$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/GDOokuMzFMld3kaAD783IKSsTOQ.roa File: GDOokuMzFMld3kaAD783IKSsTOQ.roa (raw, json) Hash identifier: 8M1SSqAUpvmnUL59eyfgMPVB8/rib9CluW4ex2TSluI= Subject key identifier: 18:33:A8:92:E3:33:14:C9:5D:DE:46:80:0F:BF:37:20:A4:AC:4C:E4 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0310 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/GDOokuMzFMld3kaAD783IKSsTOQ.roa Signing time: Tue 01 Jul 2025 01:39:52 +0000 ROA not before: Tue 01 Jul 2025 01:39:52 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 9824 IP address blocks: 103.3.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 784 (0x310) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Jul 1 01:39:52 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=1833A892E33314C95DDE46800FBF3720A4AC4CE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:1c:b5:76:10:42:4f:7e:1d:52:d8:08:6a: 6a:34:d4:85:f5:34:62:53:b3:fa:7d:2a:4f:57:ca: 05:a2:87:d6:8b:65:25:df:52:84:31:a4:02:46:e8: be:95:8c:5a:77:06:9d:ba:23:7d:d7:81:50:f6:ad: fa:a4:b9:86:ed:37:4f:a8:94:9b:60:fa:87:91:db: b3:a9:f1:0b:3b:7d:3b:a6:fb:db:80:9e:cf:03:fe: 5d:69:24:54:56:42:d2:f6:58:5d:fe:ca:90:67:01: 02:85:7a:ec:f6:1d:a6:13:d3:cb:d3:c9:19:f9:ae: 0f:ee:d5:4e:39:5e:f5:fc:58:7f:fa:68:e2:d1:4c: 0b:4c:8e:21:3e:8d:71:ed:9b:2a:9d:5f:fb:b2:8b: 79:c8:b8:62:35:51:34:cf:d4:9b:fb:ed:76:4d:37: 52:5e:d0:ce:88:98:dd:0f:9f:4c:4d:ee:03:9b:16: 49:84:bf:e8:76:4f:12:36:fb:28:18:83:65:a5:35: 81:f3:d4:9b:91:47:6a:9e:f2:44:22:7f:d7:75:7c: 37:9c:3f:eb:40:3b:af:3c:3c:60:cb:2c:e8:7b:9f: bb:92:b3:97:17:93:e4:c1:ec:68:50:55:e8:68:f3: bd:b5:43:44:b3:de:a8:10:19:52:34:54:f1:b6:0e: 8a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:33:A8:92:E3:33:14:C9:5D:DE:46:80:0F:BF:37:20:A4:AC:4C:E4 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/GDOokuMzFMld3kaAD783IKSsTOQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.3.4.0/22 Signature Algorithm: sha256WithRSAEncryption d3:20:d5:3f:d7:ff:9e:72:99:87:29:ce:57:7f:65:8c:6b:a9: 5d:3f:53:81:02:fa:8c:a4:e1:a9:80:81:0e:eb:93:d8:35:2f: 72:18:18:2a:2d:43:22:cf:ab:1c:a3:7b:36:dc:90:04:cf:a0: e6:de:7b:68:4a:bc:2b:77:0f:ad:60:d8:9b:0e:30:ee:a8:a9: 34:3e:8d:72:21:d1:2c:57:e5:95:e7:5a:76:b7:68:04:0f:41: 61:17:2a:e3:2d:14:d9:ea:49:88:e8:e9:33:7d:19:79:d2:f2: 00:3c:8a:af:1c:47:8e:73:53:09:cb:a8:33:61:40:04:f7:c0: bf:24:9e:55:68:f6:58:b8:39:13:c7:81:78:28:8c:c4:d3:38: b6:58:5d:2f:28:a8:30:02:5a:dd:ff:c4:7f:64:e0:8b:8d:4a: f9:5a:36:5a:0a:56:62:62:88:73:51:80:20:5e:10:1a:6b:f5: cb:b6:5e:9b:53:5c:46:7d:bc:9f:16:30:90:9e:8d:1d:04:63: c0:67:f8:d4:b2:ac:a7:9e:53:2f:12:a2:e1:63:d9:8c:26:4e: cc:f9:05:18:84:c3:8b:3a:67:83:6b:e0:a6:b6:e2:a7:ca:b3: a9:26:1c:98:e2:5c:1b:fe:89:b0:fb:e8:1c:01:9a:4b:e7:58: a8:94:41:c4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA3MDEw MTM5NTJaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE4MzNBODkyRTMzMzE0 Qzk1RERFNDY4MDBGQkYzNzIwQTRBQzRDRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR0hy1dhBCT34dUtgIamo01IX1NGJTs/p9Kk9XygWih9aLZSXf UoQxpAJG6L6VjFp3Bp26I33XgVD2rfqkuYbtN0+olJtg+oeR27Op8Qs7fTum+9uA ns8D/l1pJFRWQtL2WF3+ypBnAQKFeuz2HaYT08vTyRn5rg/u1U45XvX8WH/6aOLR TAtMjiE+jXHtmyqdX/uyi3nIuGI1UTTP1Jv77XZNN1Je0M6ImN0Pn0xN7gObFkmE v+h2TxI2+ygYg2WlNYHz1JuRR2qe8kQif9d1fDecP+tAO688PGDLLOh7n7uSs5cX k+TB7GhQVeho8721Q0Sz3qgQGVI0VPG2Doq1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGDOokuMzFMld3kaAD783IKSsTOQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0dET29rdU16Rk1sZDNrYUFENzgzSUtTc1RPUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJnAwQwDQYJKoZIhvcNAQELBQADggEBANMg1T/X/55ymYcpzld/ZYxrqV0/ U4EC+oyk4amAgQ7rk9g1L3IYGCotQyLPqxyjezbckATPoObee2hKvCt3D61g2JsO MO6oqTQ+jXIh0SxX5ZXnWna3aAQPQWEXKuMtFNnqSYjo6TN9GXnS8gA8iq8cR45z UwnLqDNhQAT3wL8knlVo9li4ORPHgXgojMTTOLZYXS8oqDACWt3/xH9k4IuNSvla NloKVmJiiHNRgCBeEBpr9cu2XptTXEZ9vJ8WMJCejR0EY8Bn+NSyrKeeUy8SouFj 2YwmTsz5BRiEw4s6Z4Nr4Ka24qfKs6kmHJjiXBv+ibD76BwBmkvnWKiUQcQ= -----END CERTIFICATE-----Generated at Sat Jul 5 06:21:59 2025 by rpki-client