$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/C63YYp5DghmSklOmdD6mbP7o1IY.roa File: C63YYp5DghmSklOmdD6mbP7o1IY.roa (raw, json) Hash identifier: 4Vg5E/PMH+ToBi8WNxo+aSPjiNj07qg9HnQdUstrAyw= Subject key identifier: 0B:AD:D8:62:9E:43:82:19:92:92:53:A6:74:3E:A6:6C:FE:E8:D4:86 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F28 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C63YYp5DghmSklOmdD6mbP7o1IY.roa Signing time: Tue 10 Jun 2025 11:24:27 +0000 ROA not before: Tue 10 Jun 2025 11:24:27 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 27.230.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3880 (0xf28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:27 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=0BADD8629E438219929253A6743EA66CFEE8D486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:3b:e4:a8:d1:c3:6f:99:9a:c6:17:b6:97:be: be:aa:da:70:9c:bb:ba:2b:79:44:37:64:5d:a2:f3: 1d:dd:23:c6:6b:72:1e:f3:7a:fa:b2:32:c6:31:20: 85:5c:fe:d8:c3:b0:8a:17:2d:4f:82:fb:57:20:de: 30:6a:9e:e6:8c:f9:10:88:cf:32:60:e6:90:27:59: 21:a0:7b:1a:b7:1c:b0:86:1e:e8:38:98:3c:6e:17: f8:45:6c:4d:95:15:78:ec:39:c2:d8:4f:73:a7:97: 31:7a:7c:5f:7a:83:44:f7:7e:9b:0c:b5:78:f2:4e: aa:a4:4d:a4:5c:84:15:7b:e5:a0:f6:2a:ed:b9:07: 15:11:b8:ee:76:af:a6:5d:67:87:b3:0c:54:87:ea: cf:21:f7:16:db:1e:e2:b3:30:7f:50:63:55:ea:07: db:08:d8:5a:b5:19:65:34:bc:51:3c:3e:61:98:eb: 9a:83:e3:a6:de:5b:91:45:b2:a4:ff:4f:a0:7d:e0: 53:c5:fb:4d:06:bd:80:4e:8f:bf:de:96:ab:57:a6: bc:be:69:ac:97:5d:98:1e:f2:29:b9:84:5d:fe:9b: 72:c8:b1:36:81:71:93:be:ef:59:61:11:ae:1f:70: 22:a1:b7:ea:1d:d5:92:a0:67:24:ce:ce:27:4c:c6: 39:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AD:D8:62:9E:43:82:19:92:92:53:A6:74:3E:A6:6C:FE:E8:D4:86 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C63YYp5DghmSklOmdD6mbP7o1IY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.42.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:e5:2e:63:62:99:cb:fe:53:a3:95:97:08:4e:9d:65:9f:d2: d5:90:7a:fa:d4:86:07:5b:3c:38:63:3f:04:11:86:54:20:da: 0b:cb:1b:bb:e7:74:6e:ec:de:ad:67:75:9c:37:89:48:e7:f0: e0:56:7f:d6:87:4b:92:39:74:e0:e6:b8:72:f7:99:b7:79:3b: 2c:88:d4:6d:b3:c7:8e:e8:23:5f:1d:82:a6:91:a5:a1:7e:5f: a4:9d:13:18:8b:f7:e2:98:13:9d:19:7f:a5:d6:2f:7f:11:4b: b6:82:5b:42:cc:54:fc:b2:8a:91:9e:af:25:ee:be:7d:12:bb: 9e:b2:e0:49:0b:83:e2:ef:85:b1:08:77:1d:33:a7:6f:e4:58: 24:a6:12:b1:fa:17:04:4b:89:d1:0f:f6:48:80:3a:34:f1:6d: cd:0d:78:e1:3f:31:87:72:55:f5:dd:fb:b9:36:be:f6:98:a3: 52:5b:07:be:80:20:40:87:21:cb:20:7b:0c:2b:90:94:ee:09: ff:18:c8:43:57:59:59:01:2f:c2:42:1f:5f:9b:8d:d6:e3:79: cb:a6:43:05:14:ea:bf:67:ce:07:e5:11:04:3f:0b:4e:bb:b4: a7:e6:3c:a4:a6:db:19:55:7d:8a:21:7c:3d:ab:c6:4e:d4:4c: 25:23:8c:37 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDygwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MjdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDBCQUREODYyOUU0Mzgy MTk5MjkyNTNBNjc0M0VBNjZDRkVFOEQ0ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD+O+So0cNvmZrGF7aXvr6q2nCcu7oreUQ3ZF2i8x3dI8Zrch7z evqyMsYxIIVc/tjDsIoXLU+C+1cg3jBqnuaM+RCIzzJg5pAnWSGgexq3HLCGHug4 mDxuF/hFbE2VFXjsOcLYT3OnlzF6fF96g0T3fpsMtXjyTqqkTaRchBV75aD2Ku25 BxURuO52r6ZdZ4ezDFSH6s8h9xbbHuKzMH9QY1XqB9sI2Fq1GWU0vFE8PmGY65qD 46beW5FFsqT/T6B94FPF+00GvYBOj7/elqtXpry+aayXXZge8im5hF3+m3LIsTaB cZO+71lhEa4fcCKht+od1ZKgZyTOzidMxjnzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUC63YYp5DghmSklOmdD6mbP7o1IYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0M2M1lZcDVEZ2htU2tsT21kRDZtYlA3bzFJWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAb5iowDQYJKoZIhvcNAQELBQADggEBAAvlLmNimcv+U6OVlwhOnWWf0tWQ evrUhgdbPDhjPwQRhlQg2gvLG7vndG7s3q1ndZw3iUjn8OBWf9aHS5I5dODmuHL3 mbd5OyyI1G2zx47oI18dgqaRpaF+X6SdExiL9+KYE50Zf6XWL38RS7aCW0LMVPyy ipGeryXuvn0Su56y4EkLg+LvhbEIdx0zp2/kWCSmErH6FwRLidEP9kiAOjTxbc0N eOE/MYdyVfXd+7k2vvaYo1JbB76AIECHIcsgewwrkJTuCf8YyENXWVkBL8JCH1+b jdbjecumQwUU6r9nzgflEQQ/C067tKfmPKSm2xlVfYohfD2rxk7UTCUjjDc= -----END CERTIFICATE-----Generated at Sun Jun 22 05:09:56 2025 by rpki-client