$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ARuNS1JzuEjE8mETc8UFjcSo4hc.roa File: ARuNS1JzuEjE8mETc8UFjcSo4hc.roa (raw, json) Hash identifier: wOeRVwdpfLwS8rXgEnFrmeftkx/JMuLozn+fua26UIk= Subject key identifier: 01:1B:8D:4B:52:73:B8:48:C4:F2:61:13:73:C5:05:8D:C4:A8:E2:17 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F1A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ARuNS1JzuEjE8mETc8UFjcSo4hc.roa Signing time: Tue 10 Jun 2025 11:20:19 +0000 ROA not before: Tue 10 Jun 2025 11:20:19 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.76.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3866 (0xf1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:20:19 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=011B8D4B5273B848C4F2611373C5058DC4A8E217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c2:ff:67:55:88:5c:14:db:14:fd:7b:d2:61: ed:e0:26:a6:e0:07:94:9b:ab:1f:e6:79:47:e5:a5: f8:42:26:88:32:01:9e:54:18:9a:99:48:70:a8:d1: bd:73:d9:c2:75:21:d7:ce:7e:c2:74:a4:d6:e2:99: 82:f0:4a:c6:92:a9:d6:01:60:5c:66:09:77:c0:37: eb:09:e8:70:1c:7f:2e:24:50:84:96:81:ff:79:7f: b5:31:2d:ad:0a:1d:b8:56:3e:02:a0:91:80:73:ae: d6:e7:91:ce:1a:ff:08:75:a8:be:a4:6e:7b:ef:5f: 85:50:ff:5b:3f:84:f0:78:bd:dc:1c:61:ce:57:57: 83:ff:4e:7e:31:5d:1b:1c:1e:5a:d5:58:23:8c:58: ed:cf:a2:e2:92:68:5c:b5:10:e4:60:1d:7a:c7:3b: 95:19:a6:89:3e:e0:ba:6e:65:8d:49:ad:87:d6:1e: 41:9a:7d:46:ea:4e:1c:a8:ce:01:13:81:c2:4e:03: ac:6d:52:7c:a8:38:7b:f1:ef:fa:3c:60:00:45:69: 49:8e:bf:d8:8c:a5:a2:6e:b3:eb:99:2b:17:dc:f8: cb:61:cb:46:7a:6b:f1:f3:95:ee:33:0f:07:cf:a0: 49:01:0a:66:78:3b:72:7e:7f:69:53:2c:26:09:35: 1b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1B:8D:4B:52:73:B8:48:C4:F2:61:13:73:C5:05:8D:C4:A8:E2:17 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ARuNS1JzuEjE8mETc8UFjcSo4hc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.84.0/22 Signature Algorithm: sha256WithRSAEncryption 15:67:a2:c9:2d:40:77:f9:ca:3d:37:64:c6:c4:a4:72:f6:49: 4e:12:e1:59:64:a4:5e:b4:6c:8b:ec:bb:aa:7d:9c:9d:e6:cc: 34:15:92:f7:4b:df:f4:87:64:73:7e:d9:d2:77:32:f9:42:6f: 5c:df:83:36:77:01:fb:9b:2f:95:7d:a5:f0:12:9e:c8:2d:cd: 46:1f:8a:ce:a2:3f:84:e7:d9:39:cb:ae:22:7b:24:1c:e1:41: d7:f6:8c:5a:11:ab:67:de:c1:dd:a9:04:1b:9d:a9:0f:0e:a1: 54:0a:4f:ae:41:b3:2b:69:ab:ce:0e:0b:50:7c:d8:b0:5d:c0: 77:e6:72:49:38:47:d7:01:34:1a:d8:84:8e:b4:15:de:81:e2: 0f:8a:f0:9c:67:ca:b3:32:f5:c9:13:12:e5:83:ec:ad:4e:91: d2:a2:d9:c6:8e:66:89:15:30:05:7a:c0:23:b8:43:50:40:5d: eb:78:d0:21:89:e9:f7:c9:b2:09:d1:51:8f:f0:52:a9:e9:a9: 18:d9:6d:3c:83:49:c8:cd:ed:c5:27:ae:72:ae:0a:1b:42:bf: 38:a6:84:5a:96:0a:6c:55:6d:88:da:d3:da:ac:08:e3:ff:c0: 42:b1:30:1c:ee:9d:0f:7b:2e:f6:c5:b9:c7:f1:66:cc:d0:eb: 1f:e9:57:53 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTIwMTlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDAxMUI4RDRCNTI3M0I4 NDhDNEYyNjExMzczQzUwNThEQzRBOEUyMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbwv9nVYhcFNsU/XvSYe3gJqbgB5Sbqx/meUflpfhCJogyAZ5U GJqZSHCo0b1z2cJ1IdfOfsJ0pNbimYLwSsaSqdYBYFxmCXfAN+sJ6HAcfy4kUISW gf95f7UxLa0KHbhWPgKgkYBzrtbnkc4a/wh1qL6kbnvvX4VQ/1s/hPB4vdwcYc5X V4P/Tn4xXRscHlrVWCOMWO3PouKSaFy1EORgHXrHO5UZpok+4LpuZY1JrYfWHkGa fUbqThyozgETgcJOA6xtUnyoOHvx7/o8YABFaUmOv9iMpaJus+uZKxfc+Mthy0Z6 a/Hzle4zDwfPoEkBCmZ4O3J+f2lTLCYJNRtJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUARuNS1JzuEjE8mETc8UFjcSo4hcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0FSdU5TMUp6dUVqRThtRVRjOFVGamNTbzRoYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTFQwDQYJKoZIhvcNAQELBQADggEBABVnosktQHf5yj03ZMbEpHL2SU4S 4VlkpF60bIvsu6p9nJ3mzDQVkvdL3/SHZHN+2dJ3MvlCb1zfgzZ3AfubL5V9pfAS nsgtzUYfis6iP4Tn2TnLriJ7JBzhQdf2jFoRq2fewd2pBBudqQ8OoVQKT65Bsytp q84OC1B82LBdwHfmckk4R9cBNBrYhI60Fd6B4g+K8JxnyrMy9ckTEuWD7K1OkdKi 2caOZokVMAV6wCO4Q1BAXet40CGJ6ffJsgnRUY/wUqnpqRjZbTyDScjN7cUnrnKu ChtCvzimhFqWCmxVbYja09qsCOP/wEKxMBzunQ97LvbFucfxZszQ6x/pV1M= -----END CERTIFICATE-----Generated at Thu Jul 3 15:50:46 2025 by rpki-client