$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SPSUTJCll0iTnWE-hchmPUczP8Q.roa File: SPSUTJCll0iTnWE-hchmPUczP8Q.roa (raw, json) Hash identifier: 5WAOpSW0gqq3HsoTLHgK1mE/7kumS+smgQn1IxjApBc= Subject key identifier: 48:F4:94:4C:90:A5:97:48:93:9D:61:3E:85:C8:66:3D:47:33:3F:C4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E9E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SPSUTJCll0iTnWE-hchmPUczP8Q.roa Signing time: Tue 10 Jun 2025 11:00:35 +0000 ROA not before: Tue 10 Jun 2025 11:00:35 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.75.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3742 (0xe9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:00:35 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=48F4944C90A59748939D613E85C8663D47333FC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:2e:09:c9:45:89:a6:9f:0b:da:e8:5b:83: 4c:41:11:7d:ef:63:3f:01:9e:c6:65:35:76:83:e7: 91:7a:63:96:65:9b:96:5e:06:9b:12:d6:7a:9b:90: 11:63:a3:06:ab:2e:3e:f5:85:e1:44:07:cd:fc:85: 62:95:b9:73:6f:a2:e5:e2:92:a7:e0:5c:53:1d:ba: c9:a1:8a:44:50:8e:11:e3:be:14:72:3f:1f:26:ab: 0a:81:8b:8c:0f:3f:d1:4b:19:d5:7a:75:26:08:a7: 89:0e:e1:ad:06:96:18:ee:3c:d1:a9:75:6d:b2:52: 16:8c:98:7d:2a:72:15:7e:85:e5:55:f2:fb:4e:59: 8a:54:ce:9c:66:a1:da:3d:3b:82:91:f2:b9:19:47: bc:f6:95:57:96:20:ff:4b:3f:4a:d0:63:90:75:59: 8e:c2:e3:f9:f4:46:32:e7:45:46:11:7e:a0:b5:55: 51:98:70:57:7b:49:d3:3a:8e:cd:6f:1f:18:90:00: 7a:56:19:f1:ac:ff:72:58:87:02:24:f4:39:18:77: 44:c4:8f:c3:f4:f8:1f:68:a6:97:dc:e9:41:53:b6: 17:37:d0:93:a4:6b:54:77:94:6e:57:f9:86:02:10: 6c:6e:d0:d7:df:6c:73:e0:65:bc:02:4c:52:71:2f: 44:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F4:94:4C:90:A5:97:48:93:9D:61:3E:85:C8:66:3D:47:33:3F:C4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SPSUTJCll0iTnWE-hchmPUczP8Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.190.0/23 Signature Algorithm: sha256WithRSAEncryption 17:1d:25:32:72:6c:b1:09:75:03:0e:1e:e2:55:64:46:23:ca: f3:02:ba:f2:35:dc:22:38:b0:8f:de:7c:21:71:3a:d7:17:ac: 21:1b:64:e2:ab:53:07:30:b8:c3:f1:1a:de:09:13:f2:22:b6: 38:67:82:85:aa:8a:21:35:4e:4b:90:94:d2:90:3e:a5:b5:49: 2d:4f:63:ee:96:55:b8:4a:bc:5d:6c:06:34:46:a9:17:f4:4e: 85:39:d6:21:89:54:9d:b6:d4:24:03:f8:2b:ed:a3:f1:11:80: 60:b4:8f:41:5e:fc:05:3b:80:56:99:9e:5f:b4:85:80:3c:af: 76:e7:58:e8:42:2f:80:6b:bc:9d:c0:a6:24:a0:7e:32:26:fa: 68:b2:be:f4:8b:81:1f:df:74:90:fa:3f:0b:0f:3b:ef:35:e0: 54:2c:ed:d5:16:cc:45:c3:93:6f:79:ab:0d:d5:b9:fc:d6:92: de:4d:2c:ba:78:5c:61:cf:2b:4d:f1:75:c4:17:dc:5f:2c:12: f4:5e:d5:ca:50:97:99:f6:76:bb:f9:da:ef:e6:d7:aa:8b:ed: aa:34:62:0a:ff:4c:b5:c4:8f:d0:0d:e0:3b:f2:c2:e4:a2:1e: aa:89:5e:f7:c7:36:dc:fb:a1:3b:19:e0:18:25:ec:06:47:b1: 31:ca:2d:bd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTAwMzVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDQ4RjQ5NDRDOTBBNTk3 NDg5MzlENjEzRTg1Qzg2NjNENDczMzNGQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCwS4JyUWJpp8L2uhbg0xBEX3vYz8BnsZlNXaD55F6Y5Zlm5Ze BpsS1nqbkBFjowarLj71heFEB838hWKVuXNvouXikqfgXFMdusmhikRQjhHjvhRy Px8mqwqBi4wPP9FLGdV6dSYIp4kO4a0GlhjuPNGpdW2yUhaMmH0qchV+heVV8vtO WYpUzpxmodo9O4KR8rkZR7z2lVeWIP9LP0rQY5B1WY7C4/n0RjLnRUYRfqC1VVGY cFd7SdM6js1vHxiQAHpWGfGs/3JYhwIk9DkYd0TEj8P0+B9oppfc6UFTthc30JOk a1R3lG5X+YYCEGxu0NffbHPgZbwCTFJxL0SNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSPSUTJCll0iTnWE+hchmPUczP8QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1NQU1VUSkNsbDBpVG5XRS1oY2htUFVjelA4US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS74wDQYJKoZIhvcNAQELBQADggEBABcdJTJybLEJdQMOHuJVZEYjyvMC uvI13CI4sI/efCFxOtcXrCEbZOKrUwcwuMPxGt4JE/IitjhngoWqiiE1TkuQlNKQ PqW1SS1PY+6WVbhKvF1sBjRGqRf0ToU51iGJVJ221CQD+Cvto/ERgGC0j0Fe/AU7 gFaZnl+0hYA8r3bnWOhCL4BrvJ3ApiSgfjIm+miyvvSLgR/fdJD6PwsPO+814FQs 7dUWzEXDk295qw3VufzWkt5NLLp4XGHPK03xdcQX3F8sEvRe1cpQl5n2drv52u/m 16qL7ao0Ygr/TLXEj9AN4DvywuSiHqqJXvfHNtz7oTsZ4Bgl7AZHsTHKLb0= -----END CERTIFICATE-----Generated at Thu Jul 3 12:30:28 2025 by rpki-client