$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4cExNeQfXXLNCXZloK9cW4FT524.roa File: 4cExNeQfXXLNCXZloK9cW4FT524.roa (raw, json) Hash identifier: gintAdC/b5X+cXAQW5SE3R480DJXkItRftzHyr0s6JQ= Subject key identifier: E1:C1:31:35:E4:1F:5D:72:CD:09:76:65:A0:AF:5C:5B:81:53:E7:6E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E4A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4cExNeQfXXLNCXZloK9cW4FT524.roa Signing time: Tue 10 Jun 2025 10:47:44 +0000 ROA not before: Tue 10 Jun 2025 10:47:44 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3658 (0xe4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:47:44 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=E1C13135E41F5D72CD097665A0AF5C5B8153E76E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:84:de:24:44:4c:66:58:19:e5:b1:06:3e: 52:4c:4d:7e:48:a7:77:4f:dd:90:2b:8a:2c:12:6b: d4:82:0b:a9:09:87:e9:c4:67:31:a4:77:f4:03:39: ec:91:64:21:e9:11:1b:d1:c9:a2:b3:0c:58:7b:8e: 8c:b5:6d:46:8d:62:4b:41:15:dc:9a:f0:05:de:c9: 21:d9:21:20:32:18:7b:4f:1b:fc:ba:c0:e6:73:17: 08:84:6f:eb:88:32:50:2a:54:17:3c:f4:97:21:30: d1:26:e9:0d:58:27:fb:46:2e:30:b2:78:99:cd:f8: 11:0c:a5:65:10:1b:bb:e7:7b:5d:c4:54:be:10:ea: 3b:43:df:dc:cc:12:f1:f1:e0:c9:2b:b2:e9:f3:24: b8:b7:d9:5b:07:e8:f9:e2:51:6c:54:bf:f9:27:9f: 0f:13:33:6b:21:e8:cd:86:28:83:f3:2d:01:b8:13: 0c:f9:d4:5a:2c:34:99:e0:55:e6:4d:91:1b:2c:08: 73:6a:54:a0:0a:54:70:56:60:63:62:eb:98:de:cd: 46:06:f1:f9:90:05:c9:2d:84:66:25:b4:19:2c:fc: cf:b5:b9:98:f3:7c:c3:45:0b:8a:86:1d:6a:c8:46: 0d:46:1c:7c:81:37:70:fe:c9:37:0b:29:cf:dc:7a: 2c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C1:31:35:E4:1F:5D:72:CD:09:76:65:A0:AF:5C:5B:81:53:E7:6E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4cExNeQfXXLNCXZloK9cW4FT524.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.58.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:be:18:38:42:46:b9:39:e7:cd:3a:72:d8:e6:b2:74:46:8e: 99:39:82:f7:52:53:51:8d:1d:8c:6b:ec:49:f8:b8:d3:43:de: 92:19:aa:00:65:ab:ce:8e:4a:52:4c:3d:9d:3e:f3:94:1f:a0: b8:27:c7:77:4c:53:91:26:de:52:da:1a:54:b8:3c:dd:c3:d8: a5:20:cc:fc:04:0f:8b:96:b4:ba:bf:19:56:00:be:af:37:77: fe:06:1d:30:a8:31:e4:0a:3d:23:93:95:05:8b:65:19:90:c7: 9b:97:2d:7c:1d:2e:df:4f:f9:ce:18:2e:e3:ed:92:d2:d0:c1: de:ca:b5:05:81:49:95:65:d1:8e:60:2b:0e:ab:87:96:2f:44: ed:41:41:be:5a:7c:13:ef:aa:b9:b9:44:c0:cf:f5:1b:b4:7a: 99:6b:e9:ad:7b:38:fc:37:de:6e:93:60:cd:31:9a:ea:2e:12: b6:64:77:06:5a:10:cd:e6:5f:03:13:f4:bf:a2:57:b6:90:81: 47:05:c9:75:20:2f:46:ce:15:66:b0:d8:c5:73:7c:0f:b5:f8: 67:3d:f8:31:3a:d2:6d:d2:0d:19:a1:24:0e:68:83:78:c6:20: cf:41:71:be:db:c7:a2:05:53:9a:10:37:9a:35:97:53:b4:25: bf:ea:72:8e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDQ3NDRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEUxQzEzMTM1RTQxRjVE NzJDRDA5NzY2NUEwQUY1QzVCODE1M0U3NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3EYTeJERMZlgZ5bEGPlJMTX5Ip3dP3ZAriiwSa9SCC6kJh+nE ZzGkd/QDOeyRZCHpERvRyaKzDFh7joy1bUaNYktBFdya8AXeySHZISAyGHtPG/y6 wOZzFwiEb+uIMlAqVBc89JchMNEm6Q1YJ/tGLjCyeJnN+BEMpWUQG7vne13EVL4Q 6jtD39zMEvHx4MkrsunzJLi32VsH6PniUWxUv/knnw8TM2sh6M2GKIPzLQG4Ewz5 1FosNJngVeZNkRssCHNqVKAKVHBWYGNi65jezUYG8fmQBckthGYltBks/M+1uZjz fMNFC4qGHWrIRg1GHHyBN3D+yTcLKc/ceiz5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4cExNeQfXXLNCXZloK9cW4FT524wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzRjRXhOZVFmWFhMTkNYWmxvSzljVzRGVDUyNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0jowDQYJKoZIhvcNAQELBQADggEBABy+GDhCRrk55806ctjmsnRGjpk5 gvdSU1GNHYxr7En4uNND3pIZqgBlq86OSlJMPZ0+85QfoLgnx3dMU5Em3lLaGlS4 PN3D2KUgzPwED4uWtLq/GVYAvq83d/4GHTCoMeQKPSOTlQWLZRmQx5uXLXwdLt9P +c4YLuPtktLQwd7KtQWBSZVl0Y5gKw6rh5YvRO1BQb5afBPvqrm5RMDP9Ru0eplr 6a17OPw33m6TYM0xmuouErZkdwZaEM3mXwMT9L+iV7aQgUcFyXUgL0bOFWaw2MVz fA+1+Gc9+DE60m3SDRmhJA5og3jGIM9Bcb7bx6IFU5oQN5o1l1O0Jb/qco4= -----END CERTIFICATE-----Generated at Sat Jun 21 22:47:34 2025 by rpki-client