$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MscxfD_UZLZCjli8kVqe2zY8JWI.roa File: MscxfD_UZLZCjli8kVqe2zY8JWI.roa (raw, json) Hash identifier: TNOr0ORJhPfsE3OlJcaWEcAUdPnSVFlhpe8T2a6KKr8= Subject key identifier: 32:C7:31:7C:3F:D4:64:B6:42:8E:58:BC:91:5A:9E:DB:36:3C:25:62 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E8A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MscxfD_UZLZCjli8kVqe2zY8JWI.roa Signing time: Tue 10 Jun 2025 10:56:51 +0000 ROA not before: Tue 10 Jun 2025 10:56:51 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.161.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3722 (0xe8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:56:51 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=32C7317C3FD464B6428E58BC915A9EDB363C2562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:8d:94:18:4d:79:d5:d0:4e:37:9b:a3:8d: 5c:95:15:39:e2:6a:74:34:dc:13:44:6a:85:1f:b4: e1:cb:49:b0:ea:49:9e:00:eb:40:c5:42:44:c3:eb: 91:b8:f4:c1:c9:82:42:c0:5e:3d:4f:07:d5:98:e5: b9:94:50:b8:3c:9e:28:57:6f:b1:c1:7d:9c:79:ff: eb:63:cd:2e:31:1d:e9:22:2c:77:80:4e:17:d0:c6: d2:9b:14:09:5e:3f:97:24:1a:28:89:07:d7:7f:a8: 49:e4:f4:5e:a6:b6:61:53:37:d3:7f:7d:41:99:7a: 31:ac:43:44:45:8e:9c:ec:6d:87:14:12:cf:cf:ce: 25:dd:33:f7:a4:cb:de:12:0f:3b:fb:73:e2:7e:47: 70:19:0e:fa:60:c2:59:67:ba:b0:2a:36:96:33:42: b0:84:f4:fc:d4:83:8b:52:7c:15:44:52:da:f3:52: 17:36:e4:89:e9:27:49:41:33:ff:24:4a:83:ec:9d: b9:b1:e1:51:b3:4c:38:53:72:17:59:10:6a:d5:48: ca:12:ef:1b:69:71:df:1d:88:ec:b0:47:a7:15:14: 20:8b:f4:81:8a:e4:dd:4f:01:5e:de:89:c9:2e:34: ff:91:6a:8f:8d:be:09:47:ee:43:df:9c:58:51:fd: 85:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C7:31:7C:3F:D4:64:B6:42:8E:58:BC:91:5A:9E:DB:36:3C:25:62 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MscxfD_UZLZCjli8kVqe2zY8JWI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.224.0/20 Signature Algorithm: sha256WithRSAEncryption 91:c4:35:fa:f3:b7:19:ff:c1:51:ce:dc:7e:7d:3d:85:15:b6: 49:d1:d2:62:cf:6b:09:53:67:21:c3:d1:d9:9f:82:45:d2:fa: 0e:06:0e:0e:42:a6:de:3b:51:98:6a:be:1a:18:9a:af:f5:e5: 56:a2:8b:e5:e5:8f:70:18:87:1e:5d:73:1d:52:a6:54:af:9a: c7:84:81:bc:17:ef:17:a7:cd:8c:5f:37:c4:4b:7c:2b:30:c7: 67:0c:8a:14:0b:d9:63:73:fd:f5:53:f5:5b:27:ef:2f:21:93: a0:d9:6d:3f:50:d9:ac:63:c7:63:6b:b8:99:2f:b5:bf:bc:2b: 84:a6:7a:38:97:5a:2d:77:a7:4e:35:a2:b2:0e:28:73:8a:31: b3:7f:36:fc:84:61:f0:bc:b9:85:66:e7:30:e3:4c:40:96:bc: e6:ec:7c:92:d6:a0:66:31:ec:36:be:7f:eb:69:0f:ef:de:5b: 5a:5e:89:b9:3d:45:e2:58:60:db:c3:1b:e8:39:30:bf:f1:90: a0:81:d3:a8:bc:63:bc:f1:2f:0a:a8:a3:1d:8e:70:e2:58:c9: 97:2e:71:69:07:a8:6f:66:a8:db:48:69:99:13:37:b6:8b:95: 9a:c5:7e:08:1c:c2:c6:26:5e:06:1e:2a:49:f4:37:20:78:54: 32:6a:0f:d9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDU2NTFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDMyQzczMTdDM0ZENDY0 QjY0MjhFNThCQzkxNUE5RURCMzYzQzI1NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm7Y2UGE151dBON5ujjVyVFTnianQ03BNEaoUftOHLSbDqSZ4A 60DFQkTD65G49MHJgkLAXj1PB9WY5bmUULg8nihXb7HBfZx5/+tjzS4xHekiLHeA ThfQxtKbFAleP5ckGiiJB9d/qEnk9F6mtmFTN9N/fUGZejGsQ0RFjpzsbYcUEs/P ziXdM/eky94SDzv7c+J+R3AZDvpgwllnurAqNpYzQrCE9PzUg4tSfBVEUtrzUhc2 5InpJ0lBM/8kSoPsnbmx4VGzTDhTchdZEGrVSMoS7xtpcd8diOywR6cVFCCL9IGK 5N1PAV7eickuNP+Rao+NvglH7kPfnFhR/YUPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMscxfD/UZLZCjli8kVqe2zY8JWIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L01zY3hmRF9VWkxaQ2psaThrVnFlMnpZOEpXSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARuoeAwDQYJKoZIhvcNAQELBQADggEBAJHENfrztxn/wVHO3H59PYUVtknR 0mLPawlTZyHD0dmfgkXS+g4GDg5Cpt47UZhqvhoYmq/15Vaii+Xlj3AYhx5dcx1S plSvmseEgbwX7xenzYxfN8RLfCswx2cMihQL2WNz/fVT9Vsn7y8hk6DZbT9Q2axj x2NruJkvtb+8K4SmejiXWi13p041orIOKHOKMbN/NvyEYfC8uYVm5zDjTECWvObs fJLWoGYx7Da+f+tpD+/eW1peibk9ReJYYNvDG+g5ML/xkKCB06i8Y7zxLwqoox2O cOJYyZcucWkHqG9mqNtIaZkTN7aLlZrFfggcwsYmXgYeKkn0NyB4VDJqD9k= -----END CERTIFICATE-----Generated at Sun Jun 22 06:34:53 2025 by rpki-client