$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/57D4DOVdq4GrlTszudVIHFK3jDI.roa File: 57D4DOVdq4GrlTszudVIHFK3jDI.roa (raw, json) Hash identifier: sTnILdxSN9h4lEF8kTgMHFAYGtvc0ZLrmmj9JvwqEIg= Subject key identifier: E7:B0:F8:0C:E5:5D:AB:81:AB:95:3B:33:B9:D5:48:1C:52:B7:8C:32 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E49 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/57D4DOVdq4GrlTszudVIHFK3jDI.roa Signing time: Tue 10 Jun 2025 10:47:43 +0000 ROA not before: Tue 10 Jun 2025 10:47:43 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 211.14.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3657 (0xe49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:47:43 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=E7B0F80CE55DAB81AB953B33B9D5481C52B78C32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f0:90:f0:ee:37:64:e9:6f:00:b0:48:59:5c: da:a1:b8:e5:4c:fe:a9:b6:d0:1e:c5:47:c9:80:6f: eb:83:03:67:15:3a:20:ed:00:21:f4:8a:d3:ab:02: 39:49:43:7f:f0:41:8b:34:30:7d:94:c5:ed:56:e6: 17:2e:ab:83:3c:33:30:ff:22:95:90:51:85:66:58: e5:b0:59:61:d5:5e:7b:47:eb:cb:86:06:db:66:da: 32:c7:88:c5:3e:fa:ad:f9:59:6f:6b:c3:1f:54:a4: 61:34:13:a5:86:cf:39:0b:a3:00:f6:2c:18:fe:26: d5:52:79:2e:4e:f9:6b:e2:9c:33:31:09:44:35:68: ca:96:6a:37:c6:24:02:36:09:f9:b1:c3:99:a4:48: 44:23:4d:1c:3a:35:44:a5:83:3f:a2:2c:4b:b2:7d: 1d:ed:30:10:e2:48:32:56:6e:11:e6:4a:d9:25:2e: b9:b0:2b:32:ca:0e:04:ad:8b:b7:d5:55:be:3c:df: 0a:c4:34:1d:b4:4e:fe:d7:6b:9e:fc:51:89:a1:e1: 54:6e:28:7d:c9:c7:c4:5a:d8:23:b9:a9:fb:7a:ec: 8c:c4:a9:a7:87:83:d0:42:01:ed:aa:a6:b6:9a:48: 37:78:cb:76:5d:0f:d3:cd:01:b8:cd:d7:7c:ed:27: a9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B0:F8:0C:E5:5D:AB:81:AB:95:3B:33:B9:D5:48:1C:52:B7:8C:32 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/57D4DOVdq4GrlTszudVIHFK3jDI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.114.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:7e:e5:2f:2f:a9:36:11:25:89:a9:64:9b:dd:37:eb:47:d5: a7:7d:b5:d5:89:81:39:49:d3:e5:32:4d:ef:25:d7:e6:96:a8: 30:73:5a:2a:ab:15:e2:87:c9:88:c5:be:d4:d9:c6:df:6b:3b: 50:15:27:80:fc:94:0a:42:2e:70:4b:3b:18:9c:9c:bc:8f:35: 56:24:61:6d:5d:4b:f7:0b:9f:53:74:52:ff:b1:07:a3:21:79: c0:44:7f:b9:0d:ed:79:34:c6:97:5e:49:60:e9:5c:3d:33:e5: 99:c8:e7:e3:9a:e3:f7:b9:5e:28:31:1d:a0:d5:70:b8:ce:ba: 1f:38:e8:6a:c9:9e:d2:46:4b:3b:5e:8f:0a:5d:87:9c:17:5f: c8:bc:13:89:c7:89:98:d2:cf:bf:ca:75:0c:4e:7f:94:e5:a5: 4b:cf:7f:54:75:fe:36:fe:01:3d:d5:73:18:e2:26:e0:da:33: f1:59:26:e5:88:1b:7b:72:64:b4:ae:d8:ea:44:47:62:46:a2: c9:ce:d9:c5:6d:be:2c:04:d0:0c:8f:de:3e:c9:63:0e:55:75: 84:f1:bd:12:f0:97:a8:8b:f2:b5:65:cb:3f:a0:16:4b:fe:5e: 7c:9b:c0:39:7e:65:26:33:e2:08:e0:aa:8e:45:4e:c2:34:0e: da:1b:a4:5b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDkkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDQ3NDNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEU3QjBGODBDRTU1REFC ODFBQjk1M0IzM0I5RDU0ODFDNTJCNzhDMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ8JDw7jdk6W8AsEhZXNqhuOVM/qm20B7FR8mAb+uDA2cVOiDt ACH0itOrAjlJQ3/wQYs0MH2Uxe1W5hcuq4M8MzD/IpWQUYVmWOWwWWHVXntH68uG Bttm2jLHiMU++q35WW9rwx9UpGE0E6WGzzkLowD2LBj+JtVSeS5O+WvinDMxCUQ1 aMqWajfGJAI2Cfmxw5mkSEQjTRw6NUSlgz+iLEuyfR3tMBDiSDJWbhHmStklLrmw KzLKDgSti7fVVb483wrENB20Tv7Xa578UYmh4VRuKH3Jx8Ra2CO5qft67IzEqaeH g9BCAe2qpraaSDd4y3ZdD9PNAbjN13ztJ6njAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU57D4DOVdq4GrlTszudVIHFK3jDIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzU3RDRET1ZkcTRHcmxUc3p1ZFZJSEZLM2pESS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTDnIwDQYJKoZIhvcNAQELBQADggEBAI5+5S8vqTYRJYmpZJvdN+tH1ad9 tdWJgTlJ0+UyTe8l1+aWqDBzWiqrFeKHyYjFvtTZxt9rO1AVJ4D8lApCLnBLOxic nLyPNVYkYW1dS/cLn1N0Uv+xB6MhecBEf7kN7Xk0xpdeSWDpXD0z5ZnI5+Oa4/e5 XigxHaDVcLjOuh846GrJntJGSztejwpdh5wXX8i8E4nHiZjSz7/KdQxOf5TlpUvP f1R1/jb+AT3VcxjiJuDaM/FZJuWIG3tyZLSu2OpER2JGosnO2cVtviwE0AyP3j7J Yw5VdYTxvRLwl6iL8rVlyz+gFkv+XnybwDl+ZSYz4gjgqo5FTsI0DtobpFs= -----END CERTIFICATE-----Generated at Sun Jun 22 13:52:04 2025 by rpki-client