$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NiKqkIXcSdEivZqNxMMUxCuqVKs.roa File: NiKqkIXcSdEivZqNxMMUxCuqVKs.roa (raw, json) Hash identifier: T4Uf2l4R/prd2w0BK1RRkzpoUPpXEfGk+vYtK1nCruc= Subject key identifier: 36:22:AA:90:85:DC:49:D1:22:BD:9A:8D:C4:C3:14:C4:2B:AA:54:AB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F60 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NiKqkIXcSdEivZqNxMMUxCuqVKs.roa Signing time: Tue 10 Jun 2025 11:32:25 +0000 ROA not before: Tue 10 Jun 2025 11:32:25 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.159.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3936 (0xf60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:25 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=3622AA9085DC49D122BD9A8DC4C314C42BAA54AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a6:d3:f4:22:c6:1f:7d:ea:15:6c:04:64:e0: dc:3c:69:4e:d5:57:3c:55:98:9d:2f:a0:4e:85:88: 3a:7e:9e:a6:0b:2f:ed:11:ee:21:83:35:d7:93:16: ec:45:bc:06:2f:3f:b0:9b:53:8a:ae:f2:9c:07:30: da:d4:ba:5c:e9:01:a5:9a:6a:65:12:9f:4c:bc:2c: c6:bb:53:87:a7:b4:e2:bf:54:f4:83:09:e0:cc:16: ca:91:7b:a7:5a:4b:d1:6f:25:be:ca:74:90:f7:6c: b5:9e:28:93:ee:f6:13:5e:f4:27:8c:93:ad:e2:c2: ad:10:2e:93:d3:d3:4d:cd:dd:8d:55:dd:18:4b:1d: b0:f3:5d:f1:b2:14:62:2d:df:f2:6c:97:b3:9a:f8: e1:c7:a0:3b:a5:5d:30:ea:5b:f3:20:ef:1d:ae:6c: e0:80:4a:ee:e8:36:81:c7:51:be:0d:0d:10:b5:c2: 0f:8d:fb:36:86:ba:a8:15:2b:d8:7e:a2:40:d5:63: 01:29:82:35:d1:77:a1:b1:e9:39:6a:c3:58:27:9a: 06:3f:85:e9:af:87:7f:e9:5d:cb:56:1a:a7:9a:86: ea:e5:a4:06:64:40:ab:0b:35:e5:fe:96:71:7a:7b: 60:ee:e5:bf:80:de:a5:8e:ff:ae:87:30:53:82:c4: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:22:AA:90:85:DC:49:D1:22:BD:9A:8D:C4:C3:14:C4:2B:AA:54:AB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NiKqkIXcSdEivZqNxMMUxCuqVKs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.60.0/23 Signature Algorithm: sha256WithRSAEncryption 35:92:d4:61:ca:a0:b3:e8:d0:a4:3b:02:98:54:64:7f:0f:07: c6:b4:fa:64:1c:aa:b5:eb:73:27:df:70:95:7c:18:ab:ed:67: 26:b2:53:3f:ba:92:06:6c:11:6f:ae:60:1e:ac:d8:69:02:25: 61:8b:1c:2b:f6:1f:75:6f:37:03:40:c5:0d:f9:73:cd:08:44: 5e:3f:5e:2d:9a:71:f5:9b:3c:22:b7:12:ce:8e:77:a8:9b:98: 22:ef:1a:c6:59:ed:9a:3a:38:e8:72:59:21:4c:8a:ee:f7:19: 0f:0c:eb:ae:a6:b7:9b:78:dd:38:ec:48:2f:09:bb:dd:44:2e: c2:73:37:21:b9:c4:3f:4f:f7:c4:a5:3a:01:0b:ce:8c:f0:39: 0f:b6:58:67:ca:66:b2:d0:0b:ab:70:09:ea:6a:c0:cf:11:9c: fe:75:2e:30:30:6a:ce:f6:ec:f6:25:69:0e:e6:36:b2:9a:9b: f1:12:61:61:bd:4c:57:14:97:ef:dd:4b:bf:58:3d:22:88:0e: 2e:60:53:a9:07:3e:bb:23:37:2b:8b:a5:ea:b1:86:e6:8d:cf: 18:5f:00:18:1f:6d:7e:2a:22:ef:6d:fa:0f:fd:b4:d3:c1:ce: d5:4e:26:0f:1b:e2:76:0d:c5:c8:e8:75:08:56:3d:65:95:95: 4e:b1:e4:83 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD2AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMjVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDM2MjJBQTkwODVEQzQ5 RDEyMkJEOUE4REM0QzMxNEM0MkJBQTU0QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlptP0IsYffeoVbARk4Nw8aU7VVzxVmJ0voE6FiDp+nqYLL+0R 7iGDNdeTFuxFvAYvP7CbU4qu8pwHMNrUulzpAaWaamUSn0y8LMa7U4entOK/VPSD CeDMFsqRe6daS9FvJb7KdJD3bLWeKJPu9hNe9CeMk63iwq0QLpPT003N3Y1V3RhL HbDzXfGyFGIt3/Jsl7Oa+OHHoDulXTDqW/Mg7x2ubOCASu7oNoHHUb4NDRC1wg+N +zaGuqgVK9h+okDVYwEpgjXRd6Gx6Tlqw1gnmgY/hemvh3/pXctWGqeahurlpAZk QKsLNeX+lnF6e2Du5b+A3qWO/66HMFOCxF13AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNiKqkIXcSdEivZqNxMMUxCuqVKswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L05pS3FrSVhjU2RFaXZacU54TU1VeEN1cVZLcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcnzwwDQYJKoZIhvcNAQELBQADggEBADWS1GHKoLPo0KQ7AphUZH8PB8a0 +mQcqrXrcyffcJV8GKvtZyayUz+6kgZsEW+uYB6s2GkCJWGLHCv2H3VvNwNAxQ35 c80IRF4/Xi2acfWbPCK3Es6Od6ibmCLvGsZZ7Zo6OOhyWSFMiu73GQ8M666mt5t4 3TjsSC8Ju91ELsJzNyG5xD9P98SlOgELzozwOQ+2WGfKZrLQC6twCepqwM8RnP51 LjAwas727PYlaQ7mNrKam/ESYWG9TFcUl+/dS79YPSKIDi5gU6kHPrsjNyuLpeqx huaNzxhfABgfbX4qIu9t+g/9tNPBztVOJg8b4nYNxcjodQhWPWWVlU6x5IM= -----END CERTIFICATE-----Generated at Thu Jul 3 15:47:50 2025 by rpki-client