$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nzQMD1nEF2UpNJWtMsbvxf1g5o8.roa File: nzQMD1nEF2UpNJWtMsbvxf1g5o8.roa (raw, json) Hash identifier: 55qhULe01oaLYFj7rmjasCVzFkux1cD2CxF3Xu9ePa8= Subject key identifier: 9F:34:0C:0F:59:C4:17:65:29:34:95:AD:32:C6:EF:C5:FD:60:E6:8F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0ED2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nzQMD1nEF2UpNJWtMsbvxf1g5o8.roa Signing time: Tue 10 Jun 2025 11:09:10 +0000 ROA not before: Tue 10 Jun 2025 11:09:10 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.74.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3794 (0xed2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:09:10 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=9F340C0F59C41765293495AD32C6EFC5FD60E68F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:23:a9:08:6a:e8:a7:bd:98:a5:99:aa:61: 60:00:13:d4:01:70:b9:2f:2e:50:f2:f2:c4:04:a3: 9a:dd:a9:03:e1:93:5b:85:7d:16:de:90:7e:51:bb: c1:65:e1:82:1d:07:8d:a7:e0:85:00:a9:a3:25:c8: 98:7c:b1:61:27:e1:fd:8f:92:36:f0:17:a4:bd:2f: 18:2f:e1:3d:d1:94:2d:a4:55:64:e3:57:59:b2:14: ed:da:5b:bd:a7:3b:b4:6e:72:81:b9:89:38:2d:ba: fc:c8:35:95:f1:b2:a6:4b:bd:d6:86:9d:83:37:f8: 48:98:e3:dc:92:be:5e:19:6c:04:08:1c:75:05:1b: 24:00:b1:d9:45:f1:cb:89:61:27:77:dc:d3:68:6e: fc:20:bf:15:e2:b6:0e:05:28:e0:77:66:7e:34:17: 76:cc:2e:4b:53:58:e3:48:09:ea:43:08:8d:0b:20: 46:3f:9f:c8:d3:9d:6a:ff:e1:71:36:31:61:ff:c9: 9e:69:6b:75:e9:01:b8:3e:41:dc:27:60:d3:89:6d: 1a:01:b4:ff:59:ef:ba:51:d9:49:e3:f4:5e:67:1a: ef:90:03:77:ae:a6:68:f7:35:bf:18:26:57:0f:1a: 9d:1d:b5:3b:2d:71:3b:99:23:73:41:88:c0:be:21: ea:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:34:0C:0F:59:C4:17:65:29:34:95:AD:32:C6:EF:C5:FD:60:E6:8F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nzQMD1nEF2UpNJWtMsbvxf1g5o8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.208.0/21 Signature Algorithm: sha256WithRSAEncryption 00:2a:ed:39:1e:23:99:b0:ac:88:0e:8a:5c:00:b5:21:42:8a: 77:cd:de:45:4c:f4:96:62:96:18:50:a6:d7:5a:9b:75:5a:d2: a4:64:ac:aa:3b:5b:16:36:a1:ba:a6:00:ae:f9:40:d2:df:7f: 85:ff:aa:66:79:e2:39:b5:fa:07:57:37:69:de:0a:f7:7f:3e: 14:d7:d6:c9:ba:ff:b6:d0:dc:93:93:cb:4d:8e:c1:29:ae:91: e6:7e:dc:9b:c5:89:7e:9f:9d:62:c8:d9:98:f0:30:79:03:69: 6f:1a:56:b1:f0:ed:01:0a:18:48:d1:1b:de:b9:ce:79:3d:d1: e0:15:e7:0c:6d:45:19:7a:c9:ea:4a:e0:51:dc:11:6d:a2:b1: ee:d7:fc:37:bb:4e:2d:65:c8:85:7f:20:f9:d5:ea:c4:e4:18: 15:1b:e5:83:8b:06:0a:cf:2c:f3:a5:a6:bf:01:9d:7e:2f:22: a7:fc:20:22:b8:df:4e:f1:37:b1:e9:f8:dd:6e:97:02:08:1d: fc:9c:04:12:a9:69:a9:22:9f:bc:d8:05:05:23:84:9d:dc:93: 4a:b8:b5:26:7f:4c:de:40:c5:6c:4b:03:3f:0a:5a:bd:0f:a8: b8:5a:07:bd:57:37:e7:d7:57:cd:d2:d5:c5:68:2c:2e:a4:4f: 16:92:87:4e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDtIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA5MTBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDlGMzQwQzBGNTlDNDE3 NjUyOTM0OTVBRDMyQzZFRkM1RkQ2MEU2OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGLiOpCGrop72YpZmqYWAAE9QBcLkvLlDy8sQEo5rdqQPhk1uF fRbekH5Ru8Fl4YIdB42n4IUAqaMlyJh8sWEn4f2PkjbwF6S9Lxgv4T3RlC2kVWTj V1myFO3aW72nO7RucoG5iTgtuvzINZXxsqZLvdaGnYM3+EiY49ySvl4ZbAQIHHUF GyQAsdlF8cuJYSd33NNobvwgvxXitg4FKOB3Zn40F3bMLktTWONICepDCI0LIEY/ n8jTnWr/4XE2MWH/yZ5pa3XpAbg+QdwnYNOJbRoBtP9Z77pR2Unj9F5nGu+QA3eu pmj3Nb8YJlcPGp0dtTstcTuZI3NBiMC+IepBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnzQMD1nEF2UpNJWtMsbvxf1g5o8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L256UU1EMW5FRjJVcE5KV3RNc2J2eGYxZzVvOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBStAwDQYJKoZIhvcNAQELBQADggEBAAAq7TkeI5mwrIgOilwAtSFCinfN 3kVM9JZilhhQptdam3Va0qRkrKo7WxY2obqmAK75QNLff4X/qmZ54jm1+gdXN2ne Cvd/PhTX1sm6/7bQ3JOTy02OwSmukeZ+3JvFiX6fnWLI2ZjwMHkDaW8aVrHw7QEK GEjRG965znk90eAV5wxtRRl6yepK4FHcEW2ise7X/De7Ti1lyIV/IPnV6sTkGBUb 5YOLBgrPLPOlpr8BnX4vIqf8ICK4307xN7Hp+N1ulwIIHfycBBKpaakin7zYBQUj hJ3ck0q4tSZ/TN5AxWxLAz8KWr0PqLhaB71XN+fXV83S1cVoLC6kTxaSh04= -----END CERTIFICATE-----Generated at Thu Jul 3 15:57:53 2025 by rpki-client