$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RIzT4UsnFtkLH5AW-2-sqlQg9Dg.roa File: RIzT4UsnFtkLH5AW-2-sqlQg9Dg.roa (raw, json) Hash identifier: sEfDb4BAwC/I2vROSK9UpYo9EY10d/6vC0c0T3of4Sc= Subject key identifier: 44:8C:D3:E1:4B:27:16:D9:0B:1F:90:16:FB:6F:AC:AA:54:20:F4:38 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E57 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RIzT4UsnFtkLH5AW-2-sqlQg9Dg.roa Signing time: Tue 10 Jun 2025 10:47:51 +0000 ROA not before: Tue 10 Jun 2025 10:47:51 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.66.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3671 (0xe57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:47:51 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=448CD3E14B2716D90B1F9016FB6FACAA5420F438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:15:3b:ae:bd:62:55:6e:2c:e5:27:db:51:70: 18:a3:38:f0:67:31:23:83:20:0b:36:b9:fc:ec:da: 56:cc:d4:cc:b2:88:e1:f7:5a:cd:60:27:de:2a:f3: 0e:79:2a:31:d2:0a:a0:10:b6:a6:7b:43:25:de:cb: 5e:e2:7f:c8:5e:52:37:d6:c3:48:da:7c:f7:40:62: dc:4a:7b:4e:77:25:f2:1c:ba:7b:b8:cd:43:09:7e: 1a:7b:a5:16:ea:c1:12:1d:a0:c8:53:92:e8:c0:a5: 85:1a:c5:28:26:ef:95:1a:90:5c:9b:60:b5:2d:52: cf:c0:e7:9a:99:16:6c:60:0c:33:ff:e7:01:3a:14: eb:a0:e6:f2:1d:f3:8e:00:8d:95:38:f6:f4:94:6e: c7:d3:b1:3f:3f:37:4f:8d:80:45:5e:fe:11:23:c5: ab:2c:e6:45:b8:2b:61:0e:22:6c:cf:93:1e:45:ec: 16:35:c8:70:a1:69:cf:2d:2f:0f:0f:a0:45:65:eb: 79:6e:9c:32:e6:a0:d2:c4:c8:35:56:c5:99:54:9c: 08:38:10:49:fb:19:e6:4f:ca:55:6f:d2:63:b9:20: c5:0a:a5:b7:01:cd:48:ca:33:43:a2:10:b8:97:38: 25:da:63:07:b2:8f:86:54:55:f8:3c:d0:cd:53:0d: 43:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8C:D3:E1:4B:27:16:D9:0B:1F:90:16:FB:6F:AC:AA:54:20:F4:38 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RIzT4UsnFtkLH5AW-2-sqlQg9Dg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.22.0/23 Signature Algorithm: sha256WithRSAEncryption 44:9c:d1:bd:85:7c:dd:d6:62:bc:f1:ea:b9:ba:91:c5:68:76: 18:2a:93:03:8f:88:4a:6e:0e:fe:91:2d:f2:e1:29:df:27:00: 12:e4:d1:62:6d:84:b4:ad:57:e3:d0:1c:d0:93:75:eb:02:ee: e5:7d:c4:0e:bd:d0:b5:e3:98:64:d9:0b:0f:01:4c:68:81:0a: a8:01:5a:8e:a3:13:99:38:b2:f5:be:d4:55:2b:62:c3:f1:ce: a4:70:16:e3:f9:46:fd:f5:db:1d:36:3a:2c:87:d8:80:d1:0a: aa:20:24:e8:93:fd:19:4a:1c:1f:b4:cf:76:a6:09:4f:a1:b7: e1:90:03:0d:c4:6e:24:c3:a6:60:99:00:e4:8a:ab:e5:fc:96: d4:7f:bd:4a:b0:f0:b8:32:42:50:75:4a:ab:42:e0:c3:ac:76: 6f:ae:0a:1d:7e:e9:2d:55:08:ee:86:ac:58:43:3d:c8:93:72: 49:6f:be:a9:f6:c4:79:29:20:f3:31:7a:2a:30:65:26:9a:cb: 2f:98:52:08:6f:b0:af:6b:7c:ca:41:83:04:b4:d5:02:7b:90: 7d:f1:e1:15:8d:04:59:77:07:21:e6:2a:61:dc:ab:ae:ee:86: 74:2f:a8:fa:48:c2:4c:de:92:35:44:f3:dd:08:25:98:ca:86: f6:0e:03:4a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDlcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDQ3NTFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDQ0OENEM0UxNEIyNzE2 RDkwQjFGOTAxNkZCNkZBQ0FBNTQyMEY0MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhFTuuvWJVbizlJ9tRcBijOPBnMSODIAs2ufzs2lbM1MyyiOH3 Ws1gJ94q8w55KjHSCqAQtqZ7QyXey17if8heUjfWw0jafPdAYtxKe053JfIcunu4 zUMJfhp7pRbqwRIdoMhTkujApYUaxSgm75UakFybYLUtUs/A55qZFmxgDDP/5wE6 FOug5vId844AjZU49vSUbsfTsT8/N0+NgEVe/hEjxass5kW4K2EOImzPkx5F7BY1 yHChac8tLw8PoEVl63lunDLmoNLEyDVWxZlUnAg4EEn7GeZPylVv0mO5IMUKpbcB zUjKM0OiELiXOCXaYweyj4ZUVfg80M1TDUMNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURIzT4UsnFtkLH5AW+2+sqlQg9DgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1JJelQ0VXNuRnRrTEg1QVctMi1zcWxRZzlEZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQhYwDQYJKoZIhvcNAQELBQADggEBAESc0b2FfN3WYrzx6rm6kcVodhgq kwOPiEpuDv6RLfLhKd8nABLk0WJthLStV+PQHNCTdesC7uV9xA690LXjmGTZCw8B TGiBCqgBWo6jE5k4svW+1FUrYsPxzqRwFuP5Rv312x02OiyH2IDRCqogJOiT/RlK HB+0z3amCU+ht+GQAw3EbiTDpmCZAOSKq+X8ltR/vUqw8LgyQlB1SqtC4MOsdm+u Ch1+6S1VCO6GrFhDPciTcklvvqn2xHkpIPMxeiowZSaayy+YUghvsK9rfMpBgwS0 1QJ7kH3x4RWNBFl3ByHmKmHcq67uhnQvqPpIwkzekjVE890IJZjKhvYOA0o= -----END CERTIFICATE-----Generated at Thu Jun 19 06:33:43 2025 by rpki-client