$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hpv5_rqX1RphzJJ9dXu-qIAzYsc.roa File: Hpv5_rqX1RphzJJ9dXu-qIAzYsc.roa (raw, json) Hash identifier: Gb5ubrVO8yN7QtrN7P2X9TC2WaoEwPRBHfBxThb2HwQ= Subject key identifier: 1E:9B:F9:FE:BA:97:D5:1A:61:CC:92:7D:75:7B:BE:A8:80:33:62:C7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EB1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hpv5_rqX1RphzJJ9dXu-qIAzYsc.roa Signing time: Tue 10 Jun 2025 11:04:50 +0000 ROA not before: Tue 10 Jun 2025 11:04:50 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.66.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3761 (0xeb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:04:50 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=1E9BF9FEBA97D51A61CC927D757BBEA8803362C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:14:b7:4a:0c:c2:09:fb:dc:ac:41:b7:3f: d7:81:31:91:2e:67:83:c4:02:97:20:97:fd:a5:56: 90:3d:2b:b8:b9:b5:23:2f:45:3b:83:1f:ea:b4:ea: a9:8f:ab:19:93:84:e6:07:05:88:9f:44:d8:0d:05: 86:71:2e:2c:ff:ec:98:8c:ef:a1:77:9c:0c:4c:be: 74:7c:72:af:7e:d7:18:b5:15:67:00:1d:c8:60:28: 97:99:ea:43:68:de:00:97:6e:bd:7a:7e:b5:dd:4d: 2f:1a:cc:31:25:c9:38:9f:ae:34:75:8b:f6:2a:76: 13:bb:2a:d1:81:da:3a:fe:90:f8:78:42:43:84:a5: 7b:2a:b9:1d:1c:b2:c5:43:e8:e1:62:f9:18:e2:fd: 1e:84:b9:ef:6a:91:ad:68:82:2e:10:68:04:af:ca: c5:6f:f4:c5:5e:69:f7:f0:43:90:49:d9:d8:c6:d8: e5:54:37:4d:db:bf:d0:3d:8d:bb:5a:7c:b9:53:ac: ec:4f:d5:88:72:b2:99:80:ba:de:8d:24:41:f1:e6: f5:61:1f:8a:83:89:1a:71:69:c7:2c:0b:f7:f5:0b: 16:28:a0:82:e2:e8:31:85:55:db:43:cd:9f:3e:d6: b9:f1:4a:81:b5:db:61:c1:e9:47:49:a4:e8:55:0a: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9B:F9:FE:BA:97:D5:1A:61:CC:92:7D:75:7B:BE:A8:80:33:62:C7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hpv5_rqX1RphzJJ9dXu-qIAzYsc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.192.0/18 Signature Algorithm: sha256WithRSAEncryption 37:73:2b:c1:1c:74:f1:e2:67:79:ad:47:00:6f:b4:ed:93:7a: 39:99:4b:fb:a9:9b:b3:90:1c:a3:10:ee:71:24:9d:df:fd:7b: db:ea:ce:f4:13:fb:cf:e3:ca:cd:3b:d7:12:5f:ff:8d:6d:27: ed:f3:ab:27:4d:0c:39:97:18:00:b6:0f:61:d5:46:b3:c5:66: 63:29:2d:cd:50:a2:74:bf:54:da:86:57:66:2d:2d:1d:d4:15: b8:1d:79:8c:47:26:e2:96:c5:82:45:8b:fa:3a:4b:9c:b4:70: 15:0e:ed:60:fa:a4:5b:01:4a:cc:71:e3:d1:48:00:ea:17:83: de:9c:7d:36:7d:16:aa:b3:c7:b9:f5:f1:07:9d:81:b2:62:09: 5a:5f:74:60:63:c4:58:95:fd:14:74:78:34:03:c8:2c:67:fd: 77:01:11:d2:4b:da:45:b1:22:ab:5d:7e:09:ec:ca:af:af:f9: e4:13:33:5b:93:64:68:fa:20:93:c3:1b:4b:5a:44:c5:4e:62: 3d:b2:93:1c:78:51:8f:8e:82:d2:36:27:50:b2:b8:ba:da:2c: 4c:6e:22:ac:df:bf:af:a9:af:a2:51:4b:06:d9:29:25:71:72: f3:57:22:e4:9c:e9:25:c1:4d:62:47:86:27:c3:36:aa:02:30: 37:28:6b:38 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDrEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA0NTBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDFFOUJGOUZFQkE5N0Q1 MUE2MUNDOTI3RDc1N0JCRUE4ODAzMzYyQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFAxS3SgzCCfvcrEG3P9eBMZEuZ4PEApcgl/2lVpA9K7i5tSMv RTuDH+q06qmPqxmThOYHBYifRNgNBYZxLiz/7JiM76F3nAxMvnR8cq9+1xi1FWcA HchgKJeZ6kNo3gCXbr16frXdTS8azDElyTifrjR1i/YqdhO7KtGB2jr+kPh4QkOE pXsquR0cssVD6OFi+Rji/R6Eue9qka1ogi4QaASvysVv9MVeaffwQ5BJ2djG2OVU N03bv9A9jbtafLlTrOxP1YhyspmAut6NJEHx5vVhH4qDiRpxaccsC/f1CxYooILi 6DGFVdtDzZ8+1rnxSoG122HB6UdJpOhVCrHVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHpv5/rqX1RphzJJ9dXu+qIAzYscwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hwdjVfcnFYMVJwaHpKSjlkWHUtcUlBellzYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYBQsAwDQYJKoZIhvcNAQELBQADggEBADdzK8EcdPHiZ3mtRwBvtO2TejmZ S/upm7OQHKMQ7nEknd/9e9vqzvQT+8/jys071xJf/41tJ+3zqydNDDmXGAC2D2HV RrPFZmMpLc1QonS/VNqGV2YtLR3UFbgdeYxHJuKWxYJFi/o6S5y0cBUO7WD6pFsB Ssxx49FIAOoXg96cfTZ9Fqqzx7n18QedgbJiCVpfdGBjxFiV/RR0eDQDyCxn/XcB EdJL2kWxIqtdfgnsyq+v+eQTM1uTZGj6IJPDG0taRMVOYj2ykxx4UY+OgtI2J1Cy uLraLExuIqzfv6+pr6JRSwbZKSVxcvNXIuSc6SXBTWJHhifDNqoCMDcoazg= -----END CERTIFICATE-----Generated at Sun Jun 22 00:31:30 2025 by rpki-client