$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IavMJJB52WfHVz8ghuDbAa6tq-M.roa File: IavMJJB52WfHVz8ghuDbAa6tq-M.roa (raw, json) Hash identifier: 4YdwvGGzZRcG6bTsUuj0vWFYAV3stCYvQIBdTsh8Anc= Subject key identifier: 21:AB:CC:24:90:79:D9:67:C7:57:3F:20:86:E0:DB:01:AE:AD:AB:E3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EBD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IavMJJB52WfHVz8ghuDbAa6tq-M.roa Signing time: Tue 10 Jun 2025 11:04:57 +0000 ROA not before: Tue 10 Jun 2025 11:04:57 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3773 (0xebd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:04:57 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=21ABCC249079D967C7573F2086E0DB01AEADABE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:34:66:d9:09:3d:e5:99:eb:ca:cd:5b:e9:59: 6e:8c:ad:29:43:d5:b4:14:96:06:da:bb:94:e4:59: bd:ee:11:a2:f0:9e:2e:03:fa:b6:54:b0:69:1d:78: 7f:59:db:ab:39:89:66:88:f5:72:38:2b:fa:70:7c: 89:3e:e1:26:73:fb:eb:34:86:a0:26:42:3c:dd:2e: 79:2f:cc:af:b4:e0:50:fa:f3:08:0b:ed:db:4d:c7: 83:06:82:1d:f9:33:23:8f:9d:d8:86:15:df:b4:07: 7d:b7:0e:c4:db:e4:4c:9a:d3:0a:a2:b2:a8:fc:42: b7:af:d6:08:5d:d7:c4:99:2f:06:57:02:75:81:6d: 45:85:6b:73:6c:56:41:60:b6:70:f4:db:6e:88:38: 72:04:de:bb:8c:ee:ef:e6:ed:a3:fb:dd:82:a0:c3: a7:58:6d:69:7d:3b:cf:38:b3:72:e0:06:c4:3b:89: c3:81:d0:8e:9f:f3:8d:87:00:42:2b:50:dc:82:c2: b4:52:17:d5:11:25:91:e1:a8:f1:d5:ad:78:14:35: 4a:70:17:c4:d5:28:2f:ba:83:d9:2e:f2:fd:1e:bb: c7:ea:e6:6a:d9:58:23:8b:db:4e:50:2f:f4:be:c3: eb:8b:8a:38:2f:ec:8a:25:90:f2:b1:e2:ea:fa:9d: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AB:CC:24:90:79:D9:67:C7:57:3F:20:86:E0:DB:01:AE:AD:AB:E3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IavMJJB52WfHVz8ghuDbAa6tq-M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.52.0/22 Signature Algorithm: sha256WithRSAEncryption 21:d5:7f:53:ca:10:69:86:d4:97:9a:83:f9:50:ac:96:14:c3: a1:2a:84:88:04:eb:cf:67:34:3c:de:7e:d5:13:1c:70:ea:f9: a6:45:c6:ca:80:e6:ca:22:ba:53:23:8f:1e:df:de:5e:76:1a: 01:5a:8f:d6:83:24:db:38:4f:dd:fe:a4:18:c6:12:a1:a2:62: be:88:5e:21:ba:12:76:d6:1a:46:15:88:b9:52:23:b3:ba:2f: af:81:a2:81:6b:16:e0:94:2d:ec:90:ab:4c:df:a7:d5:3a:08: a2:60:11:d9:69:f1:8d:fe:8f:c2:ed:e7:ac:05:e6:1c:2b:2c: 53:ee:10:ab:b4:68:67:97:ab:0a:c8:9c:48:1a:75:c5:9d:c5: 7c:0e:a1:b2:aa:a3:89:59:48:07:1d:10:1b:20:f6:99:50:32: f4:5f:6d:05:e4:c6:94:b0:93:c1:56:7f:a4:59:33:18:fc:18: 71:45:cb:c1:06:59:1b:5a:ec:51:f8:f0:56:3b:64:46:e4:45: 8f:47:10:06:02:5c:01:6e:0c:df:d2:f6:6d:c1:e3:fb:13:f9: ea:bd:3e:9b:07:2d:40:1a:11:bc:f7:8f:ec:76:2c:b6:77:8d: 31:22:85:75:9c:78:67:d8:af:51:d0:74:44:ec:0c:56:cb:a5: e8:7c:c9:6c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDr0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA0NTdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDIxQUJDQzI0OTA3OUQ5 NjdDNzU3M0YyMDg2RTBEQjAxQUVBREFCRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkNGbZCT3lmevKzVvpWW6MrSlD1bQUlgbau5TkWb3uEaLwni4D +rZUsGkdeH9Z26s5iWaI9XI4K/pwfIk+4SZz++s0hqAmQjzdLnkvzK+04FD68wgL 7dtNx4MGgh35MyOPndiGFd+0B323DsTb5Eya0wqisqj8Qrev1ghd18SZLwZXAnWB bUWFa3NsVkFgtnD0226IOHIE3ruM7u/m7aP73YKgw6dYbWl9O884s3LgBsQ7icOB 0I6f842HAEIrUNyCwrRSF9URJZHhqPHVrXgUNUpwF8TVKC+6g9ku8v0eu8fq5mrZ WCOL205QL/S+w+uLijgv7IolkPKx4ur6nXgnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIavMJJB52WfHVz8ghuDbAa6tq+MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lhdk1KSkI1MldmSFZ6OGdodURiQWE2dHEtTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc0jQwDQYJKoZIhvcNAQELBQADggEBACHVf1PKEGmG1Jeag/lQrJYUw6Eq hIgE689nNDzeftUTHHDq+aZFxsqA5soiulMjjx7f3l52GgFaj9aDJNs4T93+pBjG EqGiYr6IXiG6EnbWGkYViLlSI7O6L6+BooFrFuCULeyQq0zfp9U6CKJgEdlp8Y3+ j8Lt56wF5hwrLFPuEKu0aGeXqwrInEgadcWdxXwOobKqo4lZSAcdEBsg9plQMvRf bQXkxpSwk8FWf6RZMxj8GHFFy8EGWRta7FH48FY7ZEbkRY9HEAYCXAFuDN/S9m3B 4/sT+eq9PpsHLUAaEbz3j+x2LLZ3jTEihXWceGfYr1HQdETsDFbLpeh8yWw= -----END CERTIFICATE-----Generated at Sat Jun 21 05:37:08 2025 by rpki-client