$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BWGyAzdyVDPYCpHOu-PGkaWHDI8.roa File: BWGyAzdyVDPYCpHOu-PGkaWHDI8.roa (raw, json) Hash identifier: hE62zzkAFJqPPyQ81WbaRsHvg5PMliQbR0NJeUJIGsA= Subject key identifier: 05:61:B2:03:37:72:54:33:D8:0A:91:CE:BB:E3:C6:91:A5:87:0C:8F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F90 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BWGyAzdyVDPYCpHOu-PGkaWHDI8.roa Signing time: Tue 10 Jun 2025 11:36:20 +0000 ROA not before: Tue 10 Jun 2025 11:36:20 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 27.230.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3984 (0xf90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:36:20 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=0561B20337725433D80A91CEBBE3C691A5870C8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:e1:29:3b:64:9c:5f:54:1f:1c:82:54:7d: f1:90:cb:05:17:71:c3:93:3e:9d:b2:dc:a1:1a:e7: d6:c6:b9:ae:36:b5:54:32:01:78:f1:53:9f:14:78: 2a:45:1f:18:e1:7e:12:74:64:92:3c:a1:32:40:51: b0:a6:b7:e6:e1:1f:b7:f8:5d:19:7a:57:e0:8d:d4: cc:18:71:44:2d:f4:75:30:bd:d0:12:cb:b4:36:b0: 11:83:03:4f:09:f0:13:15:2a:b1:14:c2:49:cf:79: 63:fa:05:da:d1:ed:0c:13:53:2e:9c:72:10:ca:02: 65:e2:9c:ea:af:53:d6:ff:eb:a6:88:55:f2:c8:a8: 13:8b:3d:56:80:59:cc:a6:a2:31:86:62:28:d3:50: 17:ea:76:7b:90:7f:8e:e5:29:54:cd:56:a0:f6:35: fd:61:0e:ba:14:b9:52:02:95:90:e1:fb:02:cc:b8: 49:b3:38:65:42:d6:7c:f2:67:b9:90:fe:7f:64:15: 59:ac:d4:71:d2:1c:f8:d9:44:bd:f9:b9:38:e4:6e: 03:4a:24:26:18:d4:f8:d5:87:0a:1b:1f:6d:2f:9a: 68:db:70:f4:15:f3:20:92:b8:c4:00:b9:40:a7:e2: 79:63:5e:c8:ce:84:a8:1e:a3:24:7b:ea:8b:ca:35: 89:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:61:B2:03:37:72:54:33:D8:0A:91:CE:BB:E3:C6:91:A5:87:0C:8F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BWGyAzdyVDPYCpHOu-PGkaWHDI8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.128.0/20 Signature Algorithm: sha256WithRSAEncryption 78:47:bb:0a:7e:46:3e:3e:b1:35:60:4c:ca:a5:a2:db:3e:2a: 9c:b0:ac:7f:91:0f:8c:1e:6f:35:94:67:d7:61:b3:2c:a7:7b: 08:56:c8:cd:c3:84:68:da:36:82:6c:04:ec:ef:c1:e9:04:1b: 48:1f:68:cf:24:26:9a:6c:df:e7:ce:2d:09:da:ff:01:8f:05: 38:e6:6e:eb:94:24:05:0d:1d:d2:40:54:cd:84:9d:21:02:d8: 57:a9:92:13:b6:73:83:09:24:59:8e:ac:92:ce:b3:5c:a6:e0: 72:8d:39:ff:72:37:cb:df:31:83:4a:f8:5b:3a:1a:2a:ee:88: 0c:2e:ea:d7:6d:a6:8c:f5:40:5b:a7:b7:b6:c2:de:f6:9c:06: a8:b6:48:7a:e1:55:66:28:bc:8d:cc:04:58:ae:ac:97:2d:9a: a4:fa:bd:c0:5a:ca:75:9f:2d:8e:f3:af:8e:43:ef:9a:cd:d3: 92:b8:74:18:df:f9:78:f4:4d:9a:00:4b:e8:22:1f:17:d1:46: 99:90:90:db:37:8f:fa:21:c5:f2:94:ae:a5:b3:9f:ee:e5:58: 1c:98:c9:a7:9e:11:62:d8:c8:be:2f:ea:8b:94:d9:06:a9:e8: 14:07:cc:8b:36:38:08:72:69:0d:08:db:79:55:ed:5c:a6:a2: 81:42:90:9f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTM2MjBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDA1NjFCMjAzMzc3MjU0 MzNEODBBOTFDRUJCRTNDNjkxQTU4NzBDOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4meEpO2ScX1QfHIJUffGQywUXccOTPp2y3KEa59bGua42tVQy AXjxU58UeCpFHxjhfhJ0ZJI8oTJAUbCmt+bhH7f4XRl6V+CN1MwYcUQt9HUwvdAS y7Q2sBGDA08J8BMVKrEUwknPeWP6BdrR7QwTUy6cchDKAmXinOqvU9b/66aIVfLI qBOLPVaAWcymojGGYijTUBfqdnuQf47lKVTNVqD2Nf1hDroUuVIClZDh+wLMuEmz OGVC1nzyZ7mQ/n9kFVms1HHSHPjZRL35uTjkbgNKJCYY1PjVhwobH20vmmjbcPQV 8yCSuMQAuUCn4nljXsjOhKgeoyR76ovKNYmFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBWGyAzdyVDPYCpHOu+PGkaWHDI8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0JXR3lBemR5VkRQWUNwSE91LVBHa2FXSERJOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQb5oAwDQYJKoZIhvcNAQELBQADggEBAHhHuwp+Rj4+sTVgTMqlots+Kpyw rH+RD4webzWUZ9dhsyynewhWyM3DhGjaNoJsBOzvwekEG0gfaM8kJpps3+fOLQna /wGPBTjmbuuUJAUNHdJAVM2EnSEC2FepkhO2c4MJJFmOrJLOs1ym4HKNOf9yN8vf MYNK+Fs6GiruiAwu6tdtpoz1QFunt7bC3vacBqi2SHrhVWYovI3MBFiurJctmqT6 vcBaynWfLY7zr45D75rN05K4dBjf+Xj0TZoAS+giHxfRRpmQkNs3j/ohxfKUrqWz n+7lWByYyaeeEWLYyL4v6ouU2Qap6BQHzIs2OAhyaQ0I23lV7VymooFCkJ8= -----END CERTIFICATE-----Generated at Sun Jun 22 06:46:48 2025 by rpki-client