$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RYXHo4_EByHlf_hKd9TZsTxdf6c.roa File: RYXHo4_EByHlf_hKd9TZsTxdf6c.roa (raw, json) Hash identifier: MCQQDw8zndGVcav3iYnx7L994z8UIE3MKxcY6nX0/1Y= Subject key identifier: 45:85:C7:A3:8F:C4:07:21:E5:7F:F8:4A:77:D4:D9:B1:3C:5D:7F:A7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FA0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RYXHo4_EByHlf_hKd9TZsTxdf6c.roa Signing time: Tue 10 Jun 2025 11:40:31 +0000 ROA not before: Tue 10 Jun 2025 11:40:31 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.79.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 14:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4000 (0xfa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:40:31 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=4585C7A38FC40721E57FF84A77D4D9B13C5D7FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:2b:c0:3a:13:00:c0:16:87:dd:a5:9f:e2: 4e:68:57:93:e7:54:82:9a:89:d9:68:8e:4e:af:25: e3:7b:8f:c5:72:2b:60:78:88:30:96:e4:ec:6d:38: a3:14:d7:13:c4:37:15:32:b3:35:fc:89:f6:a0:26: b4:b1:0a:e1:88:f4:e2:48:7e:f7:ae:e3:95:82:86: d8:4f:85:94:19:14:33:4d:9f:c8:1c:6e:ab:b2:5c: ae:80:f7:60:ed:b7:a9:5e:cb:74:56:5c:4c:0e:bc: 04:12:d8:bb:a6:51:4f:f9:9a:c6:fa:29:0b:09:ba: d5:68:c2:93:30:b9:4f:ff:30:b5:fc:8e:3f:82:e3: 55:fa:7d:a8:2c:1a:3a:22:77:07:e5:5f:99:a5:d5: 26:af:53:a9:af:e8:17:9e:e3:3f:38:bf:2d:97:83: 6d:23:1e:b7:87:3e:03:0e:5b:9e:00:72:2e:51:ea: b9:9c:72:37:90:ce:ff:3c:44:98:1e:13:20:9f:04: 50:dc:4b:70:5d:33:1b:e0:57:99:7e:5b:44:5f:f2: ba:39:5f:b4:86:78:9f:28:e7:1a:d8:a1:af:24:cd: ca:62:93:cd:3d:a7:bd:06:36:57:22:ac:d1:4a:a4: dd:b0:bd:2d:ec:56:20:f3:ff:fa:9d:c7:07:c5:eb: d2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:85:C7:A3:8F:C4:07:21:E5:7F:F8:4A:77:D4:D9:B1:3C:5D:7F:A7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RYXHo4_EByHlf_hKd9TZsTxdf6c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.56.0/21 Signature Algorithm: sha256WithRSAEncryption 12:10:c5:15:e4:86:65:46:63:e9:92:34:55:53:b6:d4:c0:17: 65:78:45:bc:c0:db:1e:de:47:ce:d3:72:ac:bc:81:81:e4:04: 04:f2:a4:b9:fb:30:a4:e3:af:6f:f9:7d:bd:b0:37:8f:d5:21: e6:7d:ca:f5:e4:24:3f:7a:4e:e3:a6:4a:75:90:5c:9d:5c:cb: 9c:a5:11:82:7b:ae:1a:f0:da:3d:e6:5c:d9:c8:2e:a3:3c:2a: f9:f6:06:a9:69:57:da:93:55:06:f0:66:b4:03:13:22:77:d0: bb:ae:28:b3:1b:70:4b:76:23:cb:1f:cf:6f:2e:eb:57:c0:cf: ff:99:97:98:22:7c:ff:4f:88:78:de:b6:e0:9b:6d:83:ef:71: 40:9a:3b:9e:1a:45:cc:8f:6b:29:86:7c:8b:00:ec:0d:0e:ae: de:c8:dc:30:1b:f6:a2:5e:15:6b:c6:e4:eb:d6:b2:86:8d:c2: 3e:c4:44:5f:b1:a6:88:46:15:3f:dc:0b:63:e8:50:34:43:93: 79:eb:05:15:3e:b3:fd:01:d9:e5:22:11:06:35:10:b2:08:7c: 07:d5:5b:94:60:83:fd:b3:0c:2f:33:3c:bf:5c:19:75:13:78: 05:4a:19:12:5e:31:0a:3c:43:b9:07:44:de:cf:ea:11:66:e8: 71:22:a2:42 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQwMzFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDQ1ODVDN0EzOEZDNDA3 MjFFNTdGRjg0QTc3RDREOUIxM0M1RDdGQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFjSvAOhMAwBaH3aWf4k5oV5PnVIKaidlojk6vJeN7j8VyK2B4 iDCW5OxtOKMU1xPENxUyszX8ifagJrSxCuGI9OJIfveu45WChthPhZQZFDNNn8gc bquyXK6A92Dtt6ley3RWXEwOvAQS2LumUU/5msb6KQsJutVowpMwuU//MLX8jj+C 41X6fagsGjoidwflX5ml1SavU6mv6Bee4z84vy2Xg20jHreHPgMOW54Aci5R6rmc cjeQzv88RJgeEyCfBFDcS3BdMxvgV5l+W0Rf8ro5X7SGeJ8o5xrYoa8kzcpik809 p70GNlcirNFKpN2wvS3sViDz//qdxwfF69K3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURYXHo4/EByHlf/hKd9TZsTxdf6cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1JZWEhvNF9FQnlIbGZfaEtkOVRac1R4ZGY2Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBTzgwDQYJKoZIhvcNAQELBQADggEBABIQxRXkhmVGY+mSNFVTttTAF2V4 RbzA2x7eR87Tcqy8gYHkBATypLn7MKTjr2/5fb2wN4/VIeZ9yvXkJD96TuOmSnWQ XJ1cy5ylEYJ7rhrw2j3mXNnILqM8Kvn2BqlpV9qTVQbwZrQDEyJ30LuuKLMbcEt2 I8sfz28u61fAz/+Zl5gifP9PiHjetuCbbYPvcUCaO54aRcyPaymGfIsA7A0Ort7I 3DAb9qJeFWvG5OvWsoaNwj7ERF+xpohGFT/cC2PoUDRDk3nrBRU+s/0B2eUiEQY1 ELIIfAfVW5Rgg/2zDC8zPL9cGXUTeAVKGRJeMQo8Q7kHRN7P6hFm6HEiokI= -----END CERTIFICATE-----Generated at Sat Jun 21 16:16:52 2025 by rpki-client