$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ddqQ3EY_41Ipa3kZpUQmkQLW0c.roa File: 6ddqQ3EY_41Ipa3kZpUQmkQLW0c.roa (raw, json) Hash identifier: 3Tc1YAkdzJ18jGGhf7Q5eUWwEJtmzbq3ovWGBy6xnkY= Subject key identifier: E9:D7:6A:43:71:18:FF:8D:48:A5:AD:E4:66:95:10:9A:44:0B:5B:47 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F06 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ddqQ3EY_41Ipa3kZpUQmkQLW0c.roa Signing time: Tue 10 Jun 2025 11:16:49 +0000 ROA not before: Tue 10 Jun 2025 11:16:49 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.74.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3846 (0xf06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:49 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=E9D76A437118FF8D48A5ADE46695109A440B5B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:28:d1:a5:28:6b:9b:da:1b:16:b0:2e:2d: c9:93:f9:00:54:54:37:fe:d6:d2:ef:41:0b:a4:6f: 57:eb:13:7c:04:21:65:3e:e9:c6:f1:3a:2d:42:e2: 79:1d:7f:2a:db:69:c6:7c:d1:41:02:3c:a4:70:00: cc:55:ff:23:22:ad:a1:2c:20:7e:91:87:05:00:3d: 8c:26:e7:d9:2c:21:a2:2e:62:72:f1:b8:fb:78:a0: 0e:f6:3c:9b:b1:31:c0:b3:f6:bc:48:85:4f:31:de: 5d:39:3c:20:15:71:2a:14:c7:bb:e6:01:43:22:70: ae:91:cc:fc:f7:7c:b0:05:52:c7:4e:d8:84:75:10: 83:47:bd:c1:aa:c8:6d:49:68:04:19:2c:32:b4:70: 91:14:b1:61:dc:9c:b8:0a:be:d6:68:e9:41:2f:4a: 2f:d3:9e:bf:9f:ba:4e:ae:43:ed:b5:9f:f8:3e:ab: c6:43:e4:f2:cf:b6:ed:e3:74:d6:de:ff:5c:c1:33: 9f:20:f6:50:e8:32:86:dc:d7:94:6d:8c:32:62:03: c9:1f:78:65:de:fb:34:e2:48:99:45:8d:ab:45:bb: dc:bd:58:00:76:ba:9e:b9:a2:e1:65:27:ab:9e:51: 2d:a6:4f:47:c9:a7:1b:ac:25:46:59:f7:e3:99:27: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D7:6A:43:71:18:FF:8D:48:A5:AD:E4:66:95:10:9A:44:0B:5B:47 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ddqQ3EY_41Ipa3kZpUQmkQLW0c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.200.0/22 Signature Algorithm: sha256WithRSAEncryption b3:5f:59:53:dd:4b:06:d0:2b:24:4d:8b:49:84:15:2c:8e:74: 62:2b:96:c5:eb:a4:27:41:dc:73:e4:92:eb:ec:31:e1:2f:7c: 98:82:42:ea:09:f8:11:f4:44:17:b1:00:ca:cb:ed:69:49:21: 80:ed:69:b3:0d:db:13:99:4e:d0:64:da:cc:df:45:3d:16:61: e0:e3:b1:a9:f7:96:07:22:fe:97:7e:ae:02:32:4a:af:5e:b2: 92:25:6c:a2:f3:f1:b3:d8:b5:be:f3:e1:cf:47:fe:37:14:a6: 72:8e:5f:21:d6:c7:f7:2d:b9:b4:cb:c7:5d:a6:9b:d3:7d:ad: ee:a8:d3:f7:9a:72:fe:cd:0c:37:5a:d6:b3:77:ac:b3:6b:a8: 60:8c:6a:6f:0c:91:f3:1b:17:50:dd:36:b9:81:cf:54:86:18: b9:8e:0f:46:f6:c1:53:4a:9f:35:1a:ba:e8:37:38:fa:23:80: bf:6e:aa:10:69:21:04:dd:0b:b3:61:2d:43:ad:b5:b9:6c:00: 98:3e:36:e4:14:ad:7e:2c:c6:d5:e8:6a:f1:a1:a2:9b:cc:4d: 3c:cc:0d:7b:01:79:c4:67:bc:75:18:7d:5e:7b:5e:c8:8b:36: 58:bb:52:24:f0:d7:ce:28:96:ca:01:65:2a:7a:7c:13:b4:35: d0:6c:44:6a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDwYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NDlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEU5RDc2QTQzNzExOEZG OEQ0OEE1QURFNDY2OTUxMDlBNDQwQjVCNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVhSjRpShrm9obFrAuLcmT+QBUVDf+1tLvQQukb1frE3wEIWU+ 6cbxOi1C4nkdfyrbacZ80UECPKRwAMxV/yMiraEsIH6RhwUAPYwm59ksIaIuYnLx uPt4oA72PJuxMcCz9rxIhU8x3l05PCAVcSoUx7vmAUMicK6RzPz3fLAFUsdO2IR1 EINHvcGqyG1JaAQZLDK0cJEUsWHcnLgKvtZo6UEvSi/Tnr+fuk6uQ+21n/g+q8ZD 5PLPtu3jdNbe/1zBM58g9lDoMobc15RtjDJiA8kfeGXe+zTiSJlFjatFu9y9WAB2 up65ouFlJ6ueUS2mT0fJpxusJUZZ9+OZJ/HRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU6ddqQ3EY/41Ipa3kZpUQmkQLW0cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzZkZHFRM0VZXzQxSXBhM2tacFVRbWtRTFcwYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBSsgwDQYJKoZIhvcNAQELBQADggEBALNfWVPdSwbQKyRNi0mEFSyOdGIr lsXrpCdB3HPkkuvsMeEvfJiCQuoJ+BH0RBexAMrL7WlJIYDtabMN2xOZTtBk2szf RT0WYeDjsan3lgci/pd+rgIySq9espIlbKLz8bPYtb7z4c9H/jcUpnKOXyHWx/ct ubTLx12mm9N9re6o0/eacv7NDDda1rN3rLNrqGCMam8MkfMbF1DdNrmBz1SGGLmO D0b2wVNKnzUauug3OPojgL9uqhBpIQTdC7NhLUOttblsAJg+NuQUrX4sxtXoavGh opvMTTzMDXsBecRnvHUYfV57XsiLNli7UiTw184olsoBZSp6fBO0NdBsRGo= -----END CERTIFICATE-----Generated at Sun Jun 22 02:20:59 2025 by rpki-client