$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FIrlAPIqivDq6Svz9ENKF-YJgQA.roa File: FIrlAPIqivDq6Svz9ENKF-YJgQA.roa (raw, json) Hash identifier: Q3rmDhr951jpSu5nOXJUGK0eBgdhdEzKKGkCH85XPJM= Subject key identifier: 14:8A:E5:00:F2:2A:8A:F0:EA:E9:2B:F3:F4:43:4A:17:E6:09:81:00 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EC1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FIrlAPIqivDq6Svz9ENKF-YJgQA.roa Signing time: Tue 10 Jun 2025 11:04:59 +0000 ROA not before: Tue 10 Jun 2025 11:04:59 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 27.230.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 14:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3777 (0xec1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:04:59 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=148AE500F22A8AF0EAE92BF3F4434A17E6098100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:c0:68:62:eb:d9:71:5b:55:9c:62:30:43: dd:1f:ff:00:65:0c:c4:f9:57:92:7e:06:f8:3d:67: bb:df:ee:2c:c8:86:47:42:f9:a6:71:4e:fa:58:97: eb:7b:a2:82:8d:34:5b:7d:db:e1:df:86:9e:40:1e: 7a:1d:74:66:8e:e8:a9:00:92:3c:b3:4a:26:62:cb: ad:0a:e1:77:a5:bf:48:b7:3f:42:59:94:08:e5:a6: 24:29:ac:aa:50:05:27:ee:6c:10:c0:46:dc:a2:ac: 2c:a1:29:94:86:07:aa:6e:17:8c:9b:51:18:6f:4e: 0f:5f:e9:4c:2d:3a:04:4c:cb:55:0f:82:c1:78:77: 53:a5:2c:b7:8f:83:a4:46:97:bc:bc:1b:e1:2a:98: 9c:c1:5c:bd:6f:50:43:f6:8e:56:4b:21:32:b6:48: 5b:50:e9:2c:61:21:92:3a:10:c4:4b:46:a8:75:06: df:4f:06:4c:25:fd:13:7a:2c:1b:87:49:71:17:d7: 1d:d9:e8:c6:80:48:3c:ad:96:42:a2:36:32:79:58: d4:26:7e:cb:83:28:dc:3e:fa:a9:4a:9c:d7:72:ce: 56:7f:0a:bf:64:76:d2:1a:74:4a:1e:56:4d:42:62: f0:98:98:1a:41:12:62:b7:70:23:fe:0c:1c:5b:b9: 02:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8A:E5:00:F2:2A:8A:F0:EA:E9:2B:F3:F4:43:4A:17:E6:09:81:00 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FIrlAPIqivDq6Svz9ENKF-YJgQA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.104.0/22 Signature Algorithm: sha256WithRSAEncryption 19:55:2c:11:6d:63:f8:68:71:db:91:39:d4:ad:d8:0c:c0:61: 5f:08:e9:22:16:ef:03:76:6f:f8:34:7c:f8:9a:8f:98:18:f3: 3a:38:44:d1:68:48:de:f5:cf:12:3d:24:1e:af:65:65:84:56: 38:e9:d2:8c:8d:61:6e:8e:f2:9a:6e:01:bd:40:9a:97:22:71: f8:91:aa:f0:48:6a:5c:f7:2f:2c:b5:80:2d:a9:69:8c:20:ac: c3:de:0e:cc:df:17:54:10:77:7b:e5:51:c6:aa:38:1c:37:95: 9f:8c:6f:17:bd:e8:54:c2:d1:23:d5:98:90:7b:17:df:3c:e7: d6:7d:41:81:8d:f5:cb:01:18:4b:1f:5f:cc:dc:6a:b8:b7:95: 83:4d:e9:be:2c:c2:19:83:47:74:e1:57:c7:62:d8:bc:b0:f3: 4c:db:da:c2:38:49:6a:cf:4a:7f:0c:b0:70:7e:b3:3b:63:27: 93:7f:f6:04:1f:13:13:e6:18:ab:3b:6a:b8:d4:28:f5:f3:3f: 89:1e:79:84:08:16:98:75:e0:ed:eb:21:5c:6e:53:3c:ec:9b: d3:11:1d:38:91:71:3a:01:38:5a:88:60:c1:56:0d:22:32:31: 41:0c:4c:2b:2e:25:91:f8:d9:ec:33:28:d3:d9:f6:02:f4:b1: b3:05:fd:04 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDsEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA0NTlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDE0OEFFNTAwRjIyQThB RjBFQUU5MkJGM0Y0NDM0QTE3RTYwOTgxMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE6sBoYuvZcVtVnGIwQ90f/wBlDMT5V5J+Bvg9Z7vf7izIhkdC +aZxTvpYl+t7ooKNNFt92+Hfhp5AHnoddGaO6KkAkjyzSiZiy60K4Xelv0i3P0JZ lAjlpiQprKpQBSfubBDARtyirCyhKZSGB6puF4ybURhvTg9f6UwtOgRMy1UPgsF4 d1OlLLePg6RGl7y8G+EqmJzBXL1vUEP2jlZLITK2SFtQ6SxhIZI6EMRLRqh1Bt9P Bkwl/RN6LBuHSXEX1x3Z6MaASDytlkKiNjJ5WNQmfsuDKNw++qlKnNdyzlZ/Cr9k dtIadEoeVk1CYvCYmBpBEmK3cCP+DBxbuQL/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFIrlAPIqivDq6Svz9ENKF+YJgQAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0ZJcmxBUElxaXZEcTZTdno5RU5LRi1ZSmdRQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIb5mgwDQYJKoZIhvcNAQELBQADggEBABlVLBFtY/hocduROdSt2AzAYV8I 6SIW7wN2b/g0fPiaj5gY8zo4RNFoSN71zxI9JB6vZWWEVjjp0oyNYW6O8ppuAb1A mpcicfiRqvBIalz3Lyy1gC2paYwgrMPeDszfF1QQd3vlUcaqOBw3lZ+Mbxe96FTC 0SPVmJB7F98859Z9QYGN9csBGEsfX8zcari3lYNN6b4swhmDR3ThV8di2Lyw80zb 2sI4SWrPSn8MsHB+sztjJ5N/9gQfExPmGKs7arjUKPXzP4keeYQIFph14O3rIVxu Uzzsm9MRHTiRcToBOFqIYMFWDSIyMUEMTCsuJZH42ewzKNPZ9gL0sbMF/QQ= -----END CERTIFICATE-----Generated at Sat Jun 21 16:53:37 2025 by rpki-client