$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IoaMuN8EsGglA1xTs285wcD6bbY.roa File: IoaMuN8EsGglA1xTs285wcD6bbY.roa (raw, json) Hash identifier: hI1hJnWC7vFv4AbEf6i2cgsMlcFHBcyX+g8uTg13j1Q= Subject key identifier: 22:86:8C:B8:DF:04:B0:68:25:03:5C:53:B3:6F:39:C1:C0:FA:6D:B6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EED Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IoaMuN8EsGglA1xTs285wcD6bbY.roa Signing time: Tue 10 Jun 2025 11:12:36 +0000 ROA not before: Tue 10 Jun 2025 11:12:36 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.76.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 14:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3821 (0xeed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:12:36 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=22868CB8DF04B06825035C53B36F39C1C0FA6DB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ea:f3:1f:0f:30:4d:c1:0d:70:35:19:86:79: ab:3b:6f:5d:31:bd:93:8b:a1:08:54:ac:6f:de:5d: 0d:75:ae:fa:76:6f:06:c0:9d:52:db:05:76:4e:f1: 6e:6f:e8:1a:3f:49:05:6c:2c:7b:1f:37:37:64:da: b9:a7:ed:5c:be:08:1f:28:70:b1:f6:c8:b3:ef:50: b6:31:48:48:7d:7a:e4:64:d3:d2:49:60:51:e7:16: fd:b2:96:bc:c8:c8:9b:14:7a:11:99:5a:dc:40:f1: f1:ff:11:e8:a2:32:07:89:62:9a:d3:19:e0:0d:6a: 0e:50:38:90:d4:5d:11:95:09:55:60:88:69:74:d7: 5c:19:63:3f:1d:7b:c6:d4:43:c6:8d:16:0b:2a:7a: bb:39:ff:88:61:54:24:6e:f9:8d:0d:cb:31:38:95: e1:07:6a:77:28:7c:fc:68:b1:33:37:66:43:a1:4e: ad:d5:c9:51:83:fc:fb:e1:27:f4:a0:89:49:d3:87: 5a:99:f0:fd:54:95:2b:89:32:64:0b:95:0f:f3:02: 4b:b4:e5:da:b9:b3:fa:f1:9d:c1:3d:2b:f9:cc:ec: 49:ab:5e:43:d3:5b:4c:41:29:90:d4:bf:1f:ad:84: 86:96:d0:c1:ca:66:08:7e:fa:ab:ab:f5:3f:46:2d: 09:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:86:8C:B8:DF:04:B0:68:25:03:5C:53:B3:6F:39:C1:C0:FA:6D:B6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IoaMuN8EsGglA1xTs285wcD6bbY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.226.0/23 Signature Algorithm: sha256WithRSAEncryption ca:2e:b1:a0:ca:30:85:b8:36:c4:2b:83:05:e5:7f:e9:50:08: 70:71:84:25:36:9e:a8:13:68:a6:42:72:81:f0:0f:66:1a:57: 84:5b:58:84:1a:cd:01:7b:eb:61:98:5c:f9:ec:73:5b:4a:eb: 7c:6d:4c:d9:5a:e4:34:6a:a4:1f:b8:7d:58:6b:a0:56:8f:f9: 47:5a:66:01:64:49:4e:b9:e0:d9:b5:ee:60:4a:7b:ec:85:d2: e6:13:7d:e1:e1:d4:24:5e:05:56:f3:6d:bd:11:a8:98:4b:5b: b2:e9:b3:4e:54:31:43:3e:5a:c1:93:93:17:c6:58:a4:ee:ef: 0f:2a:cb:7f:7a:66:8c:c8:6d:18:49:fb:0d:73:06:ba:2a:c5: e2:72:ec:89:bf:77:63:a9:78:c5:a7:54:e2:32:bc:7d:c4:41: 33:a2:ab:35:e0:e2:91:44:f7:c7:f2:4f:87:49:c1:ef:2c:ef: 5f:37:1c:69:5c:44:5d:ae:11:96:f7:1e:2d:f8:47:f8:77:80: 41:dc:0d:d7:82:ab:a5:62:ce:08:d6:71:e4:48:7a:7c:4c:38: b4:50:1c:d8:d0:fb:62:b7:aa:af:1f:79:08:aa:b2:9f:26:37: 4f:b4:5a:bf:8a:89:2c:f3:43:3d:02:39:cd:af:e2:a0:c8:17: 9c:9d:6d:8d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDu0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTEyMzZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDIyODY4Q0I4REYwNEIw NjgyNTAzNUM1M0IzNkYzOUMxQzBGQTZEQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDu6vMfDzBNwQ1wNRmGeas7b10xvZOLoQhUrG/eXQ11rvp2bwbA nVLbBXZO8W5v6Bo/SQVsLHsfNzdk2rmn7Vy+CB8ocLH2yLPvULYxSEh9euRk09JJ YFHnFv2ylrzIyJsUehGZWtxA8fH/EeiiMgeJYprTGeANag5QOJDUXRGVCVVgiGl0 11wZYz8de8bUQ8aNFgsqers5/4hhVCRu+Y0NyzE4leEHancofPxosTM3ZkOhTq3V yVGD/PvhJ/SgiUnTh1qZ8P1UlSuJMmQLlQ/zAku05dq5s/rxncE9K/nM7EmrXkPT W0xBKZDUvx+thIaW0MHKZgh++qur9T9GLQnnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIoaMuN8EsGglA1xTs285wcD6bbYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lvYU11TjhFc0dnbEExeFRzMjg1d2NENmJiWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTOIwDQYJKoZIhvcNAQELBQADggEBAMousaDKMIW4NsQrgwXlf+lQCHBx hCU2nqgTaKZCcoHwD2YaV4RbWIQazQF762GYXPnsc1tK63xtTNla5DRqpB+4fVhr oFaP+UdaZgFkSU654Nm17mBKe+yF0uYTfeHh1CReBVbzbb0RqJhLW7Lps05UMUM+ WsGTkxfGWKTu7w8qy396ZozIbRhJ+w1zBroqxeJy7Im/d2OpeMWnVOIyvH3EQTOi qzXg4pFE98fyT4dJwe8s7183HGlcRF2uEZb3Hi34R/h3gEHcDdeCq6VizgjWceRI enxMOLRQHNjQ+2K3qq8feQiqsp8mN0+0Wr+KiSzzQz0COc2v4qDIF5ydbY0= -----END CERTIFICATE-----Generated at Sat Jun 21 16:00:31 2025 by rpki-client