$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MIBBSYE7hPNh2E68C01HVKuvXn0.roa File: MIBBSYE7hPNh2E68C01HVKuvXn0.roa (raw, json) Hash identifier: VaOTLXzx0Uat5ksC07WK/Yt4Rd4mVJlEjhVrf1pE+QM= Subject key identifier: 30:80:41:49:81:3B:84:F3:61:D8:4E:BC:0B:4D:47:54:AB:AF:5E:7D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F3C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MIBBSYE7hPNh2E68C01HVKuvXn0.roa Signing time: Tue 10 Jun 2025 11:24:39 +0000 ROA not before: Tue 10 Jun 2025 11:24:39 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 219.114.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3900 (0xf3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:39 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=30804149813B84F361D84EBC0B4D4754ABAF5E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:52:9d:e7:b7:03:d4:86:0d:86:9d:fa:95:8b: b3:38:fb:90:90:29:b8:a9:73:10:51:99:58:8f:e7: 1f:1a:c2:51:4d:fc:92:4e:89:9d:76:42:a7:44:f6: 73:e1:a9:ef:39:a0:28:4f:59:a6:72:b0:3e:aa:4c: b8:fd:55:b3:29:43:07:7e:ec:2c:3d:05:cc:7c:b0: 57:db:24:d5:64:fc:d6:a0:3a:72:8a:4f:18:62:5b: 1d:ec:0b:dd:94:a4:d9:2a:e4:12:a8:c9:dd:a0:fa: b6:5e:2c:7c:aa:41:65:3d:6b:a7:ad:b5:81:70:21: 63:d4:de:38:e9:6d:21:1b:8f:5a:51:a4:da:04:58: 8b:6c:ce:b5:be:27:d9:96:14:52:80:dd:01:64:a2: 53:c7:aa:34:56:28:5f:43:da:df:39:bf:84:37:a6: 14:a9:c3:0f:1e:c7:c3:3e:7c:25:0b:bf:02:b1:25: e2:23:89:e1:42:f8:9c:61:73:79:c9:ca:ed:e2:5c: 0b:c4:07:dd:8d:0a:ed:bd:4e:98:37:39:e1:44:6e: d8:be:62:7d:9a:bf:fd:4d:2a:49:62:a8:08:a1:28: 48:fd:ec:b6:71:b1:24:c3:6f:90:9c:5f:a0:1a:b2: ae:70:31:9a:03:82:63:d8:e0:bb:b2:65:f8:1c:16: bb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:80:41:49:81:3B:84:F3:61:D8:4E:BC:0B:4D:47:54:AB:AF:5E:7D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MIBBSYE7hPNh2E68C01HVKuvXn0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.190.0/23 Signature Algorithm: sha256WithRSAEncryption 46:af:1e:47:ac:40:25:a4:d4:61:05:05:a9:4a:b1:0b:51:e5: 83:c8:53:ee:0f:19:43:3c:9d:5c:a9:ff:04:3c:61:c0:15:77: bb:3e:1b:76:b5:0a:a3:96:91:32:7e:73:ba:d0:48:a1:fd:95: 49:f6:89:d6:50:73:07:94:9a:5c:66:7c:74:da:c1:76:65:82: f7:1b:bf:38:b3:4d:18:80:4a:5e:d0:21:4a:04:be:bd:af:db: 42:cb:b2:34:c3:6b:b2:85:96:fe:cc:10:62:87:f9:26:11:9f: 12:cd:a8:96:b6:a4:0d:00:ca:84:e1:b3:33:ba:7a:cf:fc:1d: 70:db:5b:ed:af:bb:dd:1e:83:8e:3f:d1:92:07:57:62:68:bc: cc:db:3a:65:24:69:69:b6:aa:db:4f:6e:04:f2:90:6c:d2:19: f4:ce:35:1b:24:5a:5a:d8:d0:65:4d:a1:a3:ee:ee:15:9d:7c: d2:86:da:34:62:eb:97:50:c7:87:c9:40:09:d5:b1:0d:5d:30: 8b:6b:c9:bc:0c:ba:f0:78:26:f5:7b:e3:fb:dc:c3:5e:62:3c: e7:c4:bd:dc:e1:c3:70:49:12:73:62:9b:79:f9:98:55:e9:ca: 74:df:c9:16:be:21:5e:83:80:cc:fc:75:86:3b:23:06:fa:17: ae:5d:79:ea -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDzwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MzlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDMwODA0MTQ5ODEzQjg0 RjM2MUQ4NEVCQzBCNEQ0NzU0QUJBRjVFN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaUp3ntwPUhg2GnfqVi7M4+5CQKbipcxBRmViP5x8awlFN/JJO iZ12QqdE9nPhqe85oChPWaZysD6qTLj9VbMpQwd+7Cw9Bcx8sFfbJNVk/NagOnKK TxhiWx3sC92UpNkq5BKoyd2g+rZeLHyqQWU9a6ettYFwIWPU3jjpbSEbj1pRpNoE WItszrW+J9mWFFKA3QFkolPHqjRWKF9D2t85v4Q3phSpww8ex8M+fCULvwKxJeIj ieFC+Jxhc3nJyu3iXAvEB92NCu29Tpg3OeFEbti+Yn2av/1NKkliqAihKEj97LZx sSTDb5CcX6Aasq5wMZoDgmPY4LuyZfgcFrvDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMIBBSYE7hPNh2E68C01HVKuvXn0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L01JQkJTWUU3aFBOaDJFNjhDMDFIVkt1dlhuMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHbcr4wDQYJKoZIhvcNAQELBQADggEBAEavHkesQCWk1GEFBalKsQtR5YPI U+4PGUM8nVyp/wQ8YcAVd7s+G3a1CqOWkTJ+c7rQSKH9lUn2idZQcweUmlxmfHTa wXZlgvcbvzizTRiASl7QIUoEvr2v20LLsjTDa7KFlv7MEGKH+SYRnxLNqJa2pA0A yoThszO6es/8HXDbW+2vu90eg44/0ZIHV2JovMzbOmUkaWm2qttPbgTykGzSGfTO NRskWlrY0GVNoaPu7hWdfNKG2jRi65dQx4fJQAnVsQ1dMItrybwMuvB4JvV74/vc w15iPOfEvdzhw3BJEnNim3n5mFXpynTfyRa+IV6DgMz8dYY7Iwb6F65deeo= -----END CERTIFICATE-----Generated at Sun Jun 22 05:05:03 2025 by rpki-client