$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ie7GHxYsSQ5MVUunPXXexs27YAk.roa File: Ie7GHxYsSQ5MVUunPXXexs27YAk.roa (raw, json) Hash identifier: q8RXNNYCzGelA4hbKTJXZXfybjWh1nFLfnSWBYOpTfc= Subject key identifier: 21:EE:C6:1F:16:2C:49:0E:4C:55:4B:A7:3D:75:DE:C6:CD:BB:60:09 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E67 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ie7GHxYsSQ5MVUunPXXexs27YAk.roa Signing time: Tue 10 Jun 2025 10:53:24 +0000 ROA not before: Tue 10 Jun 2025 10:53:24 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 15:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3687 (0xe67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:53:24 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=21EEC61F162C490E4C554BA73D75DEC6CDBB6009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1a:fb:cd:9f:d9:cd:e3:93:08:2a:2d:d8:a0: 9c:b0:e3:0e:cc:32:7f:51:2e:b6:32:f3:78:47:27: 26:f5:c9:db:9d:2f:e3:fb:72:ad:59:9d:48:49:dc: c0:21:f1:dc:34:c8:ac:e8:99:ce:1b:1c:ee:82:86: e6:be:56:31:ad:e9:18:1a:30:63:6f:0d:e5:63:a1: 16:37:19:1e:13:b8:ba:f8:60:2a:b5:0f:68:e8:12: e1:88:02:3c:87:0f:cc:a5:c1:19:79:77:ef:aa:3d: 2e:14:2f:ca:a1:f2:c9:b6:d6:a1:c3:69:96:d1:7e: 62:70:e7:e5:02:ff:91:d8:77:5b:6f:d9:a8:41:4b: 29:01:7e:9e:6c:2d:69:93:e4:7c:59:1c:06:5b:e8: 97:88:42:7f:41:82:76:19:06:93:2f:e5:90:a0:14: 69:3b:fe:bd:8a:11:1d:17:82:1f:1a:b5:8b:63:4d: 75:20:b5:bd:83:c3:e1:cc:be:a1:8e:e6:22:8b:93: 78:89:46:c3:1c:7e:87:b5:29:cb:1e:c9:e1:b9:25: 55:5b:b5:b3:2b:99:a5:48:2d:cf:83:d2:7c:d8:7a: 11:ef:dc:3e:4e:db:c9:30:5e:86:e2:ad:59:5b:23: d8:5b:d3:eb:2c:62:eb:b9:b2:40:a5:c5:f5:7a:57: a8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EE:C6:1F:16:2C:49:0E:4C:55:4B:A7:3D:75:DE:C6:CD:BB:60:09 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ie7GHxYsSQ5MVUunPXXexs27YAk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.108.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:d6:5e:a8:c1:58:9e:ae:2f:21:7e:a5:1b:99:c5:30:56:73: 2b:a7:b5:f0:a4:cf:7c:6b:41:f6:c1:6c:99:81:a5:65:01:f7: 7f:5f:5f:53:03:e6:91:db:d4:af:d9:26:b7:01:cb:f8:5a:02: e3:21:0d:2b:0b:0f:ed:c9:90:42:37:33:e2:60:d0:3c:a3:a0: 21:26:4b:cb:d3:4e:16:f8:7f:0e:26:72:ab:cb:66:ea:80:3f: 97:4b:93:35:da:5f:a2:62:5a:7a:3d:1f:45:ba:72:8f:7a:39: b4:cc:da:9e:13:ee:dc:23:2d:7d:ff:45:b9:b4:cb:1a:06:b8: d6:06:4f:e1:dd:5c:1f:56:ac:36:a5:65:4d:a5:36:41:9d:32: 52:16:6c:85:f7:5e:51:d4:f8:37:1d:38:15:c9:66:73:28:53: 88:6b:5e:46:57:5d:17:73:75:74:c4:e6:72:d6:c3:be:b3:17: c1:0b:e3:c4:64:22:ba:42:cc:f4:cf:01:bf:6b:02:a6:d3:e9: f9:92:82:d4:97:74:90:c0:99:bd:b5:b1:73:6e:57:b7:50:c3: 2b:0d:8a:8e:35:cc:ca:a4:21:57:da:e4:fe:a4:b2:3d:d3:0e: c8:91:20:2a:7f:bd:65:cd:ca:c6:25:3e:5f:d5:41:6e:73:63: 6b:84:94:26 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDmcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDUzMjRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDIxRUVDNjFGMTYyQzQ5 MEU0QzU1NEJBNzNENzVERUM2Q0RCQjYwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3GvvNn9nN45MIKi3YoJyw4w7MMn9RLrYy83hHJyb1ydudL+P7 cq1ZnUhJ3MAh8dw0yKzomc4bHO6Chua+VjGt6RgaMGNvDeVjoRY3GR4TuLr4YCq1 D2joEuGIAjyHD8ylwRl5d++qPS4UL8qh8sm21qHDaZbRfmJw5+UC/5HYd1tv2ahB SykBfp5sLWmT5HxZHAZb6JeIQn9BgnYZBpMv5ZCgFGk7/r2KER0Xgh8atYtjTXUg tb2Dw+HMvqGO5iKLk3iJRsMcfoe1KcseyeG5JVVbtbMrmaVILc+D0nzYehHv3D5O 28kwXobirVlbI9hb0+ssYuu5skClxfV6V6i/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIe7GHxYsSQ5MVUunPXXexs27YAkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0llN0dIeFlzU1E1TVZVdW5QWFhleHMyN1lBay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0mwwDQYJKoZIhvcNAQELBQADggEBAF7WXqjBWJ6uLyF+pRuZxTBWcyun tfCkz3xrQfbBbJmBpWUB939fX1MD5pHb1K/ZJrcBy/haAuMhDSsLD+3JkEI3M+Jg 0DyjoCEmS8vTThb4fw4mcqvLZuqAP5dLkzXaX6JiWno9H0W6co96ObTM2p4T7twj LX3/Rbm0yxoGuNYGT+HdXB9WrDalZU2lNkGdMlIWbIX3XlHU+DcdOBXJZnMoU4hr XkZXXRdzdXTE5nLWw76zF8EL48RkIrpCzPTPAb9rAqbT6fmSgtSXdJDAmb21sXNu V7dQwysNio41zMqkIVfa5P6ksj3TDsiRICp/vWXNysYlPl/VQW5zY2uElCY= -----END CERTIFICATE-----Generated at Sat Jun 21 18:39:50 2025 by rpki-client