$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-F9zQHT3HcZQ1z8Hxa8j8Sda56I.roa File: -F9zQHT3HcZQ1z8Hxa8j8Sda56I.roa (raw, json) Hash identifier: uNjN24wNQHJdwtG4AyxodR4yn0s7FlQ02Ua7SjbV3U8= Subject key identifier: F8:5F:73:40:74:F7:1D:C6:50:D7:3F:07:C5:AF:23:F1:27:5A:E7:A2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F7C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-F9zQHT3HcZQ1z8Hxa8j8Sda56I.roa Signing time: Tue 10 Jun 2025 11:36:08 +0000 ROA not before: Tue 10 Jun 2025 11:36:08 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 16:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3964 (0xf7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:36:08 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=F85F734074F71DC650D73F07C5AF23F1275AE7A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f2:ed:75:90:2c:78:3b:69:16:19:be:57:84: 39:eb:d3:2c:e2:df:0e:4e:30:9c:b5:0f:af:46:82: ca:45:03:58:4f:22:e1:77:6a:75:54:23:37:24:34: c2:3c:55:84:8e:28:4a:6d:e2:60:55:16:25:11:88: 51:7d:c6:41:6b:ac:a7:92:2b:b9:d4:45:d0:33:89: 44:7c:3b:69:94:57:81:ee:f1:36:78:bc:03:27:7e: a9:dc:a6:3e:76:00:ef:3f:c4:71:2f:58:b1:d6:05: 0e:59:f0:9e:7f:f9:30:79:0b:e0:0d:40:cc:73:77: 66:23:56:b3:39:f9:ac:59:de:1d:8f:17:76:80:b1: 94:b2:30:33:9f:46:e2:fe:18:31:8f:af:eb:32:cd: 62:8d:68:c4:7b:81:10:c4:69:b7:d9:43:57:7d:e5: 4c:78:58:7a:49:9e:64:00:1e:d1:60:0e:5d:49:43: 32:65:bc:88:34:4e:a4:8d:ea:fb:3c:52:e6:c1:d4: fb:4e:8a:52:7e:69:c6:5d:70:40:e9:6a:43:d0:8e: 9a:d9:52:e2:9c:81:d9:bb:62:85:9a:7d:1e:51:df: aa:29:e3:72:fc:23:64:c0:06:5e:d6:a8:35:cc:94: d6:26:ea:65:fd:a8:a5:ba:69:8c:f7:6d:8a:c9:02: cc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5F:73:40:74:F7:1D:C6:50:D7:3F:07:C5:AF:23:F1:27:5A:E7:A2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-F9zQHT3HcZQ1z8Hxa8j8Sda56I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.16.0/23 Signature Algorithm: sha256WithRSAEncryption 48:5e:20:a1:64:9c:49:46:53:5c:d2:00:09:2f:ce:52:4f:b0: d8:c1:4a:02:86:8e:27:0c:12:46:32:0a:1e:05:5b:05:70:0a: ef:31:f7:a6:b6:4e:d7:e2:99:e5:e7:ea:a4:a1:58:9b:9f:d7: bf:48:c1:29:8c:0c:f8:df:89:7b:98:b9:bc:74:6d:08:b1:9b: 4b:43:4d:24:84:e2:1e:ae:8a:dd:4f:cd:33:23:7f:f7:fe:15: f8:c9:77:30:8c:be:29:64:06:e0:88:d7:36:ad:8d:47:40:ca: 75:16:35:73:64:4a:ab:e9:0e:49:f2:b0:e2:65:5c:f2:78:84: 34:30:7b:6e:1f:0a:e5:44:71:68:e9:72:91:26:ff:e8:fc:e9: 72:2f:6a:8a:ca:d6:b4:85:73:1e:86:53:75:21:52:e0:f5:7e: b6:3d:14:54:e6:92:47:cb:c2:89:bc:d6:43:7d:66:72:f3:ee: 47:74:45:39:7b:75:2f:99:d9:2d:89:aa:b8:51:dd:11:16:ae: 29:c9:ee:52:b2:d7:38:08:09:ef:cc:a3:e6:66:b2:d6:cc:27: 4f:97:c7:9c:8c:8a:b7:55:1a:17:23:01:87:8d:de:f5:b7:f9: 8d:34:cd:53:c1:43:fa:2e:db:8e:60:bb:df:9a:14:5a:f7:95: a4:d9:97:22 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD3wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTM2MDhaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEY4NUY3MzQwNzRGNzFE QzY1MEQ3M0YwN0M1QUYyM0YxMjc1QUU3QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCj8u11kCx4O2kWGb5XhDnr0yzi3w5OMJy1D69GgspFA1hPIuF3 anVUIzckNMI8VYSOKEpt4mBVFiURiFF9xkFrrKeSK7nURdAziUR8O2mUV4Hu8TZ4 vAMnfqncpj52AO8/xHEvWLHWBQ5Z8J5/+TB5C+ANQMxzd2YjVrM5+axZ3h2PF3aA sZSyMDOfRuL+GDGPr+syzWKNaMR7gRDEabfZQ1d95Ux4WHpJnmQAHtFgDl1JQzJl vIg0TqSN6vs8UubB1PtOilJ+acZdcEDpakPQjprZUuKcgdm7YoWafR5R36op43L8 I2TABl7WqDXMlNYm6mX9qKW6aYz3bYrJAsxzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+F9zQHT3HcZQ1z8Hxa8j8Sda56IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Ly1GOXpRSFQzSGNaUTF6OEh4YThqOFNkYTU2SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0hAwDQYJKoZIhvcNAQELBQADggEBAEheIKFknElGU1zSAAkvzlJPsNjB SgKGjicMEkYyCh4FWwVwCu8x96a2TtfimeXn6qShWJuf179IwSmMDPjfiXuYubx0 bQixm0tDTSSE4h6uit1PzTMjf/f+FfjJdzCMvilkBuCI1zatjUdAynUWNXNkSqvp DknysOJlXPJ4hDQwe24fCuVEcWjpcpEm/+j86XIvaorK1rSFcx6GU3UhUuD1frY9 FFTmkkfLwom81kN9ZnLz7kd0RTl7dS+Z2S2JqrhR3REWrinJ7lKy1zgICe/Mo+Zm stbMJ0+Xx5yMirdVGhcjAYeN3vW3+Y00zVPBQ/ou245gu9+aFFr3laTZlyI= -----END CERTIFICATE-----Generated at Sat Jun 21 18:46:13 2025 by rpki-client