$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oJMI3Lho0wiKg6w_lfSXhH4kjOY.roa File: oJMI3Lho0wiKg6w_lfSXhH4kjOY.roa (raw, json) Hash identifier: GbdCTXuORUkHtEEeozXzy02msuZg3O9+wqZN7UxRCNw= Subject key identifier: A0:93:08:DC:B8:68:D3:08:8A:83:AC:3F:95:F4:97:84:7E:24:8C:E6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E47 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oJMI3Lho0wiKg6w_lfSXhH4kjOY.roa Signing time: Tue 10 Jun 2025 10:47:43 +0000 ROA not before: Tue 10 Jun 2025 10:47:43 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.76.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3655 (0xe47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:47:43 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=A09308DCB868D3088A83AC3F95F497847E248CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:86:8f:ef:d7:54:07:d9:c4:d8:2f:aa:a6: d5:7f:21:ec:37:63:47:a6:dd:ac:55:4e:78:3d:e7: 79:7a:84:55:c7:15:3d:c9:76:42:79:7a:d9:5b:26: 76:99:34:87:d9:55:d1:0d:98:6e:3f:32:c8:63:55: b2:f8:7a:24:b1:c6:8c:b4:8a:2a:8d:7c:46:9a:12: ed:47:3f:e3:93:a8:d4:2d:28:a4:bc:d0:47:29:e4: b6:c9:08:6c:32:b6:e8:8d:69:2d:9c:96:bc:54:81: ac:72:b6:0e:d6:62:e4:93:4c:a5:1d:74:b7:e0:bc: 9a:55:88:dd:64:65:b3:39:45:c5:85:18:65:68:b1: 5a:23:b0:c0:82:0f:45:a0:58:14:d2:bf:5d:39:ea: ae:59:5b:5c:00:9a:29:da:06:31:ad:56:27:fb:62: 16:d8:7d:4e:bd:94:dc:aa:a5:64:a9:91:2e:25:01: 9d:68:c8:c3:c5:f0:9e:00:6e:0b:48:2c:c0:7b:2b: d6:68:48:fd:ea:77:91:dc:68:fd:fa:63:6e:b8:c3: ba:55:9f:dc:e7:8f:fa:d3:17:27:43:aa:42:5d:05: 93:fb:2e:23:a1:2b:dd:36:7c:59:c6:b3:cc:bc:cc: e1:43:ee:3f:05:60:18:b4:b6:b0:47:f9:17:d6:a1: a2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:93:08:DC:B8:68:D3:08:8A:83:AC:3F:95:F4:97:84:7E:24:8C:E6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oJMI3Lho0wiKg6w_lfSXhH4kjOY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.224.0/23 Signature Algorithm: sha256WithRSAEncryption e2:7a:aa:6c:df:85:d0:f8:03:59:49:97:73:3e:ae:16:d1:77: f0:72:22:f6:d1:c0:6c:ac:a1:b0:a6:71:55:a9:e5:83:77:f1: 7a:06:8c:88:46:99:05:35:12:03:71:30:90:a4:ad:7c:d2:06: ae:cd:b3:9f:69:0c:6a:77:8a:3b:87:9e:8c:8e:29:88:54:f0: b3:c3:c9:db:48:58:11:db:92:c4:8b:be:31:44:f3:9f:e7:87: 19:9f:d2:04:fd:ab:45:8e:26:ad:f7:82:99:aa:16:76:42:74: b6:cd:71:c7:21:e6:64:96:f7:e4:2a:29:c1:15:1d:13:54:a0: c4:92:f1:b1:12:f8:1d:2f:1f:54:71:71:ef:4b:3c:b1:02:52: 4b:0b:c5:3f:83:59:c6:59:a6:8c:cc:21:23:78:15:1c:a0:91: 52:7f:92:60:70:b7:cf:6c:16:6d:19:c3:d8:5e:ad:37:3d:45: df:c0:50:a5:a0:b2:f0:61:57:59:11:f9:f7:ca:08:fd:fa:ee: 05:13:76:5d:01:59:51:b5:72:39:30:7f:79:8d:b6:94:22:9b: c2:7f:07:b9:14:ae:3d:e6:03:3a:fc:84:50:42:36:db:cc:20: 3e:42:02:02:0b:d5:72:03:37:2a:9f:74:a9:23:67:f2:f5:4b: 00:2b:f8:47 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDQ3NDNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEEwOTMwOERDQjg2OEQz MDg4QTgzQUMzRjk1RjQ5Nzg0N0UyNDhDRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzVYaP79dUB9nE2C+qptV/Iew3Y0em3axVTng953l6hFXHFT3J dkJ5etlbJnaZNIfZVdENmG4/MshjVbL4eiSxxoy0iiqNfEaaEu1HP+OTqNQtKKS8 0Ecp5LbJCGwytuiNaS2clrxUgaxytg7WYuSTTKUddLfgvJpViN1kZbM5RcWFGGVo sVojsMCCD0WgWBTSv1056q5ZW1wAminaBjGtVif7YhbYfU69lNyqpWSpkS4lAZ1o yMPF8J4AbgtILMB7K9ZoSP3qd5HcaP36Y264w7pVn9znj/rTFydDqkJdBZP7LiOh K902fFnGs8y8zOFD7j8FYBi0trBH+RfWoaK5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoJMI3Lho0wiKg6w/lfSXhH4kjOYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L29KTUkzTGhvMHdpS2c2d19sZlNYaEg0a2pPWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTOAwDQYJKoZIhvcNAQELBQADggEBAOJ6qmzfhdD4A1lJl3M+rhbRd/By IvbRwGysobCmcVWp5YN38XoGjIhGmQU1EgNxMJCkrXzSBq7Ns59pDGp3ijuHnoyO KYhU8LPDydtIWBHbksSLvjFE85/nhxmf0gT9q0WOJq33gpmqFnZCdLbNccch5mSW 9+QqKcEVHRNUoMSS8bES+B0vH1Rxce9LPLECUksLxT+DWcZZpozMISN4FRygkVJ/ kmBwt89sFm0Zw9herTc9Rd/AUKWgsvBhV1kR+ffKCP367gUTdl0BWVG1cjkwf3mN tpQim8J/B7kUrj3mAzr8hFBCNtvMID5CAgIL1XIDNyqfdKkjZ/L1SwAr+Ec= -----END CERTIFICATE-----Generated at Thu Jul 3 15:50:45 2025 by rpki-client