$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RvZJlv-G5P3dywt_a8FOXrDeDcA.roa File: RvZJlv-G5P3dywt_a8FOXrDeDcA.roa (raw, json) Hash identifier: s4x0c9QwnlYR7xrxoAFGapfOBRGMxOap9bVuiaoCGoE= Subject key identifier: 46:F6:49:96:FF:86:E4:FD:DD:CB:0B:7F:6B:C1:4E:5E:B0:DE:0D:C0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F84 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RvZJlv-G5P3dywt_a8FOXrDeDcA.roa Signing time: Tue 10 Jun 2025 11:36:13 +0000 ROA not before: Tue 10 Jun 2025 11:36:13 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.158.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3972 (0xf84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:36:13 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=46F64996FF86E4FDDDCB0B7F6BC14E5EB0DE0DC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:de:45:55:6e:42:37:aa:7a:23:45:5f:f8:97: de:a9:4e:b3:92:dd:fd:d5:a7:bc:91:8d:e6:fc:63: 93:3c:34:a0:44:83:4c:3e:41:29:bf:5c:e4:b9:47: 79:f2:ea:8b:e3:35:3c:fc:54:47:6c:1c:04:51:51: 08:bc:8f:a1:04:9a:37:aa:40:04:35:91:97:f5:ed: 80:a4:1d:53:cd:8c:da:43:a4:80:19:38:f9:9b:91: fe:4d:a8:0c:86:6d:80:15:e9:51:13:ce:4c:d4:6f: 16:23:ca:1f:46:df:2c:e1:54:1d:80:c3:94:91:86: af:5f:6f:ca:4c:df:b5:9e:2e:ba:67:38:b3:33:5b: 99:d4:b2:4a:79:c2:de:09:39:03:b9:f5:db:b5:01: 2f:51:4e:ce:17:90:d1:e8:7a:59:6a:d8:10:d9:9c: ea:51:ee:b2:99:7f:6d:75:52:27:83:0f:57:4b:02: 68:17:e9:08:ef:27:07:d6:fa:4e:2a:a4:ad:f3:66: ac:a7:e1:a8:01:7a:bd:c3:47:98:82:79:a6:00:8f: a6:67:8b:16:c1:84:c1:d4:fc:d1:00:f2:35:e8:74: 45:1a:a4:34:ef:b3:0e:13:88:a9:07:13:17:9f:db: a1:6f:2e:7e:ca:db:2e:25:ef:81:0d:7d:72:6a:37: 18:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F6:49:96:FF:86:E4:FD:DD:CB:0B:7F:6B:C1:4E:5E:B0:DE:0D:C0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RvZJlv-G5P3dywt_a8FOXrDeDcA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.152.0/21 Signature Algorithm: sha256WithRSAEncryption 76:64:bf:92:9f:70:3c:a5:0c:21:5f:31:9e:3d:c5:5b:29:a5: 2f:8a:d7:d3:3e:77:36:c4:d1:4f:f8:86:de:b7:77:e7:53:02: f2:af:28:01:a8:57:9e:54:6b:5b:57:a5:dd:1a:f2:d6:38:70: 12:ac:d0:36:c6:2c:67:19:fb:cd:f9:2a:ca:8c:ff:d1:86:47: 64:0f:48:bc:f3:aa:e2:ff:3b:9d:c6:0b:f7:40:16:27:d8:63: 99:22:a1:8e:47:e9:7e:fd:d0:62:86:4f:e2:2e:3c:79:fa:20: 28:94:fe:6e:9f:84:68:45:a5:f7:dd:4d:58:0b:8e:82:f6:a1: 3b:55:1a:37:82:ba:dc:4f:10:a0:fb:84:bf:11:84:36:94:9a: 4e:5a:9a:c4:1a:d0:a7:32:66:24:6c:82:2a:4e:31:ab:dd:88: f8:12:12:aa:06:6e:c3:c1:00:a9:df:06:84:9e:17:4d:25:e3: 9d:e1:81:39:03:a0:3d:92:c7:0c:1f:e1:f5:e0:c0:f8:d7:a8: e0:0d:c4:61:37:79:67:ec:01:12:27:95:fc:46:ce:a6:2c:29: 5f:67:2d:ea:59:2d:3e:54:5c:ca:f8:eb:eb:23:d0:91:4e:73: f4:b8:d2:46:f0:7c:0c:45:9a:88:eb:be:2d:df:44:ee:31:a9: e6:c2:be:9e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTM2MTNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDQ2RjY0OTk2RkY4NkU0 RkRERENCMEI3RjZCQzE0RTVFQjBERTBEQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ3kVVbkI3qnojRV/4l96pTrOS3f3Vp7yRjeb8Y5M8NKBEg0w+ QSm/XOS5R3ny6ovjNTz8VEdsHARRUQi8j6EEmjeqQAQ1kZf17YCkHVPNjNpDpIAZ OPmbkf5NqAyGbYAV6VETzkzUbxYjyh9G3yzhVB2Aw5SRhq9fb8pM37WeLrpnOLMz W5nUskp5wt4JOQO59du1AS9RTs4XkNHoellq2BDZnOpR7rKZf211UieDD1dLAmgX 6QjvJwfW+k4qpK3zZqyn4agBer3DR5iCeaYAj6ZnixbBhMHU/NEA8jXodEUapDTv sw4TiKkHExef26FvLn7K2y4l74ENfXJqNxiVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURvZJlv+G5P3dywt/a8FOXrDeDcAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1J2Wkpsdi1HNVAzZHl3dF9hOEZPWHJEZURjQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANunpgwDQYJKoZIhvcNAQELBQADggEBAHZkv5KfcDylDCFfMZ49xVsppS+K 19M+dzbE0U/4ht63d+dTAvKvKAGoV55Ua1tXpd0a8tY4cBKs0DbGLGcZ+835KsqM /9GGR2QPSLzzquL/O53GC/dAFifYY5kioY5H6X790GKGT+IuPHn6ICiU/m6fhGhF pffdTVgLjoL2oTtVGjeCutxPEKD7hL8RhDaUmk5amsQa0KcyZiRsgipOMavdiPgS EqoGbsPBAKnfBoSeF00l453hgTkDoD2Sxwwf4fXgwPjXqOANxGE3eWfsARInlfxG zqYsKV9nLepZLT5UXMr46+sj0JFOc/S40kbwfAxFmojrvi3fRO4xqebCvp4= -----END CERTIFICATE-----Generated at Sat Jun 21 12:01:37 2025 by rpki-client