$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RXZBKYQDLVLAlIdsc7YPLXy8rks.roa File: RXZBKYQDLVLAlIdsc7YPLXy8rks.roa (raw, json) Hash identifier: drbYQI8BsIbhoIhPqOH2DbtxD7P/7g5KjfFeAQtxpAI= Subject key identifier: 45:76:41:29:84:03:2D:52:C0:94:87:6C:73:B6:0F:2D:7C:BC:AE:4B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EA9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RXZBKYQDLVLAlIdsc7YPLXy8rks.roa Signing time: Tue 10 Jun 2025 11:00:44 +0000 ROA not before: Tue 10 Jun 2025 11:00:44 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 183.73.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3753 (0xea9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:00:44 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=4576412984032D52C094876C73B60F2D7CBCAE4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:30:91:af:73:82:0f:d1:74:7c:d8:60:f4: 06:76:43:ac:dd:8b:4f:93:4a:78:85:a3:db:0d:8b: 3a:0e:0b:8a:99:2c:ff:96:dc:54:92:c0:15:df:0a: 4a:5c:96:72:2e:e4:72:77:ae:a8:5b:c7:5e:6d:6d: 51:45:81:81:38:bc:c1:a9:eb:5c:f4:b0:33:86:a6: 2b:01:e8:e5:13:72:81:bb:32:9a:e4:6b:9b:68:c6: 77:d4:70:dc:d9:7c:21:6e:43:09:49:0b:64:62:76: e4:9d:77:5f:6e:de:62:e6:1d:1e:df:8c:8e:34:aa: 6e:f9:e0:34:72:4e:be:71:2c:12:de:16:5c:03:58: 67:e8:cb:d1:1a:64:a9:2b:33:97:80:23:10:d1:07: be:d1:ee:44:b7:3b:f1:b1:fa:f8:1a:bd:4e:cc:3b: 43:1c:f0:04:2e:b8:a5:1f:0c:1a:52:0f:5a:66:d2: 60:94:c0:e5:f9:94:02:fe:ca:1f:0f:c5:50:4d:fe: 6f:ab:bf:d9:8a:6e:4b:8a:75:61:8e:f5:5e:28:ac: 37:71:ea:c5:8a:e7:10:e2:09:00:7f:53:4c:e6:b1: aa:6f:f8:a8:11:53:fc:2e:d2:97:12:17:cb:8a:12: 43:bb:ec:4b:29:ea:79:91:cd:5c:47:73:f5:ae:6e: 5d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:76:41:29:84:03:2D:52:C0:94:87:6C:73:B6:0F:2D:7C:BC:AE:4B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RXZBKYQDLVLAlIdsc7YPLXy8rks.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.73.192.0/18 Signature Algorithm: sha256WithRSAEncryption 41:39:27:98:09:75:cb:52:89:a5:21:97:24:b5:1a:92:f6:d2: 8a:5d:0f:f6:b3:73:ae:98:e6:51:2a:33:46:8d:bf:64:d1:c0: 09:b6:12:81:8f:eb:6b:f3:54:9a:7e:84:30:ab:94:b4:e7:77: 42:9c:01:42:52:fc:85:d3:7d:67:22:c4:a5:78:84:5e:1a:cb: 48:6d:3a:ba:04:01:f7:fc:46:e7:bf:df:df:a2:56:b2:de:cb: c5:75:a1:37:fc:19:51:72:94:37:06:60:13:f4:f3:ff:11:fe: fc:fe:5b:9d:27:97:09:63:fe:59:e9:97:bf:6f:01:5c:08:1f: 83:a9:9e:ce:67:d3:30:41:a3:da:a4:a3:e9:d9:11:db:08:fb: 0c:1a:1f:22:a6:fe:7c:87:d3:bb:cf:aa:4b:87:6a:55:e1:6a: b4:cd:54:5b:38:26:c0:62:c9:29:77:9b:8b:84:e2:d9:2e:e4: 07:35:3e:25:8f:8d:d5:b4:a9:ab:c6:94:ce:a7:79:2e:bd:77: 4f:d3:bb:2f:f1:6a:2d:83:c2:16:2b:a4:7d:f4:71:9a:e5:df: fb:a1:11:c4:07:38:ac:56:2c:a5:02:b1:50:31:65:8c:59:8b: 12:05:12:6c:76:f5:a1:f2:9f:88:1d:eb:33:db:45:e8:a7:ba: 36:75:bb:a2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTAwNDRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDQ1NzY0MTI5ODQwMzJE NTJDMDk0ODc2QzczQjYwRjJEN0NCQ0FFNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEVzCRr3OCD9F0fNhg9AZ2Q6zdi0+TSniFo9sNizoOC4qZLP+W 3FSSwBXfCkpclnIu5HJ3rqhbx15tbVFFgYE4vMGp61z0sDOGpisB6OUTcoG7Mprk a5toxnfUcNzZfCFuQwlJC2RiduSdd19u3mLmHR7fjI40qm754DRyTr5xLBLeFlwD WGfoy9EaZKkrM5eAIxDRB77R7kS3O/Gx+vgavU7MO0Mc8AQuuKUfDBpSD1pm0mCU wOX5lAL+yh8PxVBN/m+rv9mKbkuKdWGO9V4orDdx6sWK5xDiCQB/U0zmsapv+KgR U/wu0pcSF8uKEkO77Esp6nmRzVxHc/Wubl1nAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURXZBKYQDLVLAlIdsc7YPLXy8rkswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1JYWkJLWVFETFZMQWxJZHNjN1lQTFh5OHJrcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAa3ScAwDQYJKoZIhvcNAQELBQADggEBAEE5J5gJdctSiaUhlyS1GpL20opd D/azc66Y5lEqM0aNv2TRwAm2EoGP62vzVJp+hDCrlLTnd0KcAUJS/IXTfWcixKV4 hF4ay0htOroEAff8Rue/39+iVrLey8V1oTf8GVFylDcGYBP08/8R/vz+W50nlwlj /lnpl79vAVwIH4Opns5n0zBBo9qko+nZEdsI+wwaHyKm/nyH07vPqkuHalXharTN VFs4JsBiySl3m4uE4tku5Ac1PiWPjdW0qavGlM6neS69d0/Tuy/xai2DwhYrpH30 cZrl3/uhEcQHOKxWLKUCsVAxZYxZixIFEmx29aHyn4gd6zPbReinujZ1u6I= -----END CERTIFICATE-----Generated at Sat Jun 21 22:39:27 2025 by rpki-client