$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ulL66iL6TPeB9h4qqnjBV9JxWA.roa File: 6ulL66iL6TPeB9h4qqnjBV9JxWA.roa (raw, json) Hash identifier: +qLT1yDlc83aIZHQgE1eo1b3sNKruMZD4fYho+f56PE= Subject key identifier: EA:E9:4B:EB:A8:8B:E9:33:DE:07:D8:78:AA:A9:E3:05:5F:49:C5:60 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E56 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ulL66iL6TPeB9h4qqnjBV9JxWA.roa Signing time: Tue 10 Jun 2025 10:47:51 +0000 ROA not before: Tue 10 Jun 2025 10:47:51 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 27.230.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3670 (0xe56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:47:51 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=EAE94BEBA88BE933DE07D878AAA9E3055F49C560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ab:7a:56:f3:c3:61:0c:e6:ac:04:ff:cc:5f: 34:20:05:81:34:1d:00:28:bd:1f:a3:ad:da:f6:9b: 76:d1:0a:da:30:62:31:5a:44:83:60:b5:8c:66:34: 4f:46:e7:c5:c8:d5:fd:df:f5:24:14:7c:c3:23:f3: 2f:30:2e:e5:f9:d2:95:2d:06:23:99:0f:cb:7b:c4: 2a:01:82:1e:0b:7b:5e:4a:fe:0c:be:cb:56:00:35: 4c:95:37:93:3b:2b:ac:29:19:53:85:9e:0f:ea:f1: 58:5a:53:e5:e7:26:70:1f:f3:0e:2e:7b:fa:2c:73: 83:54:ad:60:20:fe:25:fe:7d:5a:1f:9b:d0:61:92: c8:7b:52:f8:a2:8e:11:be:1b:8c:a9:fb:90:7b:fb: 56:be:4c:10:9a:92:8d:db:79:61:85:2d:c9:37:84: d6:2c:c9:a8:f3:48:8f:6c:e4:56:f5:2b:43:12:4e: b4:73:34:48:3f:f1:e7:ce:58:b5:bf:c6:36:09:a2: a6:e1:d7:8d:43:36:6b:67:00:99:f7:c7:ec:79:a2: ee:e3:82:86:45:16:4b:2e:55:d8:c7:16:3f:45:ca: 49:d5:a1:10:69:bc:55:f5:d6:0f:00:e8:b6:4b:3e: 49:b9:3e:65:0a:98:59:8b:69:25:e0:e7:d6:32:56: 4d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E9:4B:EB:A8:8B:E9:33:DE:07:D8:78:AA:A9:E3:05:5F:49:C5:60 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ulL66iL6TPeB9h4qqnjBV9JxWA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.120.0/21 Signature Algorithm: sha256WithRSAEncryption 12:01:eb:1b:15:c1:cb:30:4d:b4:13:ef:56:52:eb:18:dd:97: 7f:71:08:6d:e4:54:e3:77:bd:54:2c:6a:8c:14:3b:dc:f7:3e: 6a:7a:5e:1f:e8:ec:a1:65:e0:e2:68:7c:a6:8a:cf:b2:bd:fd: 90:29:35:a3:0b:4e:46:18:6a:23:be:8e:4a:81:05:34:e8:fe: b8:4f:89:d5:ec:ae:e1:a5:f3:eb:05:27:06:eb:a5:1d:b3:2d: 01:7f:68:50:d3:77:ea:30:df:a7:d9:db:dd:21:12:a0:ea:af: 0e:a9:a6:87:ad:79:e1:19:bc:ad:03:25:57:8a:5e:b4:ce:ff: a2:e6:70:0a:d3:2a:dc:79:03:33:9b:cd:2e:8d:94:59:01:02: e5:da:c0:3f:88:d5:cd:d8:e9:1f:e6:e6:b3:87:68:fa:35:1a: 1a:0b:d2:ee:8f:b2:e8:d8:2a:84:bc:b3:9e:2e:a3:65:15:8d: 2f:ce:e8:3a:96:fa:2a:88:88:be:c6:d3:62:64:8a:63:85:ed: 19:18:0d:00:74:78:af:30:41:69:30:2a:6d:b1:7f:4e:0e:c2: 3f:f7:4d:97:7c:8b:c8:79:74:64:9e:81:93:a6:d0:48:17:73: 78:ea:12:c2:e4:70:16:03:62:1d:7f:92:02:61:20:c7:4a:40: d1:0b:2c:60 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDQ3NTFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEVBRTk0QkVCQTg4QkU5 MzNERTA3RDg3OEFBQTlFMzA1NUY0OUM1NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrq3pW88NhDOasBP/MXzQgBYE0HQAovR+jrdr2m3bRCtowYjFa RINgtYxmNE9G58XI1f3f9SQUfMMj8y8wLuX50pUtBiOZD8t7xCoBgh4Le15K/gy+ y1YANUyVN5M7K6wpGVOFng/q8VhaU+XnJnAf8w4ue/osc4NUrWAg/iX+fVofm9Bh ksh7UviijhG+G4yp+5B7+1a+TBCako3beWGFLck3hNYsyajzSI9s5Fb1K0MSTrRz NEg/8efOWLW/xjYJoqbh141DNmtnAJn3x+x5ou7jgoZFFksuVdjHFj9FyknVoRBp vFX11g8A6LZLPkm5PmUKmFmLaSXg59YyVk3zAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU6ulL66iL6TPeB9h4qqnjBV9JxWAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzZ1bEw2NmlMNlRQZUI5aDRxcW5qQlY5SnhXQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMb5ngwDQYJKoZIhvcNAQELBQADggEBABIB6xsVwcswTbQT71ZS6xjdl39x CG3kVON3vVQsaowUO9z3Pmp6Xh/o7KFl4OJofKaKz7K9/ZApNaMLTkYYaiO+jkqB BTTo/rhPidXsruGl8+sFJwbrpR2zLQF/aFDTd+ow36fZ290hEqDqrw6ppoeteeEZ vK0DJVeKXrTO/6LmcArTKtx5AzObzS6NlFkBAuXawD+I1c3Y6R/m5rOHaPo1GhoL 0u6PsujYKoS8s54uo2UVjS/O6DqW+iqIiL7G02JkimOF7RkYDQB0eK8wQWkwKm2x f04Owj/3TZd8i8h5dGSegZOm0EgXc3jqEsLkcBYDYh1/kgJhIMdKQNELLGA= -----END CERTIFICATE-----Generated at Sun Jun 22 03:58:48 2025 by rpki-client