$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/f43ZoWcfE_ME78LtIaekI1C-I7U.roa File: f43ZoWcfE_ME78LtIaekI1C-I7U.roa (raw, json) Hash identifier: 6X2HC6gxExYsYtRIKIJ5oFZrOdezWjrFoDkTHp4wa7I= Subject key identifier: 7F:8D:D9:A1:67:1F:13:F3:04:EF:C2:ED:21:A7:A4:23:50:BE:23:B5 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 01BB Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/f43ZoWcfE_ME78LtIaekI1C-I7U.roa Signing time: Tue 01 Jul 2025 01:34:38 +0000 ROA not before: Tue 01 Jul 2025 01:34:38 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 2497 IP address blocks: 220.208.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Jul 1 01:34:38 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=7F8DD9A1671F13F304EFC2ED21A7A42350BE23B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a6:a2:98:c3:b4:ae:86:c7:2f:cb:04:7a:0d: 82:3f:c9:54:c4:ce:10:9c:f4:2f:08:ce:2b:78:84: eb:6f:d9:5a:42:f1:f6:00:8d:c3:83:29:47:e0:79: f9:7b:c3:9f:e5:45:7b:f3:f6:24:f7:c9:cd:ca:50: e8:55:99:46:78:02:93:4e:2a:b8:84:af:f9:17:02: 1b:f1:04:51:98:26:a9:10:9e:3e:3c:19:6c:66:18: 17:07:21:f1:2a:96:08:34:f5:d9:9c:1c:56:08:21: 28:f6:fe:b3:d9:46:e8:25:de:85:57:d5:36:47:19: c0:2e:89:5f:cb:c3:7b:9c:b1:9f:0c:85:65:1b:a7: 21:08:03:48:88:71:c4:98:d6:fa:43:e5:d8:7b:95: 86:7c:70:f4:fb:a8:1b:9a:bf:b8:06:c0:b4:59:e7: 0e:82:0b:d9:54:9b:15:14:b0:5a:73:ee:6f:c5:a0: 98:2c:cc:3a:8f:38:2e:8e:c7:ff:9f:9a:c3:a2:26: 17:45:64:c8:88:47:df:93:5c:e1:dc:e5:42:2d:e3: 5b:92:d8:4b:53:df:24:1f:93:b4:a8:da:f1:d0:ea: 9a:b1:a8:c2:87:b2:25:c8:a7:93:d3:36:f5:d3:00: 57:eb:9b:03:cc:32:4d:7c:1f:f0:aa:e7:78:ea:7a: d6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8D:D9:A1:67:1F:13:F3:04:EF:C2:ED:21:A7:A4:23:50:BE:23:B5 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/f43ZoWcfE_ME78LtIaekI1C-I7U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.208.192.0/19 Signature Algorithm: sha256WithRSAEncryption 1d:1e:46:33:30:c1:02:d7:d8:f7:1f:cc:cd:9d:a4:4f:24:e5: 7b:1d:3e:5b:4d:d5:77:4c:ba:eb:05:90:9f:0c:13:7d:7c:58: ab:ff:79:c0:b4:18:c1:d1:8d:46:8f:ec:26:ac:58:81:2f:b9: ec:cb:1f:66:87:d4:c2:e3:70:8d:82:77:41:f9:9d:11:df:10: 7c:bc:06:22:46:f9:e9:7c:79:f5:ab:84:05:59:55:34:be:6a: ee:9e:e1:01:40:31:8b:6c:2d:83:4c:f0:ed:44:86:ce:cb:12: cd:77:e8:39:08:c8:54:c9:43:fd:ed:f0:59:2e:ff:84:67:44: 53:a2:43:10:e8:74:38:4f:5a:8f:0e:2a:7b:98:12:67:37:bb: 66:94:52:1e:9b:bb:96:58:e7:39:ed:46:a2:33:51:94:7d:b4: de:10:80:c5:ac:9f:33:04:99:52:87:b6:dc:35:70:d7:e9:bd: 20:ab:f3:31:1d:2f:f2:b2:f2:1c:39:d2:c0:1a:84:6b:71:2d: 26:ae:02:58:72:8d:61:17:8d:7a:ae:07:50:ea:2a:c8:0b:3f: 0b:0b:29:95:c3:f5:14:4b:b3:f0:77:77:c7:1a:63:d0:ae:50: a4:55:d5:b7:8c:85:0f:a0:7c:7f:94:c3:78:37:bb:32:ca:e6: e7:8d:c2:e1 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA3MDEw MTM0MzhaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdGOEREOUExNjcxRjEz RjMwNEVGQzJFRDIxQTdBNDIzNTBCRTIzQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+pqKYw7SuhscvywR6DYI/yVTEzhCc9C8Izit4hOtv2VpC8fYA jcODKUfgefl7w5/lRXvz9iT3yc3KUOhVmUZ4ApNOKriEr/kXAhvxBFGYJqkQnj48 GWxmGBcHIfEqlgg09dmcHFYIISj2/rPZRugl3oVX1TZHGcAuiV/Lw3ucsZ8MhWUb pyEIA0iIccSY1vpD5dh7lYZ8cPT7qBuav7gGwLRZ5w6CC9lUmxUUsFpz7m/FoJgs zDqPOC6Ox/+fmsOiJhdFZMiIR9+TXOHc5UIt41uS2EtT3yQfk7So2vHQ6pqxqMKH siXIp5PTNvXTAFfrmwPMMk18H/Cq53jqetb3AgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUf43ZoWcfE/ME78LtIaekI1C+I7UwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvZjQzWm9XY2ZFX01FNzhMdElhZWtJMUMtSTdVLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BdzQwDANBgkqhkiG9w0BAQsFAAOCAQEAHR5GMzDBAtfY9x/MzZ2kTyTlex0+W03V d0y66wWQnwwTfXxYq/95wLQYwdGNRo/sJqxYgS+57MsfZofUwuNwjYJ3QfmdEd8Q fLwGIkb56Xx59auEBVlVNL5q7p7hAUAxi2wtg0zw7USGzssSzXfoOQjIVMlD/e3w WS7/hGdEU6JDEOh0OE9ajw4qe5gSZze7ZpRSHpu7lljnOe1GojNRlH203hCAxayf MwSZUoe23DVw1+m9IKvzMR0v8rLyHDnSwBqEa3EtJq4CWHKNYReNeq4HUOoqyAs/ CwsplcP1FEuz8Hd3xxpj0K5QpFXVt4yFD6B8f5TDeDe7Msrm543C4Q== -----END CERTIFICATE-----Generated at Thu Jul 3 18:02:35 2025 by rpki-client