$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pwNALMMH7ZznJxhaHCWhxtqEqL4.roa File: pwNALMMH7ZznJxhaHCWhxtqEqL4.roa (raw, json) Hash identifier: Qg+k+so2+plrcd2nRUxWRGioGWZrbwMrCjeCYv3LhOk= Subject key identifier: A7:03:40:2C:C3:07:ED:9C:E7:27:18:5A:1C:25:A1:C6:DA:84:A8:BE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F6A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pwNALMMH7ZznJxhaHCWhxtqEqL4.roa Signing time: Tue 10 Jun 2025 11:32:31 +0000 ROA not before: Tue 10 Jun 2025 11:32:31 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3946 (0xf6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:31 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=A703402CC307ED9CE727185A1C25A1C6DA84A8BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:82:1f:3a:6b:1a:f4:70:16:a8:69:8d:16: 06:84:ab:bf:a0:10:6e:78:70:ff:a7:cb:4d:ee:76: 79:7c:1b:22:77:27:ba:de:1b:e1:54:a9:89:c5:fc: 82:71:91:9b:b5:fc:a5:17:cd:91:19:aa:58:41:67: d3:c8:f5:3b:bf:1e:a6:50:09:26:e4:5e:4d:c6:e8: aa:1f:8e:81:ef:7a:7c:bb:5a:7e:c1:cd:d5:f9:48: b0:2e:64:37:f7:43:0b:86:82:6e:04:3a:6b:ce:5d: 40:7d:33:78:03:a6:73:09:b3:74:4e:97:3d:b8:a1: b5:d7:a7:d7:41:c6:92:5a:e4:eb:74:ea:e3:b9:6c: 4a:e4:0c:0d:40:22:d7:c1:88:d7:21:e8:75:93:63: e8:f4:8a:67:94:98:0f:3f:fd:db:2d:df:42:f8:16: 7d:d6:d8:60:28:01:95:49:7b:37:a7:81:a9:57:7c: b3:0d:b1:72:14:70:6a:5d:5e:4d:55:21:5f:e8:d6: 54:e5:ca:df:66:1c:7f:0e:49:d6:34:c6:6a:48:c9: 72:e5:a2:68:d0:ea:57:5c:21:d8:ed:21:f1:c2:9d: 32:1f:69:94:68:b1:9a:88:4b:3a:f0:4b:f1:88:05: 4b:77:ff:ff:53:42:45:7e:42:c2:73:ae:f9:86:b3: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:03:40:2C:C3:07:ED:9C:E7:27:18:5A:1C:25:A1:C6:DA:84:A8:BE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pwNALMMH7ZznJxhaHCWhxtqEqL4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.62.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:05:49:92:b5:be:34:21:d3:86:00:10:83:ac:84:8b:a7:42: 33:d3:a9:37:79:23:a5:30:2f:78:bc:59:71:0a:a7:22:29:2a: 74:f5:77:a1:f4:25:eb:bf:29:1f:f6:5a:98:14:f0:0b:d2:6a: 31:92:24:59:93:7b:fa:dd:11:e1:f3:82:e0:f0:2a:72:4e:ae: 64:53:91:27:6c:ed:b2:12:51:a6:42:fd:3d:48:59:2c:7d:f8: dd:cb:8f:66:6d:3b:08:e1:ed:8b:c0:6b:93:94:f0:f2:e8:c3: 33:8f:ce:b3:38:ae:0a:0b:54:7e:47:e6:cd:f5:51:c4:94:67: 62:10:0d:df:ed:88:e0:8a:27:2b:c5:f8:db:e4:da:c9:73:b1: 27:57:3e:67:3b:07:37:31:8a:4e:07:2e:c8:3b:00:79:63:bd: 8c:e1:a4:a2:f2:ba:99:e5:b3:fb:af:c3:a1:ce:08:9f:f0:1d: e3:87:20:fe:1b:66:22:8b:8d:9e:0e:90:c4:f8:81:85:58:00: d9:ac:17:bd:ef:24:f0:a0:18:d0:63:b3:56:4f:8f:58:05:f3: ed:71:1d:81:7f:57:50:30:a3:e9:40:b4:c9:fc:df:17:c1:cb: 24:ea:00:d0:54:c8:8d:0e:50:ea:20:a1:92:59:ad:37:dc:d3: 87:75:14:fb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMzFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEE3MDM0MDJDQzMwN0VE OUNFNzI3MTg1QTFDMjVBMUM2REE4NEE4QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpDYIfOmsa9HAWqGmNFgaEq7+gEG54cP+ny03udnl8GyJ3J7re G+FUqYnF/IJxkZu1/KUXzZEZqlhBZ9PI9Tu/HqZQCSbkXk3G6KofjoHveny7Wn7B zdX5SLAuZDf3QwuGgm4EOmvOXUB9M3gDpnMJs3ROlz24obXXp9dBxpJa5Ot06uO5 bErkDA1AItfBiNch6HWTY+j0imeUmA8//dst30L4Fn3W2GAoAZVJezengalXfLMN sXIUcGpdXk1VIV/o1lTlyt9mHH8OSdY0xmpIyXLlomjQ6ldcIdjtIfHCnTIfaZRo sZqISzrwS/GIBUt3//9TQkV+QsJzrvmGs3m3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUpwNALMMH7ZznJxhaHCWhxtqEqL4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3B3TkFMTU1IN1p6bkp4aGFIQ1doeHRxRXFMNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0j4wDQYJKoZIhvcNAQELBQADggEBAC0FSZK1vjQh04YAEIOshIunQjPT qTd5I6UwL3i8WXEKpyIpKnT1d6H0Jeu/KR/2WpgU8AvSajGSJFmTe/rdEeHzguDw KnJOrmRTkSds7bISUaZC/T1IWSx9+N3Lj2ZtOwjh7YvAa5OU8PLowzOPzrM4rgoL VH5H5s31UcSUZ2IQDd/tiOCKJyvF+Nvk2slzsSdXPmc7Bzcxik4HLsg7AHljvYzh pKLyupnls/uvw6HOCJ/wHeOHIP4bZiKLjZ4OkMT4gYVYANmsF73vJPCgGNBjs1ZP j1gF8+1xHYF/V1Awo+lAtMn83xfByyTqANBUyI0OUOogoZJZrTfc04d1FPs= -----END CERTIFICATE-----Generated at Thu Jul 3 12:29:47 2025 by rpki-client