$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HnsDD6BNobBvhcpzvmY3wJb3PPU.roa File: HnsDD6BNobBvhcpzvmY3wJb3PPU.roa (raw, json) Hash identifier: R9mlz7WWVMlXrdI+POzWVFs8/QWMDNmlphJSaYCfhms= Subject key identifier: 1E:7B:03:0F:A0:4D:A1:B0:6F:85:CA:73:BE:66:37:C0:96:F7:3C:F5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F88 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HnsDD6BNobBvhcpzvmY3wJb3PPU.roa Signing time: Tue 10 Jun 2025 11:36:17 +0000 ROA not before: Tue 10 Jun 2025 11:36:17 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.158.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3976 (0xf88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:36:17 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=1E7B030FA04DA1B06F85CA73BE6637C096F73CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ab:ce:8f:50:c0:64:6b:45:68:66:bc:3a:62: 99:0c:83:20:c8:aa:a4:98:4f:9d:c5:95:b6:da:96: 31:3e:2f:b2:1c:bc:e7:69:2e:f3:11:76:b2:b2:d2: 88:bd:54:08:ef:1e:8c:4c:02:ca:6d:0a:6a:ff:0f: 7b:ea:d5:c1:c3:1b:35:50:86:1c:cf:ad:7d:76:f4: ff:03:ec:a5:36:43:6e:6d:a2:d5:64:e6:0e:7f:87: a9:d2:83:89:6c:be:f2:0e:cf:be:f5:65:f8:da:e8: b6:42:be:c2:37:19:9b:7e:83:d1:7b:09:ae:b1:59: 2f:13:18:c1:a0:b2:3d:e6:b4:48:8f:ae:69:57:44: 2f:17:c2:c8:f0:ef:96:e8:8d:36:53:a0:e6:14:df: 8b:30:4f:08:5b:83:ff:b3:9f:1f:55:26:46:ad:f7: 91:7f:64:65:c2:53:5b:c0:ef:3e:0c:7a:c0:7f:83: 72:43:5f:67:49:0f:35:bc:91:2b:1b:1c:dd:e8:cf: 0b:c9:ba:b3:49:1e:08:d6:c1:10:d1:13:67:50:d6: 03:50:53:cf:ff:bb:3d:34:f1:d0:b0:03:61:ed:f8: d7:cc:90:88:d0:dc:1d:1a:c2:7a:19:b8:29:d4:c9: 8f:f8:03:d6:85:0b:88:65:da:16:fd:c7:77:57:1f: 40:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7B:03:0F:A0:4D:A1:B0:6F:85:CA:73:BE:66:37:C0:96:F7:3C:F5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HnsDD6BNobBvhcpzvmY3wJb3PPU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.134.0/23 Signature Algorithm: sha256WithRSAEncryption 75:8c:fc:a4:d3:09:54:2d:90:aa:fe:04:a3:7b:9c:d4:c2:b6: ae:3e:0c:12:44:8d:b9:9a:98:00:f8:e0:d4:a5:5b:6c:ab:4e: 56:e5:23:39:07:e0:45:8b:be:b3:b9:4f:f4:37:c2:f1:22:45: 19:c7:90:1e:39:23:ef:a1:40:b0:5a:14:26:fe:1e:e7:e9:b0: 1d:85:5c:c7:25:30:bd:26:a0:00:39:08:d8:75:68:9c:f0:ef: 63:77:0f:8c:7a:d1:2f:f4:1f:80:2a:fa:32:34:d3:db:d4:9a: b1:48:69:4b:b4:1a:78:ac:5e:de:84:f3:f5:e6:46:69:42:ee: 7c:03:a9:14:60:7c:d6:c7:c1:87:be:d9:c3:fc:e6:f1:5d:e6: 09:31:a0:64:21:24:37:b2:40:89:ae:24:59:cf:49:2a:4c:6c: 5d:67:cb:16:07:f2:5a:fe:40:d4:71:96:b3:af:50:f7:52:30: 60:5f:73:de:37:21:84:86:da:76:da:55:15:4c:91:dc:2d:95: 6d:cd:db:11:be:8c:b5:52:5c:fe:e9:ea:fe:b9:0a:59:3d:e8: d6:42:2f:5d:a7:03:2e:d8:44:0c:3c:64:ec:ee:5a:60:a5:1c: 2e:9f:c5:20:b6:f8:bb:4b:1d:b8:b8:a4:98:28:ae:83:33:15: 5d:2d:af:5e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD4gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTM2MTdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDFFN0IwMzBGQTA0REEx QjA2Rjg1Q0E3M0JFNjYzN0MwOTZGNzNDRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVq86PUMBka0VoZrw6YpkMgyDIqqSYT53FlbbaljE+L7IcvOdp LvMRdrKy0oi9VAjvHoxMAsptCmr/D3vq1cHDGzVQhhzPrX129P8D7KU2Q25totVk 5g5/h6nSg4lsvvIOz771Zfja6LZCvsI3GZt+g9F7Ca6xWS8TGMGgsj3mtEiPrmlX RC8Xwsjw75bojTZToOYU34swTwhbg/+znx9VJkat95F/ZGXCU1vA7z4MesB/g3JD X2dJDzW8kSsbHN3ozwvJurNJHgjWwRDRE2dQ1gNQU8//uz008dCwA2Ht+NfMkIjQ 3B0awnoZuCnUyY/4A9aFC4hl2hb9x3dXH0DLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHnsDD6BNobBvhcpzvmY3wJb3PPUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0huc0RENkJOb2JCdmhjcHp2bVkzd0piM1BQVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFunoYwDQYJKoZIhvcNAQELBQADggEBAHWM/KTTCVQtkKr+BKN7nNTCtq4+ DBJEjbmamAD44NSlW2yrTlblIzkH4EWLvrO5T/Q3wvEiRRnHkB45I++hQLBaFCb+ HufpsB2FXMclML0moAA5CNh1aJzw72N3D4x60S/0H4Aq+jI009vUmrFIaUu0Gnis Xt6E8/XmRmlC7nwDqRRgfNbHwYe+2cP85vFd5gkxoGQhJDeyQImuJFnPSSpMbF1n yxYH8lr+QNRxlrOvUPdSMGBfc943IYSG2nbaVRVMkdwtlW3N2xG+jLVSXP7p6v65 Clk96NZCL12nAy7YRAw8ZOzuWmClHC6fxSC2+LtLHbi4pJgoroMzFV0tr14= -----END CERTIFICATE-----Generated at Sun Jun 22 00:56:33 2025 by rpki-client