$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-9JVuyuwj8i1N9v96p5ol2aEqpA.roa File: -9JVuyuwj8i1N9v96p5ol2aEqpA.roa (raw, json) Hash identifier: pjVjV8LCyRUSvoKH3WVHmPwXC/dAUUAMo2EdcTTWhyA= Subject key identifier: FB:D2:55:BB:2B:B0:8F:C8:B5:37:DB:FD:EA:9E:68:97:66:84:AA:90 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F38 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-9JVuyuwj8i1N9v96p5ol2aEqpA.roa Signing time: Tue 10 Jun 2025 11:24:37 +0000 ROA not before: Tue 10 Jun 2025 11:24:37 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.74.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3896 (0xf38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:37 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=FBD255BB2BB08FC8B537DBFDEA9E68976684AA90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b2:67:99:b2:dc:62:fe:74:53:26:f5:cc:46: 72:12:45:51:de:15:63:4b:d8:87:ec:c9:e0:11:63: 97:e6:7d:13:40:e0:02:e9:ac:27:9b:32:2d:36:f8: 1b:6c:bb:1e:7f:67:07:fc:60:39:6e:a0:d8:83:7d: d2:68:4d:fb:4f:23:14:e9:5e:de:55:6d:2d:63:f0: 45:16:99:a9:ad:71:14:e0:04:9a:55:d0:e7:43:35: 53:0d:80:fa:5f:6d:78:40:b6:03:4f:c5:e1:8f:3d: f1:dc:67:6d:a4:4e:93:5a:8c:3d:03:52:7d:7b:a0: 9d:fd:db:02:ed:cf:bd:f6:ec:72:09:9f:9c:b9:54: 1f:e3:4e:34:42:e9:29:a2:68:90:be:8d:ee:0e:97: e0:66:77:9e:c4:2e:55:ba:d3:16:b0:9b:4f:13:b9: d0:1c:4d:de:9e:a4:8f:34:40:44:20:ee:e5:2b:e4: 41:bf:ec:4a:fe:78:b1:b4:58:33:2e:08:73:5b:d8: a5:ef:d6:26:3b:bc:6c:ff:1e:76:0c:9b:98:a7:89: 36:e1:3f:c0:d1:3f:5b:4d:14:f8:96:35:43:7d:70: 1b:7e:7d:f0:6d:f6:49:75:c0:70:ee:17:f0:ed:49: 4e:f7:46:1d:bd:1e:f7:71:bb:a5:e5:ca:1a:8e:b4: b5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D2:55:BB:2B:B0:8F:C8:B5:37:DB:FD:EA:9E:68:97:66:84:AA:90 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-9JVuyuwj8i1N9v96p5ol2aEqpA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.198.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:c9:22:62:1d:ad:03:9d:60:cb:06:69:22:d3:2f:f0:f2:2c: 66:ea:6d:4d:84:86:46:ff:5b:51:07:ad:00:c0:00:ce:b3:23: ae:02:fa:79:3e:da:a8:75:00:96:f2:ff:de:e1:7f:45:20:c7: 3a:4a:56:5b:9d:3e:d2:f2:44:f2:78:c1:99:62:9f:a0:1b:03: 9a:c1:5c:d0:8a:a6:10:75:e6:09:76:bb:c4:81:2d:9e:87:9d: 0a:af:dc:23:82:1c:c9:8f:86:7f:67:ea:64:8c:78:7c:d1:79: aa:fa:24:13:70:ae:52:31:63:ef:72:2d:67:18:10:e2:99:b3: 53:db:59:fb:c8:98:9d:82:c9:28:5e:6e:d9:fd:74:9e:dc:b4: 4f:e3:e1:1d:01:8d:d9:77:83:d4:3b:ef:ef:4d:cf:d7:b5:fb: a7:32:c7:e4:0d:e0:07:22:4e:e5:b9:27:6f:15:3f:43:7a:85: 4d:3d:2d:c2:a5:e4:d8:ea:5f:c6:1c:04:ab:ee:39:dc:e3:a8: 6a:ce:f0:6b:bb:69:51:6a:6e:84:b5:ac:42:50:a9:1b:41:f8: 22:b4:c3:67:c9:f4:a2:bd:8f:01:26:b0:04:12:61:eb:b5:9c: dc:b1:58:06:af:9b:31:cd:db:ad:11:77:62:4b:f5:aa:7a:ee: c8:b0:30:7b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDzgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MzdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEZCRDI1NUJCMkJCMDhG QzhCNTM3REJGREVBOUU2ODk3NjY4NEFBOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqsmeZstxi/nRTJvXMRnISRVHeFWNL2IfsyeARY5fmfRNA4ALp rCebMi02+Btsux5/Zwf8YDluoNiDfdJoTftPIxTpXt5VbS1j8EUWmamtcRTgBJpV 0OdDNVMNgPpfbXhAtgNPxeGPPfHcZ22kTpNajD0DUn17oJ392wLtz7327HIJn5y5 VB/jTjRC6SmiaJC+je4Ol+Bmd57ELlW60xawm08TudAcTd6epI80QEQg7uUr5EG/ 7Er+eLG0WDMuCHNb2KXv1iY7vGz/HnYMm5iniTbhP8DRP1tNFPiWNUN9cBt+ffBt 9kl1wHDuF/DtSU73Rh29Hvdxu6XlyhqOtLXRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+9JVuyuwj8i1N9v96p5ol2aEqpAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Ly05SlZ1eXV3ajhpMU45djk2cDVvbDJhRXFwQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSsYwDQYJKoZIhvcNAQELBQADggEBAG3JImIdrQOdYMsGaSLTL/DyLGbq bU2Ehkb/W1EHrQDAAM6zI64C+nk+2qh1AJby/97hf0UgxzpKVludPtLyRPJ4wZli n6AbA5rBXNCKphB15gl2u8SBLZ6HnQqv3COCHMmPhn9n6mSMeHzRear6JBNwrlIx Y+9yLWcYEOKZs1PbWfvImJ2CyShebtn9dJ7ctE/j4R0Bjdl3g9Q77+9Nz9e1+6cy x+QN4AciTuW5J28VP0N6hU09LcKl5NjqX8YcBKvuOdzjqGrO8Gu7aVFqboS1rEJQ qRtB+CK0w2fJ9KK9jwEmsAQSYeu1nNyxWAavmzHN260Rd2JL9ap67siwMHs= -----END CERTIFICATE-----Generated at Sun Jun 22 00:32:33 2025 by rpki-client