$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/61Frb8VkXvWK16g1aH8Z0x8sHOY.roa File: 61Frb8VkXvWK16g1aH8Z0x8sHOY.roa (raw, json) Hash identifier: zlOIho0xTv92MFgTLdk4Bo6rbYqyjiGzHz7IKJov2cw= Subject key identifier: EB:51:6B:6F:C5:64:5E:F5:8A:D7:A8:35:68:7F:19:D3:1F:2C:1C:E6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E7C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/61Frb8VkXvWK16g1aH8Z0x8sHOY.roa Signing time: Tue 10 Jun 2025 10:56:43 +0000 ROA not before: Tue 10 Jun 2025 10:56:43 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 219.122.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 16:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3708 (0xe7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:56:43 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=EB516B6FC5645EF58AD7A835687F19D31F2C1CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c1:d2:83:44:42:13:93:8d:00:3e:37:b6:94: 3d:99:93:a2:e3:4c:ee:df:6d:e9:59:44:4d:2e:a4: c2:cc:02:cb:f5:03:f0:50:fa:8c:aa:d8:23:0f:89: 21:35:e2:42:91:bd:fd:e0:9c:86:12:d1:d1:0b:fe: d7:e2:c6:65:31:f1:d8:07:2c:4e:b5:96:e8:8c:d0: d5:28:37:a5:b9:81:47:a5:bf:55:54:81:76:c7:a4: 31:23:cf:d8:70:2d:1b:7f:64:82:c2:05:a3:8a:37: a4:0f:35:31:b4:72:24:02:f6:58:5d:fd:08:64:ce: 85:50:ca:70:90:ee:fd:70:aa:98:ad:e0:70:80:0a: d4:89:e8:eb:ad:21:f7:74:89:ae:30:fa:09:76:59: a1:2c:93:f3:aa:71:ec:86:9d:57:72:a4:6c:29:e3: 8e:9f:d3:4c:11:e2:a7:1f:41:ff:30:52:46:d9:da: b7:c3:e3:37:56:41:c9:5f:3d:6e:92:97:6c:3c:28: 97:5d:6e:24:b6:1e:03:f2:1b:16:ad:e1:10:e8:2a: e4:9d:44:bc:ce:b8:15:6f:57:08:82:04:75:95:88: 48:b4:8a:ec:97:7c:02:b0:7c:c0:56:66:99:75:42: 5a:52:6f:35:8c:c6:a1:23:33:2f:d8:89:a8:5a:e6: 47:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:51:6B:6F:C5:64:5E:F5:8A:D7:A8:35:68:7F:19:D3:1F:2C:1C:E6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/61Frb8VkXvWK16g1aH8Z0x8sHOY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.122.68.0/22 Signature Algorithm: sha256WithRSAEncryption 29:af:3c:16:3b:b0:00:bc:a4:b7:29:d2:f4:d0:54:bc:a8:1d: 14:9e:49:f7:c6:f3:59:b0:9c:78:91:0d:70:96:6e:db:1c:94: 15:83:71:a5:62:89:52:31:8b:43:41:3e:51:ec:f0:55:25:91: 42:d9:4a:95:97:e3:3c:38:f1:66:07:5f:af:dd:04:71:46:5f: a7:b8:a6:80:85:76:0c:0e:f6:01:d5:46:ab:a5:9b:f3:b0:2b: cf:9c:d7:a2:17:4f:3e:be:f2:51:fd:ac:40:1d:b6:ec:59:d2: 57:eb:3f:48:be:2c:3d:14:60:16:21:a8:6e:dc:d3:16:b9:8c: 4e:2b:66:ff:4d:6d:e0:6d:b7:73:89:45:c8:cc:d7:4f:a3:19: ba:cb:cb:c1:57:eb:0c:b7:af:9d:07:a1:90:52:7e:4d:5a:31: 8e:15:dc:19:25:ea:0b:87:f4:e2:a7:bd:93:01:9f:3b:ba:9f: 56:41:20:c7:26:85:aa:7a:e0:c4:f8:7d:4d:b7:7a:11:49:a9: 37:41:b0:cf:70:1b:37:10:a7:f6:0e:e0:9e:82:0c:31:66:d2: b4:4d:d7:03:00:76:bb:2e:ef:1e:00:b9:f5:dc:77:d1:3d:81: 17:5f:db:1c:b5:57:f0:cf:a2:ea:5f:f0:f4:f7:f1:ad:34:3c: 66:d9:f9:ff -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDU2NDNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEVCNTE2QjZGQzU2NDVF RjU4QUQ3QTgzNTY4N0YxOUQzMUYyQzFDRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSwdKDREITk40APje2lD2Zk6LjTO7fbelZRE0upMLMAsv1A/BQ +oyq2CMPiSE14kKRvf3gnIYS0dEL/tfixmUx8dgHLE61luiM0NUoN6W5gUelv1VU gXbHpDEjz9hwLRt/ZILCBaOKN6QPNTG0ciQC9lhd/QhkzoVQynCQ7v1wqpit4HCA CtSJ6OutIfd0ia4w+gl2WaEsk/OqceyGnVdypGwp446f00wR4qcfQf8wUkbZ2rfD 4zdWQclfPW6Sl2w8KJddbiS2HgPyGxat4RDoKuSdRLzOuBVvVwiCBHWViEi0iuyX fAKwfMBWZpl1QlpSbzWMxqEjMy/Yiaha5kd5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU61Frb8VkXvWK16g1aH8Z0x8sHOYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzYxRnJiOFZrWHZXSzE2ZzFhSDhaMHg4c0hPWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbekQwDQYJKoZIhvcNAQELBQADggEBACmvPBY7sAC8pLcp0vTQVLyoHRSe SffG81mwnHiRDXCWbtsclBWDcaViiVIxi0NBPlHs8FUlkULZSpWX4zw48WYHX6/d BHFGX6e4poCFdgwO9gHVRqulm/OwK8+c16IXTz6+8lH9rEAdtuxZ0lfrP0i+LD0U YBYhqG7c0xa5jE4rZv9NbeBtt3OJRcjM10+jGbrLy8FX6wy3r50HoZBSfk1aMY4V 3Bkl6guH9OKnvZMBnzu6n1ZBIMcmhap64MT4fU23ehFJqTdBsM9wGzcQp/YO4J6C DDFm0rRN1wMAdrsu7x4AufXcd9E9gRdf2xy1V/DPoupf8PT38a00PGbZ+f8= -----END CERTIFICATE-----Generated at Fri Jun 20 18:39:49 2025 by rpki-client