$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0kHjX9L4PY1Stly9FptODCRXBFI.roa File: 0kHjX9L4PY1Stly9FptODCRXBFI.roa (raw, json) Hash identifier: 0Qrs4I5MRnB77DkdyjLzWH8QwgN42PfCv0aT/87bdAg= Subject key identifier: D2:41:E3:5F:D2:F8:3D:8D:52:B6:5C:BD:16:9B:4E:0C:24:57:04:52 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FC0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0kHjX9L4PY1Stly9FptODCRXBFI.roa Signing time: Tue 10 Jun 2025 11:44:18 +0000 ROA not before: Tue 10 Jun 2025 11:44:18 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4032 (0xfc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:44:18 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=D241E35FD2F83D8D52B65CBD169B4E0C24570452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:a1:58:f6:92:ba:0c:ab:af:d3:1c:4f:c1: 4b:8b:9d:41:ee:5a:a5:5b:6d:ff:9d:64:19:0b:c2: de:49:39:ca:b4:ca:48:aa:26:e9:77:e2:32:a3:b1: 10:4f:17:0d:e5:a6:b7:80:d0:c4:d5:72:b3:88:e8: 1f:95:de:d2:3c:78:9a:2e:0f:49:3a:b8:08:43:e3: f5:74:30:6c:77:42:95:f8:bb:39:4b:41:64:af:0a: d3:79:dd:8a:95:e2:11:60:54:d8:01:b0:61:8d:1a: 2c:bc:2a:fe:e8:4a:28:ba:03:f6:f4:ce:81:c9:db: db:e8:41:49:b5:8a:45:2a:93:73:5e:29:b1:0a:95: ac:2c:d4:a2:bb:b3:6c:54:84:ef:8a:9e:94:b9:ce: 44:9e:a9:3a:f0:56:73:df:43:74:35:ad:79:f2:30: 89:22:ae:0a:28:8e:d3:0a:e3:f4:56:1d:2f:5e:c4: a3:3f:c0:c0:75:a9:ae:50:d0:cf:19:d5:4b:00:84: 2d:76:8d:78:af:33:6f:03:3c:7c:40:20:0d:b4:57: 81:29:7c:60:e2:a1:45:a7:02:92:7e:c6:1e:40:b1: 26:ba:63:bc:d0:58:36:02:ae:90:d2:1d:5e:7d:c0: e3:90:bc:84:66:18:8d:f1:72:6d:8a:2f:3b:80:a6: 7d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:41:E3:5F:D2:F8:3D:8D:52:B6:5C:BD:16:9B:4E:0C:24:57:04:52 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0kHjX9L4PY1Stly9FptODCRXBFI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.18.0/23 Signature Algorithm: sha256WithRSAEncryption b5:16:07:20:45:a0:53:d7:ce:a3:f2:27:16:34:fa:d2:e1:9b: 6c:55:07:02:57:4c:b0:df:86:26:68:44:29:67:2c:63:f6:2e: 86:4a:00:21:ce:78:63:51:fe:f0:74:07:36:7b:2f:61:65:8c: f9:d8:a1:81:1a:14:55:2f:80:95:fb:cd:45:86:7e:7f:bc:6f: b4:c6:40:4b:f1:3e:d4:37:6a:fe:c9:c1:fc:ee:67:fe:05:ac: 1f:6d:7d:d0:a9:97:af:c6:73:b2:7b:94:96:35:2c:90:a5:4b: ed:4a:68:c4:9d:19:67:ad:b3:37:98:b2:3c:6a:4d:70:bc:8a: 56:08:5a:de:3f:5b:a0:2d:a8:7a:b7:a5:44:de:d3:76:d1:a0: 79:43:93:60:4b:da:ce:94:22:51:f6:e8:e0:70:81:1d:71:73: 49:99:70:1e:e3:4f:a3:f0:a0:a5:b6:f6:9b:4b:1b:4d:7f:dc: 16:c5:35:94:84:ee:2d:a9:72:c8:50:2b:14:75:a4:0a:8a:bf: e1:4e:1f:93:da:06:7f:d3:cf:3e:f3:87:e9:9d:e8:29:10:e8: 52:dd:9c:04:9a:42:f5:88:56:24:4b:a8:dc:98:c7:03:e4:5d: 8e:8c:ea:cf:6d:79:20:65:bd:a8:48:dd:ba:98:39:79:00:5e: 13:11:84:36 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD8AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQ0MThaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEQyNDFFMzVGRDJGODNE OEQ1MkI2NUNCRDE2OUI0RTBDMjQ1NzA0NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzwqFY9pK6DKuv0xxPwUuLnUHuWqVbbf+dZBkLwt5JOcq0ykiq Jul34jKjsRBPFw3lpreA0MTVcrOI6B+V3tI8eJouD0k6uAhD4/V0MGx3QpX4uzlL QWSvCtN53YqV4hFgVNgBsGGNGiy8Kv7oSii6A/b0zoHJ29voQUm1ikUqk3NeKbEK laws1KK7s2xUhO+KnpS5zkSeqTrwVnPfQ3Q1rXnyMIkirgoojtMK4/RWHS9exKM/ wMB1qa5Q0M8Z1UsAhC12jXivM28DPHxAIA20V4EpfGDioUWnApJ+xh5AsSa6Y7zQ WDYCrpDSHV59wOOQvIRmGI3xcm2KLzuApn2jAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0kHjX9L4PY1Stly9FptODCRXBFIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzBrSGpYOUw0UFkxU3RseTlGcHRPRENSWEJGSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0hIwDQYJKoZIhvcNAQELBQADggEBALUWByBFoFPXzqPyJxY0+tLhm2xV BwJXTLDfhiZoRClnLGP2LoZKACHOeGNR/vB0BzZ7L2FljPnYoYEaFFUvgJX7zUWG fn+8b7TGQEvxPtQ3av7JwfzuZ/4FrB9tfdCpl6/Gc7J7lJY1LJClS+1KaMSdGWet szeYsjxqTXC8ilYIWt4/W6AtqHq3pUTe03bRoHlDk2BL2s6UIlH26OBwgR1xc0mZ cB7jT6PwoKW29ptLG01/3BbFNZSE7i2pcshQKxR1pAqKv+FOH5PaBn/Tzz7zh+md 6CkQ6FLdnASaQvWIViRLqNyYxwPkXY6M6s9teSBlvahI3bqYOXkAXhMRhDY= -----END CERTIFICATE-----Generated at Sun Jun 22 01:47:58 2025 by rpki-client