$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cyTL3QC6hQMCCD2Tsj3c4V9Qvdk.roa File: cyTL3QC6hQMCCD2Tsj3c4V9Qvdk.roa (raw, json) Hash identifier: xJcMZY0cokhTD5YfrtBxNAPg2n4qAajduAmgxLolN+4= Subject key identifier: 73:24:CB:DD:00:BA:85:03:02:08:3D:93:B2:3D:DC:E1:5F:50:BD:D9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EAA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cyTL3QC6hQMCCD2Tsj3c4V9Qvdk.roa Signing time: Tue 10 Jun 2025 11:00:44 +0000 ROA not before: Tue 10 Jun 2025 11:00:44 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3754 (0xeaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:00:44 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=7324CBDD00BA850302083D93B23DDCE15F50BDD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:82:1c:f3:fc:ac:0c:44:38:e6:9d:66:c9: 09:20:c5:19:ca:c4:a2:1d:a0:94:44:57:a0:c7:2f: 22:e5:fa:5b:0c:8a:24:7e:b2:d5:dc:cd:3d:38:0d: e6:6f:ab:73:9a:ef:a5:33:b0:b1:34:28:82:13:6e: 09:e5:43:2d:4d:8b:54:c1:a3:79:ea:67:52:c8:6a: c3:49:68:82:f8:9b:57:d9:a1:30:db:65:63:5f:11: 25:45:e4:af:df:6b:b8:b7:84:43:2e:ec:67:9d:55: f1:fe:58:e5:77:6e:c3:e6:29:fe:ea:89:ee:94:80: 91:88:60:d8:12:1c:37:bf:7c:da:b2:af:fd:39:dc: a5:88:ff:87:27:5c:54:76:32:db:ab:f8:d7:77:b6: 11:d6:aa:c1:42:13:59:6a:ec:47:1e:f5:c2:f9:a3: 92:a9:cd:3d:f9:39:43:a8:61:70:91:9d:80:e4:74: 1a:11:5d:07:bf:15:67:69:0c:cc:39:37:50:fc:b1: ed:a8:9e:b5:bc:66:0d:bc:de:f2:5f:40:dd:c5:c9: 1d:74:ad:eb:14:94:4d:47:54:52:fe:a4:a6:bc:a1: f4:5a:4b:d3:f7:9e:00:5e:d6:46:00:d1:cb:fa:17: fb:cb:ff:40:1e:92:04:c9:47:1d:0e:99:22:41:8f: e6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:24:CB:DD:00:BA:85:03:02:08:3D:93:B2:3D:DC:E1:5F:50:BD:D9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cyTL3QC6hQMCCD2Tsj3c4V9Qvdk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.74.0/23 Signature Algorithm: sha256WithRSAEncryption 62:8e:ec:51:cd:ea:c6:23:1f:1f:f5:ab:03:f8:ba:cb:c7:5b: 6f:0c:66:b4:b6:8a:81:05:05:5c:0b:19:c2:0a:cb:eb:ea:6b: 9d:f2:39:1c:ec:6b:5f:ac:17:11:13:91:d7:bc:ba:81:a2:a0: 5a:8f:1c:01:3f:b4:dd:c0:06:e4:98:04:7e:c1:23:e7:8d:2f: 4a:34:3a:0b:5c:49:11:ce:35:3c:ea:47:89:6a:2d:d5:66:73: f6:6e:d3:40:ab:ba:08:45:9d:37:e7:e4:11:58:e8:63:c4:65: a5:5c:26:59:02:c8:fa:74:fe:fc:e7:f9:31:3b:98:f2:a4:5e: f0:1e:41:df:4e:d3:b8:7c:8a:ca:e6:7b:80:8a:55:58:a7:aa: 98:b4:60:36:ed:83:5d:a3:0e:f0:78:a3:df:b4:f1:49:dd:00: c6:2f:bf:46:02:5f:ec:fb:8e:b0:b5:77:e3:d8:21:95:d6:21: df:0e:22:dc:5f:05:b0:be:29:d0:54:96:ee:8e:df:d5:5d:69: 9a:f6:72:9e:70:f6:6d:b5:d6:29:cd:3b:00:de:fd:13:22:db: 01:f1:cb:fe:4c:78:4e:23:35:7c:e6:4f:a8:05:77:c6:17:b3: 2d:e7:73:2a:6f:c8:b7:4a:84:72:6d:3b:63:e7:15:08:98:1d: 37:f3:4d:d3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTAwNDRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDczMjRDQkREMDBCQTg1 MDMwMjA4M0Q5M0IyM0REQ0UxNUY1MEJERDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChhYIc8/ysDEQ45p1myQkgxRnKxKIdoJREV6DHLyLl+lsMiiR+ stXczT04DeZvq3Oa76UzsLE0KIITbgnlQy1Ni1TBo3nqZ1LIasNJaIL4m1fZoTDb ZWNfESVF5K/fa7i3hEMu7GedVfH+WOV3bsPmKf7qie6UgJGIYNgSHDe/fNqyr/05 3KWI/4cnXFR2Mtur+Nd3thHWqsFCE1lq7Ece9cL5o5KpzT35OUOoYXCRnYDkdBoR XQe/FWdpDMw5N1D8se2onrW8Zg283vJfQN3FyR10resUlE1HVFL+pKa8ofRaS9P3 ngBe1kYA0cv6F/vL/0AekgTJRx0OmSJBj+ZnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcyTL3QC6hQMCCD2Tsj3c4V9QvdkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2N5VEwzUUM2aFFNQ0NEMlRzajNjNFY5UXZkay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0kowDQYJKoZIhvcNAQELBQADggEBAGKO7FHN6sYjHx/1qwP4usvHW28M ZrS2ioEFBVwLGcIKy+vqa53yORzsa1+sFxETkde8uoGioFqPHAE/tN3ABuSYBH7B I+eNL0o0OgtcSRHONTzqR4lqLdVmc/Zu00CrughFnTfn5BFY6GPEZaVcJlkCyPp0 /vzn+TE7mPKkXvAeQd9O07h8isrme4CKVVinqpi0YDbtg12jDvB4o9+08UndAMYv v0YCX+z7jrC1d+PYIZXWId8OItxfBbC+KdBUlu6O39VdaZr2cp5w9m211inNOwDe /RMi2wHxy/5MeE4jNXzmT6gFd8YXsy3ncypvyLdKhHJtO2PnFQiYHTfzTdM= -----END CERTIFICATE-----Generated at Thu Jul 3 12:30:39 2025 by rpki-client