$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6qmSkqzqSmMNTi1mBOeLlwkupGE.roa File: 6qmSkqzqSmMNTi1mBOeLlwkupGE.roa (raw, json) Hash identifier: SIF2lKOIKlPGnZywmjrMm172ZZCDzIiSmxMCXSraMVY= Subject key identifier: EA:A9:92:92:AC:EA:4A:63:0D:4E:2D:66:04:E7:8B:97:09:2E:A4:61 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E6B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6qmSkqzqSmMNTi1mBOeLlwkupGE.roa Signing time: Tue 10 Jun 2025 10:53:27 +0000 ROA not before: Tue 10 Jun 2025 10:53:27 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.74.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3691 (0xe6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:53:27 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=EAA99292ACEA4A630D4E2D6604E78B97092EA461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:1e:f1:d8:30:ae:2e:4e:41:27:54:bf:ca: 9a:64:a8:5f:cf:0c:13:eb:5a:b4:18:5e:c8:9c:93: 30:c3:ac:b0:63:fc:44:76:cb:c3:ad:d9:75:eb:c7: c9:a6:92:97:3a:88:12:9f:c5:48:62:1c:27:d4:0b: 1d:cb:10:ad:d2:39:db:aa:cc:59:18:72:c6:41:db: 07:6e:6d:0d:27:df:a5:25:9c:f7:42:6c:90:4c:da: 7e:05:6f:02:4c:db:1c:01:20:ec:69:5d:e2:ed:6d: c2:2e:1a:d8:63:1d:48:29:92:91:39:45:42:7c:9f: e1:f0:5e:a0:8a:2b:8b:56:d3:37:05:50:db:9d:f8: 72:e6:fc:cb:79:85:3d:bf:4d:bb:60:d1:60:5e:e3: 32:e4:6a:12:5d:c4:f7:b7:30:da:8d:07:b3:61:11: 66:16:69:13:1a:da:48:f7:28:cc:6d:dd:3e:67:35: 1d:08:4c:1b:d8:83:a1:f6:7f:2e:3a:15:48:64:13: db:4f:76:63:eb:b2:2a:c3:07:fc:48:22:99:74:47: ce:ec:ad:17:f6:70:71:f0:46:e7:c0:20:9f:c8:2c: 9a:54:47:03:9d:28:1f:5f:7b:69:24:f8:e5:d1:46: d1:57:e5:10:6c:7c:c3:e4:85:2f:0c:0d:f4:af:0f: 5e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A9:92:92:AC:EA:4A:63:0D:4E:2D:66:04:E7:8B:97:09:2E:A4:61 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6qmSkqzqSmMNTi1mBOeLlwkupGE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.204.0/22 Signature Algorithm: sha256WithRSAEncryption b5:2c:e1:cb:14:a6:d9:77:19:c4:d0:7d:6b:25:6a:91:56:ef: 06:50:90:cd:de:d6:fd:45:f0:dc:38:b1:ba:ee:50:48:59:78: fd:6f:28:45:f0:36:99:f9:34:4c:c5:33:a9:14:0f:60:a1:80: 53:2f:9c:5e:a7:de:9d:5f:cd:dc:4f:50:05:e5:c4:5e:92:fa: 4b:d2:81:99:69:d1:ce:5c:4c:b7:3e:86:29:4e:ce:99:88:c0: d4:a0:90:d1:ae:6d:f9:c6:06:19:54:be:66:03:f1:20:b9:7e: 41:88:ac:99:c4:70:17:09:50:3a:5c:d0:e1:9c:b5:f0:45:b5: ab:ba:b3:67:0a:a0:c5:d1:0c:ba:c1:6c:59:43:1b:e4:10:9c: b9:d4:66:90:3e:c0:36:41:87:0c:f6:2e:4c:5b:d6:d4:f4:10: ed:8e:d7:de:dc:e5:e2:30:b3:f0:0c:50:89:52:b9:9d:46:4f: df:fb:8c:9c:cb:c3:d5:46:b3:ce:ab:77:84:ca:46:ee:d7:ab: 19:c8:d0:cf:cf:fe:80:23:df:9f:33:47:e2:b2:08:d3:bf:93: 26:91:f6:c7:60:34:28:03:8f:34:a9:51:12:02:8e:40:0d:f9: ce:d4:38:e0:33:e6:0f:24:af:68:b4:fb:0b:41:fb:49:85:21: e7:bb:c4:d6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDUzMjdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEVBQTk5MjkyQUNFQTRB NjMwRDRFMkQ2NjA0RTc4Qjk3MDkyRUE0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKDx7x2DCuLk5BJ1S/yppkqF/PDBPrWrQYXsickzDDrLBj/ER2 y8Ot2XXrx8mmkpc6iBKfxUhiHCfUCx3LEK3SOduqzFkYcsZB2wdubQ0n36UlnPdC bJBM2n4FbwJM2xwBIOxpXeLtbcIuGthjHUgpkpE5RUJ8n+HwXqCKK4tW0zcFUNud +HLm/Mt5hT2/Tbtg0WBe4zLkahJdxPe3MNqNB7NhEWYWaRMa2kj3KMxt3T5nNR0I TBvYg6H2fy46FUhkE9tPdmPrsirDB/xIIpl0R87srRf2cHHwRufAIJ/ILJpURwOd KB9fe2kk+OXRRtFX5RBsfMPkhS8MDfSvD14vAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU6qmSkqzqSmMNTi1mBOeLlwkupGEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzZxbVNrcXpxU21NTlRpMW1CT2VMbHdrdXBHRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBSswwDQYJKoZIhvcNAQELBQADggEBALUs4csUptl3GcTQfWslapFW7wZQ kM3e1v1F8Nw4sbruUEhZeP1vKEXwNpn5NEzFM6kUD2ChgFMvnF6n3p1fzdxPUAXl xF6S+kvSgZlp0c5cTLc+hilOzpmIwNSgkNGubfnGBhlUvmYD8SC5fkGIrJnEcBcJ UDpc0OGctfBFtau6s2cKoMXRDLrBbFlDG+QQnLnUZpA+wDZBhwz2Lkxb1tT0EO2O 197c5eIws/AMUIlSuZ1GT9/7jJzLw9VGs86rd4TKRu7XqxnI0M/P/oAj358zR+Ky CNO/kyaR9sdgNCgDjzSpURICjkAN+c7UOOAz5g8kr2i0+wtB+0mFIee7xNY= -----END CERTIFICATE-----Generated at Sun Jun 22 01:04:35 2025 by rpki-client