$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ll62mMCF6js-LTc0w1xY8DyyjQI.roa File: Ll62mMCF6js-LTc0w1xY8DyyjQI.roa (raw, json) Hash identifier: Mwm2724DK83EITU3afbgeSiSLg3LVoUdnvz4USTb4To= Subject key identifier: 2E:5E:B6:98:C0:85:EA:3B:3E:2D:37:34:C3:5C:58:F0:3C:B2:8D:02 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F64 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ll62mMCF6js-LTc0w1xY8DyyjQI.roa Signing time: Tue 10 Jun 2025 11:32:27 +0000 ROA not before: Tue 10 Jun 2025 11:32:27 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.79.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3940 (0xf64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:27 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=2E5EB698C085EA3B3E2D3734C35C58F03CB28D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:78:b2:38:64:92:3b:f6:12:83:b5:87:d8: 1d:10:20:1d:21:db:38:5e:50:3e:6d:92:36:a3:71: 3d:ef:ec:1a:0d:13:86:c2:a0:3c:df:b3:61:56:f1: 87:99:d0:f2:14:f2:ca:ce:1c:0e:33:e6:06:61:08: b5:c1:bd:9f:c0:db:f0:2f:9d:dc:32:24:65:06:5c: 95:58:86:cf:fa:82:2c:99:03:37:6e:c5:03:3b:be: a9:b9:15:e7:6c:b2:d2:14:e8:e8:d7:08:77:bf:81: c6:7b:1a:f9:5a:1e:ec:67:bf:e3:e4:4d:58:80:1b: 57:c7:b9:38:75:cf:21:27:56:d6:6b:bd:0c:69:3f: 9e:2f:ab:01:0b:6e:79:7a:74:1a:c2:11:65:bf:66: 68:53:54:19:d8:8e:f8:b5:bd:59:d1:0e:c9:c6:5e: dd:dc:39:45:b0:9d:a8:e4:fd:69:36:e2:7e:9d:77: 4c:7d:c3:e1:69:a5:fd:4a:25:5d:81:85:86:52:fc: 21:ad:c5:0c:33:75:86:21:0a:19:b0:ce:c7:d1:f0: 7a:5f:86:37:cb:bd:06:86:25:3b:a8:62:1a:c8:a3: d5:8f:b2:2e:8e:fb:a5:74:64:6b:b7:7f:5d:36:e5: 6d:5f:20:6e:70:b9:ef:d7:ad:20:28:11:45:0e:e5: 05:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5E:B6:98:C0:85:EA:3B:3E:2D:37:34:C3:5C:58:F0:3C:B2:8D:02 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ll62mMCF6js-LTc0w1xY8DyyjQI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.216.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:8e:32:0b:68:be:d4:e7:e5:bf:62:bf:f7:55:9a:df:60:45: 59:47:ce:6f:8c:bc:a2:9c:00:fb:46:cc:ec:e5:56:20:54:e7: 79:fd:5f:84:9e:89:6f:ce:78:01:23:d6:ef:f1:05:76:0a:67: 0d:d4:e4:c5:4b:0d:d1:54:e8:5a:60:de:61:fa:99:5b:a8:f8: 8a:34:db:45:e1:8f:68:8b:b4:bc:b9:5c:3a:90:78:7d:bb:75: d3:79:9e:8a:c2:13:96:6f:9f:33:e9:e9:6a:51:b1:fa:8d:55: b0:c7:7d:c8:28:03:90:07:27:3c:96:a1:a8:a3:d2:2c:92:4f: 5c:de:43:c7:01:b4:f9:1e:de:55:14:33:46:e5:f2:3d:3b:18: 00:ae:2e:3c:de:c0:11:9f:3d:2b:8d:b7:c3:a7:8b:ce:e0:5a: fb:9f:b9:27:29:f7:4a:c6:43:f2:bf:67:79:cb:ac:5b:c0:e8: 13:65:f2:78:43:2e:33:10:f2:80:22:0c:3e:61:70:35:53:04: 19:10:3c:8d:04:77:97:b5:a2:2d:41:e8:0e:75:be:d4:19:1b: 01:a5:4e:d9:b2:69:a0:dc:9b:39:17:1f:25:1d:bd:c4:96:dd: 44:89:82:26:40:de:87:c1:48:c7:e3:44:da:ba:d4:a8:88:79: 39:74:60:a0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD2QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMjdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDJFNUVCNjk4QzA4NUVB M0IzRTJEMzczNEMzNUM1OEYwM0NCMjhEMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDcHiyOGSSO/YSg7WH2B0QIB0h2zheUD5tkjajcT3v7BoNE4bC oDzfs2FW8YeZ0PIU8srOHA4z5gZhCLXBvZ/A2/AvndwyJGUGXJVYhs/6giyZAzdu xQM7vqm5FedsstIU6OjXCHe/gcZ7GvlaHuxnv+PkTViAG1fHuTh1zyEnVtZrvQxp P54vqwELbnl6dBrCEWW/ZmhTVBnYjvi1vVnRDsnGXt3cOUWwnajk/Wk24n6dd0x9 w+Fppf1KJV2BhYZS/CGtxQwzdYYhChmwzsfR8HpfhjfLvQaGJTuoYhrIo9WPsi6O +6V0ZGu3f1025W1fIG5wue/XrSAoEUUO5QWbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULl62mMCF6js+LTc0w1xY8DyyjQIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xsNjJtTUNGNmpzLUxUYzB3MXhZOER5eWpRSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT9gwDQYJKoZIhvcNAQELBQADggEBACuOMgtovtTn5b9iv/dVmt9gRVlH zm+MvKKcAPtGzOzlViBU53n9X4SeiW/OeAEj1u/xBXYKZw3U5MVLDdFU6Fpg3mH6 mVuo+Io020Xhj2iLtLy5XDqQeH27ddN5norCE5ZvnzPp6WpRsfqNVbDHfcgoA5AH JzyWoaij0iyST1zeQ8cBtPke3lUUM0bl8j07GACuLjzewBGfPSuNt8Oni87gWvuf uScp90rGQ/K/Z3nLrFvA6BNl8nhDLjMQ8oAiDD5hcDVTBBkQPI0Ed5e1oi1B6A51 vtQZGwGlTtmyaaDcmzkXHyUdvcSW3USJgiZA3ofBSMfjRNq61KiIeTl0YKA= -----END CERTIFICATE-----Generated at Thu Jul 3 09:42:16 2025 by rpki-client