$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IY7Rlrzy-ii9xTHihZ6gElfiesU.roa File: IY7Rlrzy-ii9xTHihZ6gElfiesU.roa (raw, json) Hash identifier: szcPaPw/XBKveYt2tXCkfBd6qfFDv1qEdXi9w9xr8fI= Subject key identifier: 21:8E:D1:96:BC:F2:FA:28:BD:C5:31:E2:85:9E:A0:12:57:E2:7A:C5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EEE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IY7Rlrzy-ii9xTHihZ6gElfiesU.roa Signing time: Tue 10 Jun 2025 11:12:37 +0000 ROA not before: Tue 10 Jun 2025 11:12:37 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 211.14.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3822 (0xeee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:12:37 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=218ED196BCF2FA28BDC531E2859EA01257E27AC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:5b:05:75:90:08:ff:c4:25:86:eb:ac:0f: cc:8a:e0:06:40:26:8b:22:9b:a4:cc:d1:06:65:d0: 84:d0:0b:da:64:df:13:54:ea:81:d3:e0:98:ed:40: db:8a:ec:e8:a3:1c:d7:89:79:cb:a6:bd:3b:a5:ec: 41:f8:23:69:b6:dc:9e:13:63:dd:fe:9f:73:80:d3: d1:fb:d0:ff:1f:1b:33:84:04:46:41:cb:75:4e:bf: f1:c3:d0:7f:d9:03:80:6d:64:e2:2b:2c:4b:87:87: b1:6b:15:b9:85:b1:b0:20:c4:a4:eb:b1:a2:5f:89: f9:53:26:25:7c:55:04:03:8a:ea:6a:a6:24:df:34: 74:4a:a6:f9:97:1d:cf:ce:fa:cd:22:07:ef:66:02: 78:b1:72:9e:fd:98:0b:b3:af:9a:cc:48:ec:a8:4c: eb:7c:05:66:03:64:48:3a:2c:7b:6e:3f:fc:49:3a: 23:9b:4e:94:4d:e7:a8:0b:ad:c4:49:84:5d:4e:5a: 7c:3f:f0:fc:7f:50:2f:56:09:4e:4c:0d:20:d7:9e: 38:f3:62:fc:c1:d3:2d:56:88:a1:97:af:98:cc:cc: ef:ed:0e:65:bd:a6:04:ab:c4:19:cb:bf:b1:b0:e7: 77:8a:43:6a:9f:b2:7d:59:f6:b5:a4:89:57:14:25: 73:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8E:D1:96:BC:F2:FA:28:BD:C5:31:E2:85:9E:A0:12:57:E2:7A:C5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IY7Rlrzy-ii9xTHihZ6gElfiesU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.68.0/22 Signature Algorithm: sha256WithRSAEncryption 68:cf:10:ee:0d:91:ac:e4:70:43:c6:2b:64:1d:a5:3f:8e:05: 34:de:97:10:d9:88:c3:7f:81:72:b5:88:81:0f:69:22:58:66: 6c:b3:b4:7c:55:e0:00:21:4d:c6:0b:eb:18:c6:9f:a9:fe:88: 23:6b:58:94:51:97:c0:bd:4f:d8:b8:18:69:6c:c3:ba:50:a5: 22:af:83:da:27:be:19:6d:76:56:fe:9b:84:e0:cb:a6:e9:2c: 4b:7e:55:60:d4:e5:3a:ab:77:c3:48:b3:eb:59:4a:ef:0c:a7: d9:ba:83:f5:c4:28:22:d5:93:c2:3a:fc:cc:be:0b:2a:a0:8a: e7:08:18:bc:a0:15:a0:16:f9:3e:29:b8:86:06:a7:18:46:2c: 45:5e:55:ae:4c:f5:4c:4e:91:53:a4:7e:68:5b:4d:03:39:cb: b4:8f:cc:63:4c:8d:86:af:a1:32:25:4a:e5:94:63:4e:27:fa: 45:c6:05:f5:1e:89:aa:f5:47:8e:90:17:70:99:55:72:0f:5a: 1e:7a:67:4f:c0:ad:55:92:b7:36:cf:22:02:1a:27:a6:a1:fe: 65:d1:ab:d4:c6:7e:8e:80:d8:ba:6e:9e:b1:d0:90:04:49:ab: 67:fd:35:66:b4:e6:bd:4a:cc:c8:a4:7d:f7:6c:ff:d3:1d:18: 9a:a6:e5:fe -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDu4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTEyMzdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDIxOEVEMTk2QkNGMkZB MjhCREM1MzFFMjg1OUVBMDEyNTdFMjdBQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtD1sFdZAI/8QlhuusD8yK4AZAJosim6TM0QZl0ITQC9pk3xNU 6oHT4JjtQNuK7OijHNeJecumvTul7EH4I2m23J4TY93+n3OA09H70P8fGzOEBEZB y3VOv/HD0H/ZA4BtZOIrLEuHh7FrFbmFsbAgxKTrsaJfiflTJiV8VQQDiupqpiTf NHRKpvmXHc/O+s0iB+9mAnixcp79mAuzr5rMSOyoTOt8BWYDZEg6LHtuP/xJOiOb TpRN56gLrcRJhF1OWnw/8Px/UC9WCU5MDSDXnjjzYvzB0y1WiKGXr5jMzO/tDmW9 pgSrxBnLv7Gw53eKQ2qfsn1Z9rWkiVcUJXMvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIY7Rlrzy+ii9xTHihZ6gElfiesUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lZN1Jscnp5LWlpOXhUSGloWjZnRWxmaWVzVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALTDkQwDQYJKoZIhvcNAQELBQADggEBAGjPEO4NkazkcEPGK2QdpT+OBTTe lxDZiMN/gXK1iIEPaSJYZmyztHxV4AAhTcYL6xjGn6n+iCNrWJRRl8C9T9i4GGls w7pQpSKvg9onvhltdlb+m4Tgy6bpLEt+VWDU5Tqrd8NIs+tZSu8Mp9m6g/XEKCLV k8I6/My+CyqgiucIGLygFaAW+T4puIYGpxhGLEVeVa5M9UxOkVOkfmhbTQM5y7SP zGNMjYavoTIlSuWUY04n+kXGBfUeiar1R46QF3CZVXIPWh56Z0/ArVWStzbPIgIa J6ah/mXRq9TGfo6A2LpunrHQkARJq2f9NWa05r1KzMikffds/9MdGJqm5f4= -----END CERTIFICATE-----Generated at Wed Nov 5 15:51:37 2025 by rpki-client