$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/C7oJ0aKmO3nO_Dby2o1t7zqQNBE.roa File: C7oJ0aKmO3nO_Dby2o1t7zqQNBE.roa (raw, json) Hash identifier: 12LCWQNokX4qCAsGj9L+jaGfQ+zUp+OHuFWS7PB+QZI= Subject key identifier: 0B:BA:09:D1:A2:A6:3B:79:CE:FC:36:F2:DA:8D:6D:EF:3A:90:34:11 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F56 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C7oJ0aKmO3nO_Dby2o1t7zqQNBE.roa Signing time: Tue 10 Jun 2025 11:28:30 +0000 ROA not before: Tue 10 Jun 2025 11:28:30 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.161.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 10:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3926 (0xf56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:28:30 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=0BBA09D1A2A63B79CEFC36F2DA8D6DEF3A903411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:54:3a:66:f1:05:91:f7:b5:66:d3:4b:25: e5:3f:bd:64:74:62:34:ed:c5:cd:a2:ad:41:60:c0: 0d:5a:58:20:8e:2e:5e:01:38:ef:2a:67:e3:06:29: f8:6d:78:2c:00:d1:7b:a6:f5:21:f9:2c:14:23:d2: 10:d0:51:47:9c:34:5d:4f:8a:7e:d7:74:6d:54:db: 0f:7c:bd:8a:b9:51:59:66:43:91:05:b3:10:5d:26: 9a:b0:2b:8f:c4:21:95:63:dc:69:b0:de:76:59:96: 99:bc:c5:be:25:2a:8b:a0:1a:06:88:25:58:de:19: 31:67:5a:67:5f:e4:52:dd:ba:d9:92:98:ff:4c:c2: 6b:05:3d:31:16:46:ac:09:a8:7c:e7:90:46:a8:6e: 80:40:36:1b:e5:9b:97:fe:6a:1e:74:cd:01:b2:c9: 75:93:b2:38:38:ef:25:a9:b3:75:c3:dd:8d:ee:37: 02:fe:6d:41:fb:4e:51:c9:b7:44:dc:95:c5:3c:74: 6b:cc:10:60:bd:ad:1f:ab:20:8b:59:6f:8c:f4:21: 63:35:f3:f6:40:d8:e0:e9:e3:34:af:c7:ab:5b:26: 18:18:7d:75:6d:30:3b:58:34:0f:9b:e6:18:de:3c: 58:6e:dd:f6:f9:52:43:ab:6d:5c:68:3d:45:f9:dc: f4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BA:09:D1:A2:A6:3B:79:CE:FC:36:F2:DA:8D:6D:EF:3A:90:34:11 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C7oJ0aKmO3nO_Dby2o1t7zqQNBE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.204.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:77:37:6f:88:58:f3:2e:99:2e:cf:9c:0e:27:62:04:62:67: 15:cc:e7:66:26:47:f9:89:f3:48:28:70:3e:a5:0e:da:07:7c: 7c:6c:bf:99:e2:4d:dd:0b:4a:71:81:60:cf:7f:d3:fa:58:4e: 17:b7:76:13:5b:48:b4:55:6f:3c:d6:be:f0:62:68:c0:12:ab: 73:ad:74:45:0c:53:ea:24:b4:53:b0:3f:7e:20:16:cd:52:44: e5:86:ce:ea:c0:c6:88:51:d6:a3:8a:e3:53:c9:c4:c4:51:b1: 0a:37:e7:79:43:00:e8:89:91:b5:5f:49:6b:3c:94:4e:8d:9b: 93:71:81:ff:e7:4e:11:21:7f:52:02:5b:42:e8:82:df:0d:78: b9:12:f5:83:1c:7e:d8:f2:3c:79:e6:da:66:17:82:61:5b:da: 0f:ce:a3:ce:b2:4c:18:8b:22:f6:ff:f3:5b:d6:d2:d0:26:2f: 9a:0b:64:f5:a3:f8:3d:d1:69:b8:6a:1e:8a:0c:ab:47:91:93: 09:fe:36:50:07:86:51:f9:db:44:b9:3b:74:43:37:2d:37:61: 9a:cd:73:ff:25:e7:9f:e4:8d:ec:1e:12:4e:6a:4e:3b:b5:2b: d6:6e:6a:1c:ff:44:f0:0e:99:a3:93:5a:7c:cf:86:9a:90:ae: 8a:8f:a8:ad -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD1YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI4MzBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDBCQkEwOUQxQTJBNjNC NzlDRUZDMzZGMkRBOEQ2REVGM0E5MDM0MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI3lQ6ZvEFkfe1ZtNLJeU/vWR0YjTtxc2irUFgwA1aWCCOLl4B OO8qZ+MGKfhteCwA0Xum9SH5LBQj0hDQUUecNF1Pin7XdG1U2w98vYq5UVlmQ5EF sxBdJpqwK4/EIZVj3Gmw3nZZlpm8xb4lKougGgaIJVjeGTFnWmdf5FLdutmSmP9M wmsFPTEWRqwJqHznkEaoboBANhvlm5f+ah50zQGyyXWTsjg47yWps3XD3Y3uNwL+ bUH7TlHJt0TclcU8dGvMEGC9rR+rIItZb4z0IWM18/ZA2ODp4zSvx6tbJhgYfXVt MDtYNA+b5hjePFhu3fb5UkOrbVxoPUX53PS9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUC7oJ0aKmO3nO/Dby2o1t7zqQNBEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0M3b0owYUttTzNuT19EYnkybzF0N3pxUU5CRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFuocwwDQYJKoZIhvcNAQELBQADggEBAEp3N2+IWPMumS7PnA4nYgRiZxXM 52YmR/mJ80gocD6lDtoHfHxsv5niTd0LSnGBYM9/0/pYThe3dhNbSLRVbzzWvvBi aMASq3OtdEUMU+oktFOwP34gFs1SROWGzurAxohR1qOK41PJxMRRsQo353lDAOiJ kbVfSWs8lE6Nm5Nxgf/nThEhf1ICW0Logt8NeLkS9YMcftjyPHnm2mYXgmFb2g/O o86yTBiLIvb/81vW0tAmL5oLZPWj+D3RabhqHooMq0eRkwn+NlAHhlH520S5O3RD Ny03YZrNc/8l55/kjeweEk5qTju1K9Zuahz/RPAOmaOTWnzPhpqQroqPqK0= -----END CERTIFICATE-----Generated at Sat Jun 21 14:42:01 2025 by rpki-client