$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MZblZvxBrvLrJTO9JztAYSwiTBA.roa File: MZblZvxBrvLrJTO9JztAYSwiTBA.roa (raw, json) Hash identifier: iteBw8vMJ2qYsqKuDV58rrIRe+AsrKAcc16rnOEqhA0= Subject key identifier: 31:96:E5:66:FC:41:AE:F2:EB:25:33:BD:27:3B:40:61:2C:22:4C:10 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EF1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MZblZvxBrvLrJTO9JztAYSwiTBA.roa Signing time: Tue 10 Jun 2025 11:12:39 +0000 ROA not before: Tue 10 Jun 2025 11:12:39 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3825 (0xef1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:12:39 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=3196E566FC41AEF2EB2533BD273B40612C224C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:85:ab:29:3b:93:a2:46:c2:48:f1:b1:6e:2f: d7:45:ed:12:98:b5:ec:d3:bc:f3:b5:1f:6f:db:81: 28:db:1b:09:6c:ca:8c:80:4b:f6:2b:2f:60:f7:f2: 0b:6f:2f:d6:93:96:f0:3c:0b:06:8f:df:25:98:3b: 71:1b:4a:4e:9c:6d:31:e0:f0:41:b2:d5:aa:52:ac: ef:9e:ca:ee:f3:98:ec:0a:36:1b:79:f3:7b:2b:f6: 10:c2:0c:8e:52:fa:0c:31:43:db:3e:67:76:5b:28: d3:8f:c8:7b:94:03:f0:89:c5:e5:76:94:0a:e6:48: 7e:80:65:bd:46:b0:e5:78:4f:6f:6b:eb:ff:f2:30: 40:88:4b:f7:dc:7f:f3:8c:78:18:c8:bb:5d:99:06: 15:47:d5:1f:18:2e:b6:d2:2c:68:fe:b0:1b:15:cb: 28:48:78:02:c5:53:4a:2f:2c:20:66:4b:10:cc:f8: aa:81:f9:29:13:54:96:cc:a1:e7:86:b3:52:6e:aa: eb:4a:a3:fb:2b:a1:a9:40:39:f9:1f:43:0e:e4:6e: 4b:60:a7:48:4f:c7:c5:94:82:4b:1e:af:f2:78:6e: ef:e1:03:5e:37:5d:ae:04:76:52:ba:f6:99:4f:0f: 4e:7d:a1:32:9a:d2:cb:45:1e:ee:46:68:bc:11:7c: cb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:96:E5:66:FC:41:AE:F2:EB:25:33:BD:27:3B:40:61:2C:22:4C:10 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MZblZvxBrvLrJTO9JztAYSwiTBA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.104.0/24 Signature Algorithm: sha256WithRSAEncryption 32:41:e9:a4:84:eb:ba:bc:dc:85:cf:fb:e3:e2:ed:b0:44:4c: bb:bc:21:a2:97:ae:75:2e:43:5c:93:d1:59:ae:b4:cf:c0:d4: 7a:20:d9:49:ba:7a:d2:fc:75:7d:60:bf:85:51:a3:ef:11:30: 4b:19:fe:4f:24:f7:c9:18:33:f7:89:2a:d0:0f:19:c5:c3:86: 09:91:02:de:dd:8b:8f:ce:dd:bf:37:11:09:d4:5c:98:0e:6b: 61:d4:6f:73:35:3f:b2:1f:1b:91:0b:f7:c0:35:c1:82:a8:91: 5b:17:bf:49:32:db:fb:c0:bd:09:c4:da:c3:08:f7:b6:5b:d1: 37:ba:ac:52:e1:46:89:9d:c8:f6:83:10:05:9f:4f:41:6a:a3: 29:90:08:11:54:f1:66:a5:2d:0a:fc:e8:a7:31:22:ea:97:db: 4f:c7:c2:4e:11:cf:62:e2:00:eb:66:62:dd:f5:83:4b:11:6c: 58:26:88:1b:52:f2:91:46:1a:24:74:3d:e5:e4:f9:05:be:01: 91:ce:7f:59:03:66:9e:e0:72:e5:22:a0:7c:95:a6:13:08:2d: 9c:31:9f:3c:24:ac:74:a0:e5:5f:8e:4a:5a:93:06:13:2d:43: 24:2d:77:6f:1c:39:68:f6:dd:ad:56:bb:74:26:9a:d4:2b:47: 4d:8e:21:9b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDvEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTEyMzlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDMxOTZFNTY2RkM0MUFF RjJFQjI1MzNCRDI3M0I0MDYxMkMyMjRDMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOhaspO5OiRsJI8bFuL9dF7RKYtezTvPO1H2/bgSjbGwlsyoyA S/YrL2D38gtvL9aTlvA8CwaP3yWYO3EbSk6cbTHg8EGy1apSrO+eyu7zmOwKNht5 83sr9hDCDI5S+gwxQ9s+Z3ZbKNOPyHuUA/CJxeV2lArmSH6AZb1GsOV4T29r6//y MECIS/fcf/OMeBjIu12ZBhVH1R8YLrbSLGj+sBsVyyhIeALFU0ovLCBmSxDM+KqB +SkTVJbMoeeGs1JuqutKo/sroalAOfkfQw7kbktgp0hPx8WUgkser/J4bu/hA143 Xa4EdlK69plPD059oTKa0stFHu5GaLwRfMvbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMZblZvxBrvLrJTO9JztAYSwiTBAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L01aYmxadnhCcnZMckpUTzlKenRBWVN3aVRCQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADc0mgwDQYJKoZIhvcNAQELBQADggEBADJB6aSE67q83IXP++Pi7bBETLu8 IaKXrnUuQ1yT0VmutM/A1Hog2Um6etL8dX1gv4VRo+8RMEsZ/k8k98kYM/eJKtAP GcXDhgmRAt7di4/O3b83EQnUXJgOa2HUb3M1P7IfG5EL98A1wYKokVsXv0ky2/vA vQnE2sMI97Zb0Te6rFLhRomdyPaDEAWfT0FqoymQCBFU8WalLQr86KcxIuqX20/H wk4Rz2LiAOtmYt31g0sRbFgmiBtS8pFGGiR0PeXk+QW+AZHOf1kDZp7gcuUioHyV phMILZwxnzwkrHSg5V+OSlqTBhMtQyQtd28cOWj23a1Wu3QmmtQrR02OIZs= -----END CERTIFICATE-----Generated at Sun Jun 22 02:20:43 2025 by rpki-client