH6weh+/zA8Iuimw78= Subject key identifier: CA:B8:99:3F:47:78:AB:37:DC:FB:88:55:72:FC:8D:93:27:6C:73:FB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D35 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yriZP0d4qzfc-4hVcvyNkydsc_s.roa Signing time: Tue 01 Apr 2025 02:13:55 +0000 ROA not before: Tue 01 Apr 2025 02:13:55 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3381 (0xd35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:13:55 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=CAB8993F4778AB37DCFB885572FC8D93276C73FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:e8:c7:bf:32:45:99:05:25:38:87:59:ca: 4e:b2:09:d5:a9:f7:86:7c:cf:2b:32:76:a2:50:dd: 92:47:42:b8:d3:9c:06:6b:6b:a6:2a:aa:85:04:f5: 35:c1:3e:12:45:db:44:3e:a1:a5:6e:19:60:2b:e6: d7:d8:d7:4b:a9:8d:3c:5b:5f:03:ba:45:95:5b:e7: 98:1c:14:f2:b0:e8:93:fa:1e:f4:05:cb:7a:07:e8: 60:46:a3:6a:1d:de:a6:6d:7b:c5:80:8e:81:11:35: 1a:71:f8:b4:b9:21:b7:93:9f:23:ea:ec:d5:d2:9e: d6:4f:10:fa:04:21:e4:6b:9f:5e:47:cf:62:cf:4b: 88:ce:d4:72:a2:73:79:d6:ed:85:20:e7:22:9c:f7: 7e:68:90:2a:d4:2d:f1:d5:47:39:95:a0:02:fc:a9: 1f:1e:21:0a:d2:09:e9:44:96:75:8b:2c:9e:6a:87: 01:ac:43:b4:ea:1a:2f:1f:c3:9b:32:f7:6f:fe:bd: 39:01:34:1a:43:40:71:81:04:71:a1:f9:b4:02:9d: 54:ce:f0:de:d3:e9:f4:6d:f5:59:cb:25:55:79:21: 48:9c:de:6d:2e:e6:61:4e:e4:01:55:d8:b1:dc:e6: 0b:df:45:1a:1b:df:7e:c8:1d:b5:f0:18:42:b4:43: 3f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B8:99:3F:47:78:AB:37:DC:FB:88:55:72:FC:8D:93:27:6C:73:FB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yriZP0d4qzfc-4hVcvyNkydsc_s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.30.0/24 Signature Algorithm: sha256WithRSAEncryption 73:e8:57:90:5e:40:4d:35:03:47:58:db:70:83:54:bb:fc:42: a9:19:e1:92:fa:88:0c:73:c4:40:38:e0:86:ae:2f:7c:4d:8b: db:fc:3f:38:58:9f:c4:7d:3e:8c:fc:03:27:08:35:cf:cb:a8: 31:6b:3c:78:e2:07:c2:82:c5:c6:9e:6c:76:2d:ed:1c:79:d7: 99:fe:af:dd:02:3b:e1:f4:ed:80:84:2e:9a:a6:64:b0:27:03: 38:f0:2b:5f:41:9f:8e:66:57:bc:87:cd:5c:31:09:eb:cc:2e: 8b:c0:9b:99:7c:2a:44:79:5c:f1:47:b7:e6:44:66:b7:25:f9: 22:33:f4:de:51:63:c0:2f:f3:f4:f6:c4:3a:b5:30:96:f7:b8: 06:d0:ca:46:59:ee:42:5c:60:02:41:9c:2c:d1:d2:4f:0d:76: 07:ba:48:c3:6f:de:c4:04:89:22:8e:a1:3e:c8:19:03:fe:ba: 65:e4:79:74:b2:3a:53:5a:db:e4:fe:6c:50:26:4b:9e:f5:15: 7e:18:de:81:d4:1a:a3:1f:5e:39:e0:54:45:b2:1e:81:77:89: 7c:80:c3:a9:83:6f:11:2f:fd:f3:10:32:dd:3f:2f:c8:54:df: c7:49:d3:75:70:6e:f3:54:f4:47:6a:60:fb:56:e3:ff:17:b9: a1:8d:7f:2d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjEzNTVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENBQjg5OTNGNDc3OEFC MzdEQ0ZCODg1NTcyRkM4RDkzMjc2QzczRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBX+jHvzJFmQUlOIdZyk6yCdWp94Z8zysydqJQ3ZJHQrjTnAZr a6YqqoUE9TXBPhJF20Q+oaVuGWAr5tfY10upjTxbXwO6RZVb55gcFPKw6JP6HvQF y3oH6GBGo2od3qZte8WAjoERNRpx+LS5IbeTnyPq7NXSntZPEPoEIeRrn15Hz2LP S4jO1HKic3nW7YUg5yKc935okCrULfHVRzmVoAL8qR8eIQrSCelElnWLLJ5qhwGs Q7TqGi8fw5sy92/+vTkBNBpDQHGBBHGh+bQCnVTO8N7T6fRt9VnLJVV5IUic3m0u 5mFO5AFV2LHc5gvfRRob337IHbXwGEK0Qz/RAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUyriZP0d4qzfc+4hVcvyNkydsc/swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3lyaVpQMGQ0cXpmYy00aFZjdnlOa3lkc2Nfcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABTx4wDQYJKoZIhvcNAQELBQADggEBAHPoV5BeQE01A0dY23CDVLv8QqkZ 4ZL6iAxzxEA44IauL3xNi9v8PzhYn8R9Poz8AycINc/LqDFrPHjiB8KCxcaebHYt 7Rx515n+r90CO+H07YCELpqmZLAnAzjwK19Bn45mV7yHzVwxCevMLovAm5l8KkR5 XPFHt+ZEZrcl+SIz9N5RY8Av8/T2xDq1MJb3uAbQykZZ7kJcYAJBnCzR0k8Ndge6 SMNv3sQEiSKOoT7IGQP+umXkeXSyOlNa2+T+bFAmS571FX4Y3oHUGqMfXjngVEWy HoF3iXyAw6mDbxEv/fMQMt0/L8hU38dJ03VwbvNU9EdqYPtW4/8XuaGNfy0= -----END CERTIFICATE-----Generated at Fri Oct 24 13:42:47 2025 by rpki-client