$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/N9oV0vNMMHaGlZlfU1sxrCX7JCY.roa File: N9oV0vNMMHaGlZlfU1sxrCX7JCY.roa (raw, json) Hash identifier: Rlm0E2whZo0Rb4xof/qodyIr9r/h4OEF8i8BbOPqias= Subject key identifier: 37:DA:15:D2:F3:4C:30:76:86:95:99:5F:53:5B:31:AC:25:FB:24:26 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F00 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N9oV0vNMMHaGlZlfU1sxrCX7JCY.roa Signing time: Tue 10 Jun 2025 11:16:46 +0000 ROA not before: Tue 10 Jun 2025 11:16:46 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 27.230.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3840 (0xf00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:46 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=37DA15D2F34C30768695995F535B31AC25FB2426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d9:92:f5:83:ea:8b:a2:2f:31:a0:b1:de:e4: eb:b7:0d:48:66:b8:84:1b:51:4f:d9:4c:34:88:09: e8:c3:e8:6d:73:6b:a3:9e:02:b3:12:0b:d9:ab:4a: e2:b0:64:d1:71:59:e5:31:9b:e9:60:82:4d:c9:d7: 7a:59:79:d1:2a:05:5b:14:75:4f:6b:a5:b5:e8:f1: 73:bc:a4:0a:2b:7b:cf:cd:67:ef:75:7d:7b:85:3f: f8:37:48:03:8e:33:c5:5d:44:2b:59:7b:20:a8:db: b3:ae:03:41:66:58:13:e9:30:29:3a:0d:69:47:e1: 9c:1a:8a:54:f7:ae:b7:9d:57:3b:fe:fd:dd:ea:db: e4:39:f9:26:b1:24:f6:f6:f5:ad:06:1f:41:b9:47: 5e:0e:6f:c6:30:a5:78:4d:d9:ff:71:b9:17:3b:8e: d5:0b:5c:b5:9a:f5:e2:6d:f2:09:b5:09:4e:9a:f0: bd:d1:13:83:88:ae:9d:c6:dc:9b:f9:1e:7d:83:f9: 23:22:2f:7a:1a:00:bd:73:bf:1d:05:8f:2b:e1:f3: 5e:1b:2c:23:b7:4c:7d:91:75:76:d8:30:d0:c1:ac: a6:63:62:56:79:e4:7d:91:49:d8:5d:a1:c4:5c:62: 2d:b8:5d:f8:c4:45:0f:15:a9:ae:ed:32:08:3f:68: a1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DA:15:D2:F3:4C:30:76:86:95:99:5F:53:5B:31:AC:25:FB:24:26 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N9oV0vNMMHaGlZlfU1sxrCX7JCY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.50.0/23 Signature Algorithm: sha256WithRSAEncryption 24:24:7e:b4:3a:e2:f3:04:1d:03:e4:b4:d5:c4:98:a1:00:4e: 51:bd:be:36:29:d4:a2:95:e4:c4:ad:64:dd:5e:d9:4f:db:e3: 1e:30:8e:76:11:8b:f0:4f:15:13:4b:25:29:a8:3f:5a:8f:eb: d3:d6:41:ae:53:2d:03:56:bf:e5:af:03:6e:e0:5c:45:56:c7: a7:4c:8f:8a:da:d7:0d:e6:4a:fa:58:8e:c6:25:73:86:4c:7c: 37:e6:e0:34:ee:34:c4:75:17:d5:09:0e:35:19:63:89:99:70: 47:f6:62:a9:2a:ea:e0:83:1b:cd:31:8e:06:04:5c:ca:07:8e: aa:d2:8f:b0:e1:64:18:90:10:b1:9c:e9:f0:11:39:79:3a:58: fe:5e:ef:09:82:5e:e8:a6:89:4b:8f:67:6b:3a:79:df:0a:c2: 52:40:30:dd:bd:b2:1f:dc:ed:c8:9d:04:8a:ff:7e:a6:89:59: 72:b5:97:28:f0:0a:5a:12:a3:b3:8b:27:87:f5:92:b0:a2:2b: be:70:7f:3f:4e:36:9b:1c:f2:48:a9:da:5d:bd:8c:7d:fb:f1: 78:3e:19:aa:bb:ee:cf:65:84:9d:6d:68:30:31:49:83:6b:7e: fe:13:15:cb:f7:ab:eb:2e:2d:12:09:f4:b3:2b:33:1c:2a:45: 4b:b5:3a:27 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDwAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NDZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDM3REExNUQyRjM0QzMw NzY4Njk1OTk1RjUzNUIzMUFDMjVGQjI0MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCR2ZL1g+qLoi8xoLHe5Ou3DUhmuIQbUU/ZTDSICejD6G1za6Oe ArMSC9mrSuKwZNFxWeUxm+lggk3J13pZedEqBVsUdU9rpbXo8XO8pAore8/NZ+91 fXuFP/g3SAOOM8VdRCtZeyCo27OuA0FmWBPpMCk6DWlH4ZwailT3rredVzv+/d3q 2+Q5+SaxJPb29a0GH0G5R14Ob8YwpXhN2f9xuRc7jtULXLWa9eJt8gm1CU6a8L3R E4OIrp3G3Jv5Hn2D+SMiL3oaAL1zvx0Fjyvh814bLCO3TH2RdXbYMNDBrKZjYlZ5 5H2RSdhdocRcYi24XfjERQ8Vqa7tMgg/aKGJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUN9oV0vNMMHaGlZlfU1sxrCX7JCYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L045b1Ywdk5NTUhhR2xabGZVMXN4ckNYN0pDWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEb5jIwDQYJKoZIhvcNAQELBQADggEBACQkfrQ64vMEHQPktNXEmKEATlG9 vjYp1KKV5MStZN1e2U/b4x4wjnYRi/BPFRNLJSmoP1qP69PWQa5TLQNWv+WvA27g XEVWx6dMj4ra1w3mSvpYjsYlc4ZMfDfm4DTuNMR1F9UJDjUZY4mZcEf2Yqkq6uCD G80xjgYEXMoHjqrSj7DhZBiQELGc6fAROXk6WP5e7wmCXuimiUuPZ2s6ed8KwlJA MN29sh/c7cidBIr/fqaJWXK1lyjwCloSo7OLJ4f1krCiK75wfz9ONpsc8kip2l29 jH378Xg+Gaq77s9lhJ1taDAxSYNrfv4TFcv3q+suLRIJ9LMrMxwqRUu1Oic= -----END CERTIFICATE-----Generated at Sun Jun 22 03:54:21 2025 by rpki-client