$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LwAVA21B2FzWIKIfRJCQhQ3SpOY.roa File: LwAVA21B2FzWIKIfRJCQhQ3SpOY.roa (raw, json) Hash identifier: qCVKcFkSRDbnsL3xBrHv8eI4UmAJTbs1FzdDN/ovTPM= Subject key identifier: 2F:00:15:03:6D:41:D8:5C:D6:20:A2:1F:44:90:90:85:0D:D2:A4:E6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F76 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LwAVA21B2FzWIKIfRJCQhQ3SpOY.roa Signing time: Tue 10 Jun 2025 11:32:37 +0000 ROA not before: Tue 10 Jun 2025 11:32:37 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 219.114.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3958 (0xf76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:37 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=2F0015036D41D85CD620A21F449090850DD2A4E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:35:ab:f6:0c:5a:f7:53:2a:82:44:fc:03:b3: 20:25:41:d3:ea:ab:c5:7b:7f:68:98:3f:12:80:cf: a4:0d:e2:2f:4f:1b:3e:88:67:b7:85:d7:d4:dd:17: da:f8:ca:c5:05:f4:59:8d:1c:d0:75:dc:1e:f1:55: f1:85:70:69:cb:e1:30:0a:85:d0:6d:0a:b1:0d:64: a9:b4:78:97:b6:50:aa:97:02:f1:46:35:35:33:69: e1:f9:11:8e:99:c0:f7:74:ed:0c:5e:13:68:bb:28: ca:3f:80:f5:9a:dd:ac:f6:0f:78:35:03:a7:46:cf: 27:93:5d:8a:c1:17:41:62:7c:ce:76:ec:73:6c:06: 35:e4:86:3b:e7:a7:8f:4e:eb:e8:00:c5:a1:26:48: 56:32:e2:e1:d4:56:d5:73:9b:c8:70:f6:05:94:5b: e5:98:c7:da:19:f2:54:00:3e:4c:5e:b1:c3:fa:74: f0:59:c9:47:cc:62:de:26:1c:04:20:8b:3d:99:e7: f1:63:16:66:cf:5f:df:68:c9:2d:1b:ab:b7:a9:00: b3:f8:c9:5f:18:ec:6b:8f:87:69:5b:0f:79:1a:31: 5e:1f:79:55:f1:1f:cb:ed:b3:bb:3b:3c:9c:8a:b2: 0b:4a:68:89:38:13:43:7f:d7:9d:63:50:92:79:4d: 48:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:00:15:03:6D:41:D8:5C:D6:20:A2:1F:44:90:90:85:0D:D2:A4:E6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LwAVA21B2FzWIKIfRJCQhQ3SpOY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.164.0/22 Signature Algorithm: sha256WithRSAEncryption ba:b9:be:ab:5b:e2:ce:6e:4f:e2:ea:61:30:16:11:53:b2:1d: 38:c4:76:52:0b:ec:0f:46:68:b9:c0:00:49:23:9c:2d:a0:e9: 2d:e7:30:f1:cc:f9:e3:87:ca:6a:cd:4f:27:b4:b2:e3:4a:41: 0c:70:f6:c5:ca:14:01:fe:43:d1:d3:fb:2d:42:f5:b5:b5:f8: 17:3a:6f:4b:b8:09:d0:81:4d:60:9c:64:4e:3a:67:d8:68:f1: 2b:b5:46:0e:d1:67:cb:54:76:f9:92:bb:c1:f0:99:8c:1b:a3: b4:f2:92:a2:ac:54:28:00:eb:c0:a5:cb:4d:e2:79:0d:a5:e4: 01:72:d5:cd:f2:23:18:68:7f:67:b0:a0:3f:78:7f:31:6f:ee: fb:18:f7:d0:fc:a8:7e:43:2a:dc:3a:51:24:bb:37:38:9e:69: 44:04:8e:c0:5d:10:22:8c:0a:89:8e:1f:65:77:05:49:d9:2d: b1:7a:b8:97:ed:63:6a:d7:91:4b:82:37:5b:eb:b0:2e:b9:dc: d2:c3:70:ae:ba:90:be:5d:63:b2:12:a8:d3:9f:ff:66:ac:e1: 04:41:f7:46:f4:ca:3f:d5:ca:40:c5:a6:8e:78:36:14:c8:21: b0:65:a1:96:7a:cd:d9:58:34:e3:00:b9:d4:48:fb:75:b4:06: ec:4d:4a:ee -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD3YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMzdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDJGMDAxNTAzNkQ0MUQ4 NUNENjIwQTIxRjQ0OTA5MDg1MEREMkE0RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDyNav2DFr3UyqCRPwDsyAlQdPqq8V7f2iYPxKAz6QN4i9PGz6I Z7eF19TdF9r4ysUF9FmNHNB13B7xVfGFcGnL4TAKhdBtCrENZKm0eJe2UKqXAvFG NTUzaeH5EY6ZwPd07QxeE2i7KMo/gPWa3az2D3g1A6dGzyeTXYrBF0FifM527HNs BjXkhjvnp49O6+gAxaEmSFYy4uHUVtVzm8hw9gWUW+WYx9oZ8lQAPkxescP6dPBZ yUfMYt4mHAQgiz2Z5/FjFmbPX99oyS0bq7epALP4yV8Y7GuPh2lbD3kaMV4feVXx H8vts7s7PJyKsgtKaIk4E0N/151jUJJ5TUgVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULwAVA21B2FzWIKIfRJCQhQ3SpOYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0x3QVZBMjFCMkZ6V0lLSWZSSkNRaFEzU3BPWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbcqQwDQYJKoZIhvcNAQELBQADggEBALq5vqtb4s5uT+LqYTAWEVOyHTjE dlIL7A9GaLnAAEkjnC2g6S3nMPHM+eOHymrNTye0suNKQQxw9sXKFAH+Q9HT+y1C 9bW1+Bc6b0u4CdCBTWCcZE46Z9ho8Su1Rg7RZ8tUdvmSu8HwmYwbo7TykqKsVCgA 68Cly03ieQ2l5AFy1c3yIxhof2ewoD94fzFv7vsY99D8qH5DKtw6USS7NzieaUQE jsBdECKMComOH2V3BUnZLbF6uJftY2rXkUuCN1vrsC653NLDcK66kL5dY7ISqNOf /2as4QRB90b0yj/VykDFpo54NhTIIbBloZZ6zdlYNOMAudRI+3W0BuxNSu4= -----END CERTIFICATE-----Generated at Thu Jul 3 11:22:35 2025 by rpki-client