$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/M-xWhP3Fn7Zkna4v9D4m8vzsC54.roa File: M-xWhP3Fn7Zkna4v9D4m8vzsC54.roa (raw, json) Hash identifier: 2IndCPLNXNdURrJH+S9Mk4+YUuLhDL5aYsmjrBpllZk= Subject key identifier: 33:EC:56:84:FD:C5:9F:B6:64:9D:AE:2F:F4:3E:26:F2:FC:EC:0B:9E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E64 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M-xWhP3Fn7Zkna4v9D4m8vzsC54.roa Signing time: Tue 10 Jun 2025 10:53:23 +0000 ROA not before: Tue 10 Jun 2025 10:53:23 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.158.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3684 (0xe64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:53:23 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=33EC5684FDC59FB6649DAE2FF43E26F2FCEC0B9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:8f:f6:47:cf:03:03:29:55:7e:bc:08:95: c4:64:c4:0d:e9:0f:04:8a:c0:e7:89:da:7c:9c:bd: 83:e6:05:bb:48:c2:95:ba:e8:78:bc:aa:74:d6:01: b7:06:3a:ff:1c:96:01:c9:94:0b:85:e7:5b:9e:be: 12:7a:be:66:c4:05:6d:ec:c4:61:c2:3b:ee:2d:fa: 19:5b:d7:3a:86:7e:be:22:8a:f7:75:48:e3:f6:8d: 2c:8c:cc:cc:0f:36:92:80:d0:67:b3:60:25:b0:0f: 17:c9:7f:08:7a:7a:4d:be:26:7d:8b:03:68:4b:c7: 5e:87:41:43:57:08:1e:28:c5:37:b2:30:04:57:98: fe:8e:a8:3e:d8:66:45:4a:0a:d1:e6:53:a6:f7:5a: c1:5f:1c:27:f6:3a:56:f1:d8:b5:a0:35:85:df:70: c8:0e:17:79:d8:c4:1f:18:9b:e3:a7:79:83:82:1e: da:92:11:14:8b:1d:1a:92:98:bd:82:00:04:c8:a5: 3f:62:1b:2d:38:2b:89:9c:b6:11:24:cb:09:8a:54: f9:59:67:63:89:20:d9:e8:72:9f:0d:a0:8f:0e:96: 38:e9:6e:0c:c1:67:86:30:8d:1e:51:b6:bf:be:8a: d7:9c:be:23:ef:b3:17:04:36:d5:b3:7f:7b:70:a1: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EC:56:84:FD:C5:9F:B6:64:9D:AE:2F:F4:3E:26:F2:FC:EC:0B:9E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M-xWhP3Fn7Zkna4v9D4m8vzsC54.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.192.0/19 Signature Algorithm: sha256WithRSAEncryption 93:e6:c4:3d:aa:2a:5d:5d:3d:cc:05:d6:d8:f8:62:68:66:4b: bc:8b:99:cf:e9:59:77:b1:33:a5:52:f9:af:b9:d8:f7:ff:a1: cd:01:aa:64:4b:d9:3a:62:5a:8a:f9:b2:91:ba:7f:df:a5:de: 46:9b:d5:05:96:a4:e2:53:d5:2e:f4:47:96:e8:4b:63:8e:e7: 70:1e:79:3a:94:a6:f0:70:83:f3:72:5f:d5:5b:12:0d:f5:37: fa:28:2e:0c:72:34:cf:02:90:1b:81:77:12:f8:0b:63:21:1b: 4e:d5:79:f3:54:1f:0f:02:bf:22:1e:91:3c:46:dc:75:92:a3: a4:15:f0:1c:3d:44:bb:48:c5:a1:a7:af:12:38:b5:90:dd:aa: 00:93:98:7c:76:ee:ef:ad:9d:ec:06:04:64:34:5e:24:96:b6: 78:fd:65:63:11:36:cd:b4:fc:66:b7:28:95:41:73:b7:68:2b: dc:23:73:be:fb:b4:12:f0:ea:e4:c6:c1:a7:40:bc:a4:8b:c7: be:37:54:e1:3d:6e:06:3e:52:27:d8:98:96:bd:6b:98:cf:94: 5d:e7:c6:e4:1a:f3:ec:c5:f1:78:4e:c2:3d:25:e3:52:c8:6b: 76:50:ce:58:c5:c3:c9:dd:3f:c3:eb:ae:99:d3:88:48:fd:9b: c4:8f:ec:ea -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDUzMjNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDMzRUM1Njg0RkRDNTlG QjY2NDlEQUUyRkY0M0UyNkYyRkNFQzBCOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq+4/2R88DAylVfrwIlcRkxA3pDwSKwOeJ2nycvYPmBbtIwpW6 6Hi8qnTWAbcGOv8clgHJlAuF51uevhJ6vmbEBW3sxGHCO+4t+hlb1zqGfr4iivd1 SOP2jSyMzMwPNpKA0GezYCWwDxfJfwh6ek2+Jn2LA2hLx16HQUNXCB4oxTeyMARX mP6OqD7YZkVKCtHmU6b3WsFfHCf2Olbx2LWgNYXfcMgOF3nYxB8Ym+OneYOCHtqS ERSLHRqSmL2CAATIpT9iGy04K4mcthEkywmKVPlZZ2OJINnocp8NoI8OljjpbgzB Z4YwjR5Rtr++itecviPvsxcENtWzf3twoX2tAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUM+xWhP3Fn7Zkna4v9D4m8vzsC54wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L00teFdoUDNGbjdaa25hNHY5RDRtOHZ6c0M1NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVunsAwDQYJKoZIhvcNAQELBQADggEBAJPmxD2qKl1dPcwF1tj4YmhmS7yL mc/pWXexM6VS+a+52Pf/oc0BqmRL2TpiWor5spG6f9+l3kab1QWWpOJT1S70R5bo S2OO53AeeTqUpvBwg/NyX9VbEg31N/ooLgxyNM8CkBuBdxL4C2MhG07VefNUHw8C vyIekTxG3HWSo6QV8Bw9RLtIxaGnrxI4tZDdqgCTmHx27u+tnewGBGQ0XiSWtnj9 ZWMRNs20/Ga3KJVBc7doK9wjc777tBLw6uTGwadAvKSLx743VOE9bgY+UifYmJa9 a5jPlF3nxuQa8+zF8XhOwj0l41LIa3ZQzljFw8ndP8PrrpnTiEj9m8SP7Oo= -----END CERTIFICATE-----Generated at Sun Jun 22 02:22:30 2025 by rpki-client