$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2qItoD4GGA3abSlbUt8tG4egCco.roa File: 2qItoD4GGA3abSlbUt8tG4egCco.roa (raw, json) Hash identifier: Wl4hKP1QTx/YQEPrv1vLWaK3uZQgzn8b0cVsFJZEvVw= Subject key identifier: DA:A2:2D:A0:3E:06:18:0D:DA:6D:29:5B:52:DF:2D:1B:87:A0:09:CA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0ECB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2qItoD4GGA3abSlbUt8tG4egCco.roa Signing time: Tue 10 Jun 2025 11:09:03 +0000 ROA not before: Tue 10 Jun 2025 11:09:03 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 18:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3787 (0xecb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:09:03 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=DAA22DA03E06180DDA6D295B52DF2D1B87A009CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:86:a1:3d:d1:76:86:7e:58:c3:36:0b:19:7d: 73:2a:e8:9d:9e:9b:a1:cd:6e:9c:cb:4a:09:91:81: 2b:93:74:fc:d7:87:ee:45:69:bb:9c:bb:82:2d:fc: b6:28:e6:c7:4d:b7:5f:bf:4c:51:e1:8e:c8:b7:83: 17:1f:0e:fd:4e:d9:55:1b:86:57:55:b9:46:e8:30: 6f:79:e6:d9:82:37:ff:23:9e:6e:19:e2:36:18:25: 2c:ec:a0:bd:d1:91:6d:b0:d5:b7:f8:32:79:a8:a5: 0a:64:cd:41:cf:01:cd:ba:02:08:7e:83:b8:19:c9: 77:91:36:c9:45:38:dc:67:f3:a8:00:0c:0c:fa:e9: 36:4e:f6:94:18:30:c2:6d:5a:42:95:75:43:29:12: 2d:2c:10:3b:df:94:e0:51:9e:5f:6c:8b:79:df:72: 6d:19:12:01:56:e7:7f:54:4a:bb:36:d2:1d:03:29: 9f:f3:4e:6b:98:e8:c1:b2:3b:71:2d:45:94:35:f0: aa:87:0e:01:7b:bd:72:1a:c8:41:b3:12:df:6c:d3: 7c:e9:a1:a1:72:ec:55:cb:2a:6e:b8:53:0c:a0:a9: 89:e7:e3:f7:2d:dd:d0:f0:1c:53:be:59:ed:6f:77: 24:cc:ac:2a:c4:eb:94:75:a0:fb:ae:07:43:ff:35: 92:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A2:2D:A0:3E:06:18:0D:DA:6D:29:5B:52:DF:2D:1B:87:A0:09:CA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2qItoD4GGA3abSlbUt8tG4egCco.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.100.0/22 Signature Algorithm: sha256WithRSAEncryption 32:a7:6e:a6:55:e2:b3:e8:e5:aa:b3:1e:c1:44:eb:1b:b9:3e: 9f:51:06:81:b3:de:b7:c6:eb:30:f9:ab:be:3a:08:67:09:f0: 0d:da:f0:2e:50:3d:09:8c:e1:7b:4d:44:18:f5:67:ba:21:4d: d7:7a:7e:12:3f:87:b6:90:f3:07:e1:3a:31:51:b3:69:4b:64: 11:32:c1:d1:f0:d9:ee:92:02:4b:69:21:0d:f1:8a:5b:16:01: fa:c8:79:55:5e:8b:1d:f6:f8:c9:db:8a:d2:5c:5a:29:f2:3f: fc:73:f1:bb:e5:d9:87:54:4a:f9:13:15:e7:06:f8:9d:6e:3d: 50:7b:4b:b5:f1:cb:5a:e3:61:0a:a1:9e:74:77:64:86:9d:2a: 28:c1:34:66:cd:42:05:54:25:c3:38:51:c7:a0:ec:40:5e:0d: 54:dd:46:e3:03:0d:c0:67:e0:bf:09:90:31:ae:3c:ee:74:79: 4e:46:90:33:70:43:c3:ce:37:a4:8e:c4:b2:1b:aa:1f:6a:38: 70:94:32:f3:5b:51:a6:5c:5d:4c:dc:47:85:4b:b6:d8:f6:f5: a6:5d:10:6e:dd:d7:ec:ab:c3:06:a1:8f:ee:86:f9:e0:d5:b4: 09:af:3a:55:e6:f6:00:a0:c9:12:c1:14:bf:8c:ef:be:c3:e4: ca:9b:51:92 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA5MDNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKERBQTIyREEwM0UwNjE4 MEREQTZEMjk1QjUyREYyRDFCODdBMDA5Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYhqE90XaGfljDNgsZfXMq6J2em6HNbpzLSgmRgSuTdPzXh+5F abucu4It/LYo5sdNt1+/TFHhjsi3gxcfDv1O2VUbhldVuUboMG955tmCN/8jnm4Z 4jYYJSzsoL3RkW2w1bf4MnmopQpkzUHPAc26Agh+g7gZyXeRNslFONxn86gADAz6 6TZO9pQYMMJtWkKVdUMpEi0sEDvflOBRnl9si3nfcm0ZEgFW539USrs20h0DKZ/z TmuY6MGyO3EtRZQ18KqHDgF7vXIayEGzEt9s03zpoaFy7FXLKm64UwygqYnn4/ct 3dDwHFO+We1vdyTMrCrE65R1oPuuB0P/NZLFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2qItoD4GGA3abSlbUt8tG4egCcowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJxSXRvRDRHR0EzYWJTbGJVdDh0RzRlZ0Njby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc0mQwDQYJKoZIhvcNAQELBQADggEBADKnbqZV4rPo5aqzHsFE6xu5Pp9R BoGz3rfG6zD5q746CGcJ8A3a8C5QPQmM4XtNRBj1Z7ohTdd6fhI/h7aQ8wfhOjFR s2lLZBEywdHw2e6SAktpIQ3xilsWAfrIeVVeix32+MnbitJcWinyP/xz8bvl2YdU SvkTFecG+J1uPVB7S7Xxy1rjYQqhnnR3ZIadKijBNGbNQgVUJcM4Uceg7EBeDVTd RuMDDcBn4L8JkDGuPO50eU5GkDNwQ8PON6SOxLIbqh9qOHCUMvNbUaZcXUzcR4VL ttj29aZdEG7d1+yrwwahj+6G+eDVtAmvOlXm9gCgyRLBFL+M777D5MqbUZI= -----END CERTIFICATE-----Generated at Thu Jun 19 21:40:21 2025 by rpki-client