$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4G4idI9OzRaCSFSqBZC4ul0G6zI.roa File: 4G4idI9OzRaCSFSqBZC4ul0G6zI.roa (raw, json) Hash identifier: 2k7/slxfKQpH3GUQQyJgSH5qQdBWLUJZriERxf+wcvM= Subject key identifier: E0:6E:22:74:8F:4E:CD:16:82:48:54:AA:05:90:B8:BA:5D:06:EB:32 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F53 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4G4idI9OzRaCSFSqBZC4ul0G6zI.roa Signing time: Tue 10 Jun 2025 11:28:29 +0000 ROA not before: Tue 10 Jun 2025 11:28:29 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 219.122.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3923 (0xf53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:28:29 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=E06E22748F4ECD16824854AA0590B8BA5D06EB32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4f:30:88:0a:ca:aa:3d:3e:95:0d:47:c1:2a: 1f:63:a5:fc:a9:19:6c:86:56:ff:23:18:d0:12:f6: db:5f:95:bd:9f:a0:3e:6d:30:82:8c:47:7d:8e:db: eb:fb:a3:65:4f:2e:52:42:4d:68:ba:65:dd:d5:ff: 56:fc:52:77:f2:ad:cb:5e:47:8a:75:88:c4:7e:cd: 8a:15:28:45:a4:db:50:0c:32:8c:15:d3:fc:52:62: 91:d9:47:83:e8:23:dd:14:99:29:f3:fd:27:c6:8c: c8:f0:7c:a5:7b:e3:54:cb:1f:db:09:a3:09:f6:9c: 45:87:3f:c6:ef:f9:de:11:b4:0c:24:2b:bb:fe:dc: ba:04:75:9e:c1:9c:a4:54:1d:87:d7:b2:bd:0c:2a: 5e:e3:d9:fd:91:c8:b6:07:a9:aa:35:81:8b:4b:fb: 43:f2:ee:4d:29:15:24:03:b2:0e:62:a8:b3:16:2c: 5c:7c:59:44:ec:e3:32:d4:1b:e1:eb:5b:c2:d7:cc: e5:6a:18:b7:3d:31:f0:21:37:ce:4e:9b:27:03:23: 9b:b4:f3:49:bf:ba:43:6a:43:85:ed:d7:4c:10:39: 31:80:5a:75:30:b0:1d:48:9e:52:d2:85:5d:ea:b8: 59:de:dc:19:30:87:9f:ec:b9:67:63:6b:0e:37:4a: 1a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6E:22:74:8F:4E:CD:16:82:48:54:AA:05:90:B8:BA:5D:06:EB:32 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4G4idI9OzRaCSFSqBZC4ul0G6zI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.122.64.0/22 Signature Algorithm: sha256WithRSAEncryption c4:93:b6:81:cd:91:91:ba:e1:a3:b3:2f:71:6d:54:57:35:b0: 01:f7:86:0f:f2:c1:f5:29:a9:64:b2:10:44:a5:f1:5c:53:1d: 71:89:c1:cd:83:5f:e4:92:f0:26:0e:13:93:de:bc:8c:6e:22: b4:1d:ff:eb:c2:cf:42:84:c2:64:2e:b0:b2:67:3c:b1:6a:45: 86:12:d0:64:28:3f:77:ee:9b:ff:6a:c1:86:f4:d1:72:8d:de: 77:76:72:d5:f6:43:dc:4d:40:6f:7c:58:9f:02:99:65:fd:ed: b4:45:56:78:a2:ac:60:6f:c3:f8:2e:9e:09:d3:83:2e:5f:71: ff:5a:0c:d3:74:e7:95:19:6a:d4:c4:e9:06:2c:85:e5:0b:27: 2b:cd:4c:84:b7:8e:89:3e:f8:9c:29:dd:2b:cd:78:c6:3d:56: 18:29:83:0f:f7:9e:6f:ba:89:da:d6:91:0c:fb:19:b5:9c:11: 16:f4:fc:7d:aa:25:d0:c1:6d:1d:8d:5f:dc:a3:e6:90:11:c4: 4f:a2:39:a1:9a:74:78:88:87:f6:cc:25:3e:e3:67:82:5e:64: ed:6b:47:f3:cc:58:a3:9a:f9:85:6e:b8:cb:10:26:0b:bb:c4: 7d:11:81:a6:16:f5:ca:91:64:a7:ac:a2:87:53:d7:4d:43:fd: c5:7b:a1:ff -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD1MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI4MjlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEUwNkUyMjc0OEY0RUNE MTY4MjQ4NTRBQTA1OTBCOEJBNUQwNkVCMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkTzCICsqqPT6VDUfBKh9jpfypGWyGVv8jGNAS9ttflb2foD5t MIKMR32O2+v7o2VPLlJCTWi6Zd3V/1b8UnfyrcteR4p1iMR+zYoVKEWk21AMMowV 0/xSYpHZR4PoI90UmSnz/SfGjMjwfKV741TLH9sJown2nEWHP8bv+d4RtAwkK7v+ 3LoEdZ7BnKRUHYfXsr0MKl7j2f2RyLYHqao1gYtL+0Py7k0pFSQDsg5iqLMWLFx8 WUTs4zLUG+HrW8LXzOVqGLc9MfAhN85OmycDI5u080m/ukNqQ4Xt10wQOTGAWnUw sB1InlLShV3quFne3Bkwh5/suWdjaw43ShrhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4G4idI9OzRaCSFSqBZC4ul0G6zIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzRHNGlkSTlPelJhQ1NGU3FCWkM0dWwwRzZ6SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbekAwDQYJKoZIhvcNAQELBQADggEBAMSTtoHNkZG64aOzL3FtVFc1sAH3 hg/ywfUpqWSyEESl8VxTHXGJwc2DX+SS8CYOE5PevIxuIrQd/+vCz0KEwmQusLJn PLFqRYYS0GQoP3fum/9qwYb00XKN3nd2ctX2Q9xNQG98WJ8CmWX97bRFVniirGBv w/gungnTgy5fcf9aDNN055UZatTE6QYsheULJyvNTIS3jok++Jwp3SvNeMY9Vhgp gw/3nm+6idrWkQz7GbWcERb0/H2qJdDBbR2NX9yj5pARxE+iOaGadHiIh/bMJT7j Z4JeZO1rR/PMWKOa+YVuuMsQJgu7xH0RgaYW9cqRZKesoodT101D/cV7of8= -----END CERTIFICATE-----Generated at Thu Jun 19 08:43:19 2025 by rpki-client