$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DwbHuuk6WhhE5bh217StYW1Btsw.roa File: DwbHuuk6WhhE5bh217StYW1Btsw.roa (raw, json) Hash identifier: wcYqxwXHNkVX90Hqy+Tb7t1tKonzNHQJS6GCv6KtC08= Subject key identifier: 0F:06:C7:BA:E9:3A:5A:18:44:E5:B8:76:D7:B4:AD:61:6D:41:B6:CC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0ECD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DwbHuuk6WhhE5bh217StYW1Btsw.roa Signing time: Tue 10 Jun 2025 11:09:05 +0000 ROA not before: Tue 10 Jun 2025 11:09:05 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.161.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3789 (0xecd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:09:05 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=0F06C7BAE93A5A1844E5B876D7B4AD616D41B6CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:98:71:4c:4f:f6:91:2d:8b:80:c7:22:10: 54:ee:dd:4d:81:16:ed:93:8b:8d:e3:48:b3:15:6b: 7d:09:9f:d6:7a:52:c4:3a:f1:99:67:87:98:9a:0d: 81:8e:f6:47:1f:12:37:51:fc:f8:a3:48:88:9a:90: 40:d8:ca:76:b2:f6:6d:ef:e9:64:b4:63:03:6d:85: 36:6b:74:9b:72:79:44:96:17:00:09:66:47:3a:96: fd:2d:6e:ba:c3:f5:b7:60:e6:47:78:45:4b:e5:9f: dc:af:9d:04:15:65:26:7a:c2:6f:7e:48:04:4a:af: 0d:d7:1b:64:e2:2c:d0:39:18:9e:4b:10:61:71:bf: 9c:5f:78:96:33:e1:61:68:0a:bc:18:28:93:25:86: 69:9b:0b:d2:76:96:bc:de:7c:45:3a:84:ec:5f:f1: 59:51:4f:e1:68:76:43:1a:0c:ab:5f:08:d3:01:ac: b8:cb:bd:62:a4:e5:20:6e:db:6c:b8:aa:42:ef:7b: 41:58:5a:d4:07:67:f1:1f:9e:f0:f8:78:c5:ce:53: eb:de:ff:97:f4:c4:6e:c5:8e:3e:ed:20:87:91:df: 3d:70:5e:cb:dc:6f:1f:fb:70:88:fa:ec:6e:ff:de: a4:c4:6e:7c:f7:60:38:c3:95:98:bf:3b:3a:5d:6c: e2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:06:C7:BA:E9:3A:5A:18:44:E5:B8:76:D7:B4:AD:61:6D:41:B6:CC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DwbHuuk6WhhE5bh217StYW1Btsw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.194.0/23 Signature Algorithm: sha256WithRSAEncryption d8:0f:0f:52:2a:e2:d8:ed:17:1a:c5:e2:4e:1d:f6:0f:88:5d: 0d:f9:f1:13:9c:8d:a6:30:4b:16:b4:6b:8d:5b:44:3e:ff:7b: a5:8f:b2:cc:f8:7f:b2:4c:75:0e:7d:23:3c:55:6f:ed:ee:ad: 5d:13:8f:d5:c5:dc:83:dd:47:f4:46:4b:b2:6b:9d:ee:ae:cc: b5:f6:17:37:fb:66:0a:09:a6:d2:cf:0e:18:a1:2f:e4:7d:9d: 5b:c9:7e:e6:92:57:85:f6:3a:9c:46:3f:31:08:9f:f5:b4:65: 4c:12:84:7d:16:a1:8d:d6:28:3d:60:06:0e:76:f4:1e:e8:9c: 02:21:e7:ac:7f:cd:5f:d6:62:0b:de:9e:bb:50:06:3d:6c:65: 29:bc:99:af:65:21:a4:c2:97:c2:e7:3c:12:de:19:68:50:e6: 8c:62:c5:3b:ba:80:c0:42:3e:a9:53:be:8e:c6:19:7f:42:59: 92:49:94:df:d4:0a:66:bb:82:05:98:79:6a:21:ce:d7:ea:77: e9:9b:28:2b:ea:b1:eb:c7:35:42:bc:37:3d:a5:b9:ff:6f:ed: e2:db:06:a4:6f:05:64:be:d8:16:23:fa:6d:0f:da:ad:98:2c: ef:6e:f9:f7:ef:bd:ce:1f:e5:cc:40:e1:33:b4:33:ff:f5:be: 19:06:ba:e5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDs0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA5MDVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDBGMDZDN0JBRTkzQTVB MTg0NEU1Qjg3NkQ3QjRBRDYxNkQ0MUI2Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFFJhxTE/2kS2LgMciEFTu3U2BFu2Ti43jSLMVa30Jn9Z6UsQ6 8Zlnh5iaDYGO9kcfEjdR/PijSIiakEDYynay9m3v6WS0YwNthTZrdJtyeUSWFwAJ Zkc6lv0tbrrD9bdg5kd4RUvln9yvnQQVZSZ6wm9+SARKrw3XG2TiLNA5GJ5LEGFx v5xfeJYz4WFoCrwYKJMlhmmbC9J2lrzefEU6hOxf8VlRT+FodkMaDKtfCNMBrLjL vWKk5SBu22y4qkLve0FYWtQHZ/EfnvD4eMXOU+ve/5f0xG7Fjj7tIIeR3z1wXsvc bx/7cIj67G7/3qTEbnz3YDjDlZi/OzpdbOJpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDwbHuuk6WhhE5bh217StYW1BtswwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0R3Ykh1dWs2V2hoRTViaDIxN1N0WVcxQnRzdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFuocIwDQYJKoZIhvcNAQELBQADggEBANgPD1Iq4tjtFxrF4k4d9g+IXQ35 8ROcjaYwSxa0a41bRD7/e6WPssz4f7JMdQ59IzxVb+3urV0Tj9XF3IPdR/RGS7Jr ne6uzLX2Fzf7ZgoJptLPDhihL+R9nVvJfuaSV4X2OpxGPzEIn/W0ZUwShH0WoY3W KD1gBg529B7onAIh56x/zV/WYgvenrtQBj1sZSm8ma9lIaTCl8LnPBLeGWhQ5oxi xTu6gMBCPqlTvo7GGX9CWZJJlN/UCma7ggWYeWohztfqd+mbKCvqsevHNUK8Nz2l uf9v7eLbBqRvBWS+2BYj+m0P2q2YLO9u+ffvvc4f5cxA4TO0M//1vhkGuuU= -----END CERTIFICATE-----Generated at Sun Jun 22 03:55:33 2025 by rpki-client