$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EcIDdYk_e5Oyi9-pV51O7bndk0E.roa File: EcIDdYk_e5Oyi9-pV51O7bndk0E.roa (raw, json) Hash identifier: 2AddCmcG/+mFS9aCoYVSTC7/idP8/UfeaKsxWzyWnVY= Subject key identifier: 11:C2:03:75:89:3F:7B:93:B2:8B:DF:A9:57:9D:4E:ED:B9:DD:93:41 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E4D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EcIDdYk_e5Oyi9-pV51O7bndk0E.roa Signing time: Tue 10 Jun 2025 10:47:45 +0000 ROA not before: Tue 10 Jun 2025 10:47:45 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 16:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3661 (0xe4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:47:45 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=11C20375893F7B93B28BDFA9579D4EEDB9DD9341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:34:c0:da:97:96:e7:d4:dd:5f:a7:bd:cf: f7:ac:d5:99:97:c7:56:89:cf:d8:ac:30:f8:a3:af: 41:68:1f:31:24:cc:b9:e7:76:75:f9:07:a8:6b:cc: 6d:aa:3a:e8:ba:98:0a:85:30:4f:9d:6c:22:fe:83: 47:09:9f:d1:9e:d6:69:cb:37:70:52:f3:18:60:91: 07:ec:91:bf:ec:e0:b6:57:40:94:59:74:e4:c6:31: 1a:a3:ea:95:48:51:00:8e:1f:d0:b8:57:fe:0a:e4: b5:01:2f:b1:fc:94:ec:59:ff:f2:20:6a:33:75:9b: e9:cf:3a:4f:85:ea:30:7a:51:ca:60:ea:d3:bb:14: 7b:f7:b4:95:30:2b:7f:5b:d7:38:75:e8:ce:9a:1b: 10:58:d8:16:c8:98:9c:fb:f4:ff:34:3f:8f:33:9a: 54:98:2c:e1:f9:81:87:ae:5c:c3:8e:f1:10:63:e5: 85:c8:27:2e:8e:c3:fe:2c:c7:4d:30:61:eb:a9:fb: 3a:e4:4c:fc:8c:d0:69:6b:f3:8f:14:80:67:8f:fd: fc:e8:5a:cf:ef:bb:ba:e9:54:69:a2:36:1e:86:96: 39:45:88:75:ff:21:c2:85:8b:b6:dc:5b:d9:eb:9b: 7d:0b:d3:46:03:57:c6:f1:8d:49:70:8b:32:fa:fc: 42:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C2:03:75:89:3F:7B:93:B2:8B:DF:A9:57:9D:4E:ED:B9:DD:93:41 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EcIDdYk_e5Oyi9-pV51O7bndk0E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.8.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:ef:8a:df:17:41:e9:b2:40:8f:f2:8b:2a:8d:61:13:88:08: aa:1b:3a:e4:34:aa:1b:45:1c:d7:16:d5:d4:34:98:29:ba:79: 0b:c4:b5:73:f9:65:8e:c1:96:3c:fd:38:e8:36:1d:e6:7a:eb: 5c:87:5c:76:d7:7a:6c:b9:f3:db:e7:a4:84:c8:4a:85:8c:6b: 6c:e3:d7:d0:a8:b8:e6:89:fa:87:1b:c8:a1:63:76:c7:17:88: be:5e:0a:b8:d6:47:23:a3:62:99:75:8d:09:94:7f:7c:d2:67: a4:31:1b:c8:cb:57:90:a7:ab:18:d3:dc:aa:3b:44:f9:fc:4a: 28:a9:c5:bc:21:1c:c5:c3:49:e3:23:88:db:a4:08:aa:55:bd: 0d:9d:fc:3d:35:f1:b8:30:6f:0f:16:66:7f:50:6a:45:de:65: 30:b2:47:83:c1:c3:50:65:a0:f3:bb:bf:c9:7b:60:72:68:3a: 6d:52:86:88:f1:a3:ce:4d:f8:cc:17:e2:2a:28:9c:38:58:1c: b8:92:5e:a6:50:5c:7d:42:88:87:69:7b:67:ed:18:f3:93:b8: c5:59:cc:7c:f8:05:2f:32:03:87:fe:36:db:c9:d8:76:83:39: 88:69:42:bc:75:7b:23:7a:51:43:b0:21:11:31:bb:48:c0:30: 93:ff:4c:b7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDk0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDQ3NDVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDExQzIwMzc1ODkzRjdC OTNCMjhCREZBOTU3OUQ0RUVEQjlERDkzNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr1TTA2peW59TdX6e9z/es1ZmXx1aJz9isMPijr0FoHzEkzLnn dnX5B6hrzG2qOui6mAqFME+dbCL+g0cJn9Ge1mnLN3BS8xhgkQfskb/s4LZXQJRZ dOTGMRqj6pVIUQCOH9C4V/4K5LUBL7H8lOxZ//IgajN1m+nPOk+F6jB6Ucpg6tO7 FHv3tJUwK39b1zh16M6aGxBY2BbImJz79P80P48zmlSYLOH5gYeuXMOO8RBj5YXI Jy6Ow/4sx00wYeup+zrkTPyM0Glr848UgGeP/fzoWs/vu7rpVGmiNh6GljlFiHX/ IcKFi7bcW9nrm30L00YDV8bxjUlwizL6/EJPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUEcIDdYk/e5Oyi9+pV51O7bndk0EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0VjSURkWWtfZTVPeWk5LXBWNTFPN2JuZGswRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPc0ggwDQYJKoZIhvcNAQELBQADggEBAB7vit8XQemyQI/yiyqNYROICKob OuQ0qhtFHNcW1dQ0mCm6eQvEtXP5ZY7Bljz9OOg2HeZ661yHXHbXemy589vnpITI SoWMa2zj19CouOaJ+ocbyKFjdscXiL5eCrjWRyOjYpl1jQmUf3zSZ6QxG8jLV5Cn qxjT3Ko7RPn8SiipxbwhHMXDSeMjiNukCKpVvQ2d/D018bgwbw8WZn9QakXeZTCy R4PBw1BloPO7v8l7YHJoOm1Shojxo85N+MwX4ioonDhYHLiSXqZQXH1CiIdpe2ft GPOTuMVZzHz4BS8yA4f+NtvJ2HaDOYhpQrx1eyN6UUOwIRExu0jAMJP/TLc= -----END CERTIFICATE-----Generated at Fri Jun 20 18:12:57 2025 by rpki-client