$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IVrT6Lz76OmAh-wdsR4IS7ISaqw.roa File: IVrT6Lz76OmAh-wdsR4IS7ISaqw.roa (raw, json) Hash identifier: q3o0iHl4nS4QGYbLsYPp/Kg1ey+sfhcX3NMO+Ko5D1Q= Subject key identifier: 21:5A:D3:E8:BC:FB:E8:E9:80:87:EC:1D:B1:1E:08:4B:B2:12:6A:AC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E98 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IVrT6Lz76OmAh-wdsR4IS7ISaqw.roa Signing time: Tue 10 Jun 2025 11:00:32 +0000 ROA not before: Tue 10 Jun 2025 11:00:32 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 211.14.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3736 (0xe98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:00:32 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=215AD3E8BCFBE8E98087EC1DB11E084BB2126AAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:76:e1:ec:61:7e:7d:31:e5:c8:09:03:4a:4f: cd:7f:09:4b:f2:17:ee:53:f6:b1:42:d9:14:27:95: 71:59:01:35:37:0f:47:a4:c1:04:1e:bf:cc:62:7d: d0:14:8e:1d:5e:5c:96:94:c8:ee:2d:58:ee:19:19: 94:31:55:55:a6:94:f2:d3:4c:56:09:f6:61:38:19: 4b:55:18:e4:55:bc:fe:42:e2:3a:91:24:c5:26:40: 2a:b8:b2:c5:d1:3c:f7:50:11:5d:5c:c9:e1:c6:bd: 7d:54:9b:38:5b:7e:71:0d:60:49:98:0e:0e:2a:9e: 7b:7f:78:4e:22:47:4f:e6:42:0f:ef:cf:71:21:24: 88:f6:78:7a:58:07:ed:90:9d:58:45:4e:06:f2:9e: 6d:37:56:2b:a1:71:a9:96:b6:e4:ae:57:b9:89:ae: 87:dc:8a:34:a8:42:1b:a9:b0:06:58:bd:59:5f:d2: d9:6c:70:e6:cf:17:ec:66:49:04:f1:b0:2b:77:a1: d9:5f:0b:3e:73:1d:e9:97:6d:9a:a4:d5:a4:b8:c2: 12:c6:2d:60:99:bc:d0:dc:14:d1:93:29:e7:f3:d9: c6:d7:ec:cd:ab:08:3e:dd:c5:f8:e4:2e:ee:2b:b4: 3c:0b:25:5e:a6:bc:81:21:77:49:94:44:4b:0c:2a: df:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5A:D3:E8:BC:FB:E8:E9:80:87:EC:1D:B1:1E:08:4B:B2:12:6A:AC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IVrT6Lz76OmAh-wdsR4IS7ISaqw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.79.0/24 Signature Algorithm: sha256WithRSAEncryption 31:0d:f2:33:c6:d5:f0:ee:65:69:93:cd:d6:cc:74:eb:b0:92: cb:fc:61:a7:57:ad:1c:9f:26:e5:8b:01:8d:0b:99:2e:2b:43: aa:eb:5f:db:3b:8d:8a:94:c6:42:0e:e8:ad:b1:6a:92:1b:ad: 2c:d1:42:cc:ab:18:ac:5e:89:1e:8d:81:f7:59:4a:1c:2e:4e: f9:19:13:d2:e4:fe:78:fa:5f:4f:04:ab:2a:ec:51:42:cd:b6: 4b:83:40:ab:b2:26:86:69:28:8d:db:7c:1a:6e:53:ad:fa:09: 15:0b:27:7a:02:5a:e2:26:3e:d5:11:db:f9:45:a1:c8:bd:f5: a2:89:a3:72:82:e8:01:27:92:a8:84:34:85:12:70:06:c8:f4: 94:ef:6b:85:30:06:93:d2:7a:3a:19:30:66:af:42:22:91:5f: 4a:f6:11:aa:7f:2a:3b:78:56:37:21:52:28:9b:e9:0c:a5:74: 36:a3:8b:57:ae:2f:a8:45:f4:86:9f:fc:9d:df:54:90:98:36: bf:52:e1:4e:98:ab:c7:62:1b:93:02:89:45:93:25:ff:49:e8: b5:ed:01:72:37:b1:64:3f:03:97:8c:30:8d:af:e8:80:89:20: 71:62:29:dc:43:e3:96:a4:6e:ee:3b:0a:d1:b1:c8:fe:0c:be: 38:72:df:a5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDpgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTAwMzJaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDIxNUFEM0U4QkNGQkU4 RTk4MDg3RUMxREIxMUUwODRCQjIxMjZBQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3duHsYX59MeXICQNKT81/CUvyF+5T9rFC2RQnlXFZATU3D0ek wQQev8xifdAUjh1eXJaUyO4tWO4ZGZQxVVWmlPLTTFYJ9mE4GUtVGORVvP5C4jqR JMUmQCq4ssXRPPdQEV1cyeHGvX1UmzhbfnENYEmYDg4qnnt/eE4iR0/mQg/vz3Eh JIj2eHpYB+2QnVhFTgbynm03ViuhcamWtuSuV7mJrofcijSoQhupsAZYvVlf0tls cObPF+xmSQTxsCt3odlfCz5zHemXbZqk1aS4whLGLWCZvNDcFNGTKefz2cbX7M2r CD7dxfjkLu4rtDwLJV6mvIEhd0mUREsMKt95AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIVrT6Lz76OmAh+wdsR4IS7ISaqwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lWclQ2THo3Nk9tQWgtd2RzUjRJUzdJU2Fxdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADTDk8wDQYJKoZIhvcNAQELBQADggEBADEN8jPG1fDuZWmTzdbMdOuwksv8 YadXrRyfJuWLAY0LmS4rQ6rrX9s7jYqUxkIO6K2xapIbrSzRQsyrGKxeiR6NgfdZ ShwuTvkZE9Lk/nj6X08EqyrsUULNtkuDQKuyJoZpKI3bfBpuU636CRULJ3oCWuIm PtUR2/lFoci99aKJo3KC6AEnkqiENIUScAbI9JTva4UwBpPSejoZMGavQiKRX0r2 Eap/Kjt4VjchUiib6QyldDaji1euL6hF9Iaf/J3fVJCYNr9S4U6Yq8diG5MCiUWT Jf9J6LXtAXI3sWQ/A5eMMI2v6ICJIHFiKdxD45akbu47CtGxyP4Mvjhy36U= -----END CERTIFICATE-----Generated at Sun Jun 22 02:17:27 2025 by rpki-client