$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RfkIkZk41KbQaz0JTi8w3SXXsK4.roa File: RfkIkZk41KbQaz0JTi8w3SXXsK4.roa (raw, json) Hash identifier: YeQIIh9Rb30/qmU2B0E2bfQOx2Gs5Inkf3165/hVBy4= Subject key identifier: 45:F9:08:91:99:38:D4:A6:D0:6B:3D:09:4E:2F:30:DD:25:D7:B0:AE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F09 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RfkIkZk41KbQaz0JTi8w3SXXsK4.roa Signing time: Tue 10 Jun 2025 11:16:51 +0000 ROA not before: Tue 10 Jun 2025 11:16:51 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3849 (0xf09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:51 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=45F908919938D4A6D06B3D094E2F30DD25D7B0AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:6b:b0:af:9e:69:c0:f9:35:37:19:72:b2: f2:b4:50:66:68:38:a1:0d:e4:49:5d:f1:f7:ac:91: 51:63:c2:c5:5d:f0:20:df:19:5c:e7:db:2c:61:01: c2:4e:21:71:0c:a8:8a:d9:ae:1a:e5:0e:b7:6c:43: 3b:49:1e:35:0a:3f:d0:90:7e:eb:85:ff:1c:49:3d: ad:0f:e7:6e:2f:61:42:48:c1:54:ed:4c:09:89:60: b2:56:a5:94:2a:f5:96:53:ab:57:c8:cb:d4:36:3e: 9a:14:6e:1d:36:ca:b4:a0:f2:f7:20:6d:a5:79:dc: 24:02:56:39:69:c3:95:5c:53:d0:d9:ba:71:10:82: 21:3a:dd:b8:be:bd:3c:e0:0d:11:0f:7e:10:b5:3b: c5:e9:81:f2:28:ea:88:7f:16:66:10:39:d4:ff:06: 18:92:ea:b3:c4:a7:dc:44:c1:61:cd:40:f1:ea:4b: eb:ca:7f:13:c1:26:5d:16:2a:9f:27:5d:c6:dd:26: 5a:57:ce:18:71:6a:8f:e5:0a:8e:5b:bb:8a:76:a6: 19:d5:0b:f1:8b:6d:b2:2e:c6:28:d2:c6:e4:7a:9e: 51:0e:7c:b4:c1:98:04:b5:81:e4:27:9c:34:aa:55: 4b:a2:f5:6d:0b:8c:98:98:4f:5e:8e:2c:63:77:f5: 17:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F9:08:91:99:38:D4:A6:D0:6B:3D:09:4E:2F:30:DD:25:D7:B0:AE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RfkIkZk41KbQaz0JTi8w3SXXsK4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.112.0/21 Signature Algorithm: sha256WithRSAEncryption 8e:1a:4c:9d:2e:16:dd:c6:f1:c9:30:76:24:e8:2b:db:88:32: e2:49:a2:b1:17:be:50:36:84:79:0a:19:92:fb:83:d0:74:3e: f9:fe:79:80:42:13:a3:7a:02:16:8f:f1:3e:83:9e:b3:27:78: 95:31:59:39:4a:19:00:fb:59:2f:91:96:95:3a:73:41:f6:23: 34:76:6a:9b:60:f5:0f:5b:e7:bd:78:95:4c:57:b1:32:8c:0b: a9:bc:9a:4c:ed:52:b7:0c:42:7c:15:11:98:86:ca:e5:87:8b: 97:82:a4:71:93:23:43:b0:29:f5:2f:f2:aa:ca:78:93:bd:87: 26:9f:56:11:a2:7a:c9:58:76:d6:b8:a4:17:af:e8:b6:b4:71: 7a:67:0e:19:42:9b:6f:20:30:5f:bd:6d:0e:4e:ed:b1:d4:dc: 56:c2:94:e2:c4:bf:b5:af:02:a3:a0:42:7d:37:fa:f1:c9:39: 19:00:45:a7:c1:b5:45:d6:82:92:83:6c:0a:e8:81:b6:9f:a9: 98:9e:da:99:46:ac:4d:4b:df:cb:a4:3b:66:91:ae:87:a4:31: 68:7a:99:37:b5:f8:35:80:af:ed:ad:59:0c:3e:34:88:a3:ea: 8e:6b:06:62:39:90:a0:40:0f:72:c2:61:4d:fe:2e:2f:48:f2: 05:79:d0:a1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NTFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDQ1RjkwODkxOTkzOEQ0 QTZEMDZCM0QwOTRFMkYzMEREMjVEN0IwQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMrWuwr55pwPk1NxlysvK0UGZoOKEN5Eld8feskVFjwsVd8CDf GVzn2yxhAcJOIXEMqIrZrhrlDrdsQztJHjUKP9CQfuuF/xxJPa0P524vYUJIwVTt TAmJYLJWpZQq9ZZTq1fIy9Q2PpoUbh02yrSg8vcgbaV53CQCVjlpw5VcU9DZunEQ giE63bi+vTzgDREPfhC1O8XpgfIo6oh/FmYQOdT/BhiS6rPEp9xEwWHNQPHqS+vK fxPBJl0WKp8nXcbdJlpXzhhxao/lCo5bu4p2phnVC/GLbbIuxijSxuR6nlEOfLTB mAS1geQnnDSqVUui9W0LjJiYT16OLGN39RfpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURfkIkZk41KbQaz0JTi8w3SXXsK4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1Jma0lrWms0MUtiUWF6MEpUaTh3M1NYWHNLNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPc0nAwDQYJKoZIhvcNAQELBQADggEBAI4aTJ0uFt3G8ckwdiToK9uIMuJJ orEXvlA2hHkKGZL7g9B0Pvn+eYBCE6N6AhaP8T6DnrMneJUxWTlKGQD7WS+RlpU6 c0H2IzR2aptg9Q9b5714lUxXsTKMC6m8mkztUrcMQnwVEZiGyuWHi5eCpHGTI0Ow KfUv8qrKeJO9hyafVhGieslYdta4pBev6La0cXpnDhlCm28gMF+9bQ5O7bHU3FbC lOLEv7WvAqOgQn03+vHJORkARafBtUXWgpKDbArogbafqZie2plGrE1L38ukO2aR roekMWh6mTe1+DWAr+2tWQw+NIij6o5rBmI5kKBAD3LCYU3+Li9I8gV50KE= -----END CERTIFICATE-----Generated at Sun Jun 22 03:53:23 2025 by rpki-client