$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/53DiUOr_spgwv6vL0mA_r7T7254.roa File: 53DiUOr_spgwv6vL0mA_r7T7254.roa (raw, json) Hash identifier: o3wR1FU8NaybX1TnWbQ9F3RhjMuV7Beb9nfCJ95r6uU= Subject key identifier: E7:70:E2:50:EA:FF:B2:98:30:BF:AB:CB:D2:60:3F:AF:B4:FB:DB:9E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E55 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/53DiUOr_spgwv6vL0mA_r7T7254.roa Signing time: Tue 10 Jun 2025 10:47:51 +0000 ROA not before: Tue 10 Jun 2025 10:47:51 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.158.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 14:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3669 (0xe55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:47:51 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=E770E250EAFFB29830BFABCBD2603FAFB4FBDB9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:54:7c:38:c2:2a:c9:d4:00:9a:0e:b1:77: 5f:08:70:fb:53:5b:89:69:c1:4b:4f:77:94:8b:4e: 91:25:c3:73:89:4f:96:5a:fb:09:ad:f8:f0:96:c1: 74:6d:8a:dd:95:b9:7e:2b:8f:0f:a8:dc:3e:d2:58: df:79:a2:7b:0a:03:87:0f:38:65:f2:d1:2e:86:dc: 73:9e:63:21:f2:84:51:6e:53:a0:d6:9c:fe:08:05: b2:6c:65:4f:1f:70:6f:4a:58:88:c4:f8:23:4e:ec: 6e:59:48:49:2e:c1:b6:64:b5:b7:e6:73:e7:b4:9a: a1:e6:58:8f:ae:2d:ca:31:69:88:ca:66:34:65:2f: 44:00:45:32:45:c5:9a:27:19:08:bb:e3:73:2f:8e: 4e:2d:0e:c0:00:31:2d:27:de:d9:68:6e:e3:7c:4e: ac:eb:cf:69:8e:40:55:1b:f3:a4:c1:72:07:eb:b2: f0:86:71:0a:dc:60:0a:40:a0:4d:f5:8b:84:f6:09: e0:11:86:90:0f:f8:e2:ee:06:73:c8:89:63:20:bc: a7:dc:15:57:34:b1:d3:46:44:21:90:02:ec:7b:d0: e0:68:9a:ee:99:c8:b5:86:4b:1f:5a:91:33:28:6e: c7:3d:7d:6d:db:22:7e:b1:f0:bb:c7:46:be:0f:80: df:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:70:E2:50:EA:FF:B2:98:30:BF:AB:CB:D2:60:3F:AF:B4:FB:DB:9E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/53DiUOr_spgwv6vL0mA_r7T7254.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.144.0/21 Signature Algorithm: sha256WithRSAEncryption bd:fd:78:37:f5:4f:d3:57:6a:09:9d:d4:9e:56:18:b8:de:5c: f6:46:d6:f8:6b:a4:a3:a1:9c:be:aa:da:10:75:e1:99:d0:d8: bb:80:94:61:fb:d6:a5:e5:fe:c5:22:ad:be:59:9f:e2:4c:2f: ea:8f:32:07:ec:4f:df:32:1b:a5:49:e6:9a:ae:1a:e6:bb:1a: 5b:a2:2e:c6:ba:26:0f:1e:db:ff:1e:c8:ed:b1:8a:dc:44:5a: e0:fa:21:64:92:b5:94:1a:37:8b:dd:38:22:41:9e:0d:42:a3: 11:bd:10:23:e6:46:d8:69:de:e8:db:74:a3:1d:bc:40:a1:df: 41:50:f9:01:5b:05:d2:ae:0e:b1:fd:ee:c2:7d:9b:4a:fe:1e: 03:01:a7:2a:d0:2f:b8:98:87:c0:03:39:f0:e8:46:3e:58:0b: a1:ee:b2:40:36:e1:1c:d6:73:a8:75:5b:6a:22:eb:b1:8c:3f: 59:52:8f:a0:14:ed:39:64:db:a5:2e:e8:f2:21:fe:01:ec:73: 41:e9:22:69:0f:5d:df:5b:c8:41:9f:c0:e1:92:ec:76:42:0e: 19:3b:f3:13:d0:97:2b:b0:9d:93:d7:ff:de:da:7f:fc:b6:5d: 97:a5:12:20:1d:3d:61:cf:5d:83:20:4d:b7:c2:09:c6:45:11: 0f:5e:05:ce -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDQ3NTFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEU3NzBFMjUwRUFGRkIy OTgzMEJGQUJDQkQyNjAzRkFGQjRGQkRCOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9IlR8OMIqydQAmg6xd18IcPtTW4lpwUtPd5SLTpElw3OJT5Za +wmt+PCWwXRtit2VuX4rjw+o3D7SWN95onsKA4cPOGXy0S6G3HOeYyHyhFFuU6DW nP4IBbJsZU8fcG9KWIjE+CNO7G5ZSEkuwbZktbfmc+e0mqHmWI+uLcoxaYjKZjRl L0QARTJFxZonGQi743Mvjk4tDsAAMS0n3tlobuN8Tqzrz2mOQFUb86TBcgfrsvCG cQrcYApAoE31i4T2CeARhpAP+OLuBnPIiWMgvKfcFVc0sdNGRCGQAux70OBomu6Z yLWGSx9akTMobsc9fW3bIn6x8LvHRr4PgN/pAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU53DiUOr/spgwv6vL0mA/r7T7254wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzUzRGlVT3Jfc3Bnd3Y2dkwwbUFfcjdUNzI1NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANunpAwDQYJKoZIhvcNAQELBQADggEBAL39eDf1T9NXagmd1J5WGLjeXPZG 1vhrpKOhnL6q2hB14ZnQ2LuAlGH71qXl/sUirb5Zn+JML+qPMgfsT98yG6VJ5pqu Gua7GluiLsa6Jg8e2/8eyO2xitxEWuD6IWSStZQaN4vdOCJBng1CoxG9ECPmRthp 3ujbdKMdvECh30FQ+QFbBdKuDrH97sJ9m0r+HgMBpyrQL7iYh8ADOfDoRj5YC6Hu skA24RzWc6h1W2oi67GMP1lSj6AU7Tlk26Uu6PIh/gHsc0HpImkPXd9byEGfwOGS 7HZCDhk78xPQlyuwnZPX/97af/y2XZelEiAdPWHPXYMgTbfCCcZFEQ9eBc4= -----END CERTIFICATE-----Generated at Sat Jun 21 16:59:45 2025 by rpki-client