$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iAcK1Ywz_ei4RZFpKI4-njHUoYA.roa File: iAcK1Ywz_ei4RZFpKI4-njHUoYA.roa (raw, json) Hash identifier: ZYoSUy/SLkV7PEzbnKZraneMfcv/Ld3CS/eDax9ms3U= Subject key identifier: 88:07:0A:D5:8C:33:FD:E8:B8:45:91:69:28:8E:3E:9E:31:D4:A1:80 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E89 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iAcK1Ywz_ei4RZFpKI4-njHUoYA.roa Signing time: Tue 10 Jun 2025 10:56:50 +0000 ROA not before: Tue 10 Jun 2025 10:56:50 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.79.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3721 (0xe89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:56:50 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=88070AD58C33FDE8B8459169288E3E9E31D4A180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:94:ab:6a:11:4d:72:b8:e7:fe:6c:67:79: 98:91:bf:2e:42:84:c7:65:8c:c7:24:c3:e5:3b:fa: 2c:ea:e2:d7:95:fe:c8:24:d4:a5:95:ad:ba:40:8d: 50:81:50:61:4f:e7:6c:3f:b1:42:93:cb:ec:65:35: 4e:b7:74:cb:2d:a4:57:f8:ba:31:7a:7f:81:1a:a6: 55:52:b6:2b:5b:df:26:4b:31:e8:6b:51:6c:d3:48: 92:af:89:cc:90:7e:89:ff:7b:eb:72:2b:9c:22:7a: 00:82:fe:68:2f:8c:29:f1:39:11:c4:d3:c4:b8:18: cd:99:64:51:18:64:b0:da:37:80:a0:c9:0b:34:21: 95:5f:78:07:3b:d3:63:79:19:40:de:35:81:81:7a: 2d:42:69:ae:f5:6f:0e:d6:f8:08:17:a1:45:3b:9a: 08:70:dc:b7:89:c6:0b:53:17:71:c5:5e:83:fd:01: 16:a4:f8:7e:1f:e8:58:3d:0f:02:51:b2:3c:5f:2f: 5c:af:da:89:73:d3:20:16:b9:62:90:f4:2e:f2:ba: 70:21:f5:8d:e1:ef:b5:91:84:7e:70:1b:4b:91:bb: 87:28:d9:44:a4:1a:0d:28:1a:a1:07:ea:c1:45:ff: 98:21:2f:87:96:84:b7:53:a1:89:76:e7:c3:ac:92: cd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:07:0A:D5:8C:33:FD:E8:B8:45:91:69:28:8E:3E:9E:31:D4:A1:80 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iAcK1Ywz_ei4RZFpKI4-njHUoYA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.220.0/22 Signature Algorithm: sha256WithRSAEncryption 03:13:c6:f3:8f:0b:9d:ca:5e:d4:73:a3:ac:5c:0c:09:78:ab: 2f:23:31:98:e3:66:2b:a8:f2:bb:fe:7a:17:0e:fa:bf:59:f4: 86:f4:6f:a1:3f:8c:02:6e:46:29:e7:0e:1e:17:85:de:07:67: 88:29:b4:6e:6d:85:3d:17:7b:75:52:3c:c3:8b:db:14:57:cc: d8:4d:1a:36:dc:3a:da:ce:78:9c:c7:0d:32:ce:4e:dc:f1:39: 80:e5:61:56:ca:8d:fa:97:41:db:cd:9b:a5:6c:57:44:a1:6c: 49:94:2a:24:4a:ff:86:12:28:8e:9b:56:e1:d0:95:7e:09:2f: 27:f8:6f:0e:ef:7e:45:fb:97:ba:59:3c:8a:02:6a:72:87:1d: 3c:2b:64:62:d8:56:d8:23:72:c2:3c:68:cd:10:66:1c:a4:51: f8:df:49:d0:26:08:c8:b1:d5:fd:e9:a3:ba:56:23:d7:98:e0: 4e:a7:9f:36:51:f6:c8:77:d3:54:56:10:4d:2e:7f:5c:af:d6: fb:fd:86:7a:cd:12:91:39:83:c3:0b:0d:d4:35:56:bc:a9:4c: 20:b6:3b:65:b8:c8:a1:61:06:20:6d:8c:05:30:eb:99:4a:57: 94:f5:39:7d:f8:86:e6:cf:61:8d:60:d2:43:6a:c6:4d:e0:06: 35:b7:35:b1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDokwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDU2NTBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDg4MDcwQUQ1OEMzM0ZE RThCODQ1OTE2OTI4OEUzRTlFMzFENEExODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLjZSrahFNcrjn/mxneZiRvy5ChMdljMckw+U7+izq4teV/sgk 1KWVrbpAjVCBUGFP52w/sUKTy+xlNU63dMstpFf4ujF6f4EaplVStitb3yZLMehr UWzTSJKvicyQfon/e+tyK5wiegCC/mgvjCnxORHE08S4GM2ZZFEYZLDaN4CgyQs0 IZVfeAc702N5GUDeNYGBei1Caa71bw7W+AgXoUU7mghw3LeJxgtTF3HFXoP9ARak +H4f6Fg9DwJRsjxfL1yv2olz0yAWuWKQ9C7yunAh9Y3h77WRhH5wG0uRu4co2USk Gg0oGqEH6sFF/5ghL4eWhLdToYl258Osks1BAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUiAcK1Ywz/ei4RZFpKI4+njHUoYAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2lBY0sxWXd6X2VpNFJaRnBLSTQtbmpIVW9ZQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT9wwDQYJKoZIhvcNAQELBQADggEBAAMTxvOPC53KXtRzo6xcDAl4qy8j MZjjZiuo8rv+ehcO+r9Z9Ib0b6E/jAJuRinnDh4Xhd4HZ4gptG5thT0Xe3VSPMOL 2xRXzNhNGjbcOtrOeJzHDTLOTtzxOYDlYVbKjfqXQdvNm6VsV0ShbEmUKiRK/4YS KI6bVuHQlX4JLyf4bw7vfkX7l7pZPIoCanKHHTwrZGLYVtgjcsI8aM0QZhykUfjf SdAmCMix1f3po7pWI9eY4E6nnzZR9sh301RWEE0uf1yv1vv9hnrNEpE5g8MLDdQ1 VrypTCC2O2W4yKFhBiBtjAUw65lKV5T1OX34hubPYY1g0kNqxk3gBjW3NbE= -----END CERTIFICATE-----Generated at Thu Jul 3 09:44:00 2025 by rpki-client