$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pZnhB7UFqCBqbUnrLi_b9qtmowc.roa File: pZnhB7UFqCBqbUnrLi_b9qtmowc.roa (raw, json) Hash identifier: 0AKR0qV12TmjFfprFN9Gl31zs8FC8ykRA2s3SR5vIXc= Subject key identifier: A5:99:E1:07:B5:05:A8:20:6A:6D:49:EB:2E:2F:DB:F6:AB:66:A3:07 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E48 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pZnhB7UFqCBqbUnrLi_b9qtmowc.roa Signing time: Tue 10 Jun 2025 10:47:43 +0000 ROA not before: Tue 10 Jun 2025 10:47:43 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 219.114.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3656 (0xe48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:47:43 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=A599E107B505A8206A6D49EB2E2FDBF6AB66A307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:b8:a0:b3:3d:15:c4:4d:14:23:6d:42:f0: 5c:2f:10:38:d3:1a:e4:b3:5a:1e:ba:34:13:a0:a8: fb:81:09:b2:9b:9e:9f:0d:0b:6c:ce:90:98:df:39: 89:70:33:93:5d:33:60:79:45:15:8c:94:f5:be:9a: 09:b7:a3:e6:4f:81:bc:9e:62:fa:dc:56:8d:1c:96: 5b:37:4a:bd:0f:c0:0a:95:63:80:0b:05:42:8d:36: 8d:96:38:a4:65:31:9b:15:cc:29:46:df:b8:73:bf: ac:e0:e4:04:96:21:b7:ff:62:66:fd:b9:28:e9:51: 80:b2:e8:0e:85:86:64:bb:b6:3e:27:74:c7:ca:8f: 27:d2:69:9d:26:d9:98:48:d3:60:76:41:aa:7b:18: 09:db:65:34:c8:57:f8:d1:ac:0b:63:04:42:23:13: f3:a4:d6:7b:05:14:8a:92:f0:a4:66:53:a7:60:36: 51:91:53:af:1f:ba:40:5f:4c:8f:fd:3f:42:34:4e: 82:44:37:87:0b:83:65:e7:6f:88:ae:6d:16:f4:f6: 2d:22:35:80:ae:35:2d:b5:e1:48:9d:40:c5:ef:69: 6f:00:bd:36:6a:fa:68:25:0d:a8:38:89:20:25:11: 0c:08:5c:a9:b7:ca:22:c8:88:cc:f3:39:1e:0b:c4: af:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:99:E1:07:B5:05:A8:20:6A:6D:49:EB:2E:2F:DB:F6:AB:66:A3:07 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pZnhB7UFqCBqbUnrLi_b9qtmowc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.176.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:a8:e7:9e:0d:ac:e8:08:1c:bc:c2:ab:d5:8d:e8:15:5e:f3: b6:b1:df:23:51:3e:0a:6a:cc:f9:24:87:5c:f4:03:6b:71:f5: 0b:bf:39:c7:d5:ea:8c:29:c7:37:fa:5c:e2:a0:35:9d:62:ee: 92:70:dd:2c:bb:6e:53:f5:e7:af:70:38:dd:32:f0:ec:08:48: 6e:7d:2c:4c:d7:56:7c:d0:c1:80:19:8c:29:9c:8f:2b:c9:ae: 05:9f:29:44:34:63:46:9e:8e:00:5d:ac:5e:49:fd:63:22:71: 3a:28:d1:8b:1c:82:52:93:94:ef:03:e4:0f:70:47:01:d5:21: a9:4d:b6:7b:b0:08:6e:34:62:41:3f:7e:07:99:56:4c:8b:16: 5e:09:e0:15:93:8f:8a:73:64:63:7c:f0:02:7d:48:49:44:f1: 0c:da:7e:8f:c2:15:8d:29:9e:22:f9:ec:e2:62:6d:85:a5:12: ba:c8:aa:4a:7a:60:72:3e:30:d6:3a:db:f7:ae:d4:7c:c5:c3: d1:f7:bf:97:06:74:bc:73:25:66:d7:c1:03:da:8f:eb:61:53: 08:75:0b:65:fe:44:e5:1c:a1:78:47:0a:45:b0:6b:b9:0b:54: f4:6b:bd:d0:fb:4d:99:43:8a:f8:ae:ea:6d:8b:8f:62:6f:bf: 61:20:d5:e6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDkgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDQ3NDNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEE1OTlFMTA3QjUwNUE4 MjA2QTZENDlFQjJFMkZEQkY2QUI2NkEzMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7Origsz0VxE0UI21C8FwvEDjTGuSzWh66NBOgqPuBCbKbnp8N C2zOkJjfOYlwM5NdM2B5RRWMlPW+mgm3o+ZPgbyeYvrcVo0clls3Sr0PwAqVY4AL BUKNNo2WOKRlMZsVzClG37hzv6zg5ASWIbf/Ymb9uSjpUYCy6A6FhmS7tj4ndMfK jyfSaZ0m2ZhI02B2Qap7GAnbZTTIV/jRrAtjBEIjE/Ok1nsFFIqS8KRmU6dgNlGR U68fukBfTI/9P0I0ToJEN4cLg2Xnb4iubRb09i0iNYCuNS214UidQMXvaW8AvTZq +mglDag4iSAlEQwIXKm3yiLIiMzzOR4LxK+fAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUpZnhB7UFqCBqbUnrLi/b9qtmowcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3BabmhCN1VGcUNCcWJVbnJMaV9iOXF0bW93Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbcrAwDQYJKoZIhvcNAQELBQADggEBACuo554NrOgIHLzCq9WN6BVe87ax 3yNRPgpqzPkkh1z0A2tx9Qu/OcfV6owpxzf6XOKgNZ1i7pJw3Sy7blP1569wON0y 8OwISG59LEzXVnzQwYAZjCmcjyvJrgWfKUQ0Y0aejgBdrF5J/WMicToo0YscglKT lO8D5A9wRwHVIalNtnuwCG40YkE/fgeZVkyLFl4J4BWTj4pzZGN88AJ9SElE8Qza fo/CFY0pniL57OJibYWlErrIqkp6YHI+MNY62/eu1HzFw9H3v5cGdLxzJWbXwQPa j+thUwh1C2X+ROUcoXhHCkWwa7kLVPRrvdD7TZlDiviu6m2Lj2Jvv2Eg1eY= -----END CERTIFICATE-----Generated at Thu Jul 3 18:10:50 2025 by rpki-client