$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S56UhgLUq17dns2EdVMe8ZFZtlY.roa File: S56UhgLUq17dns2EdVMe8ZFZtlY.roa (raw, json) Hash identifier: z40pxmZX0IGmCQoIpJKTsqHjsTdxCFW31mSedO4mOoM= Subject key identifier: 4B:9E:94:86:02:D4:AB:5E:DD:9E:CD:84:75:53:1E:F1:91:59:B6:56 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F92 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S56UhgLUq17dns2EdVMe8ZFZtlY.roa Signing time: Tue 10 Jun 2025 11:36:21 +0000 ROA not before: Tue 10 Jun 2025 11:36:21 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.158.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3986 (0xf92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:36:21 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=4B9E948602D4AB5EDD9ECD8475531EF19159B656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:83:3e:4a:a2:ad:46:8d:10:44:d5:5f:15: ec:47:95:d3:a5:90:93:d9:9e:34:de:71:e7:64:43: 66:dc:cc:21:0e:2e:b3:90:e2:89:af:75:1f:76:70: 0e:91:35:ef:d1:ab:c8:76:9f:22:f9:7f:56:34:b0: ec:80:38:27:fb:bf:dd:37:51:97:65:a0:f4:da:7d: 73:dd:13:fa:1a:10:40:0c:c1:b2:f4:a5:40:ef:83: 71:40:cc:e3:57:a3:cd:1c:8e:f5:6d:fd:31:47:2c: 32:83:83:36:41:97:9c:96:04:a2:75:41:57:9a:9e: 30:6e:8a:81:41:b7:e6:d6:94:51:70:61:6f:d0:ee: d0:d4:02:aa:5e:f4:e5:6a:ed:06:56:f5:58:3f:eb: 53:b4:f4:c8:05:c3:a4:38:cc:ca:19:e4:9d:84:06: 50:9c:e2:b4:71:d7:d8:9a:01:87:94:27:20:01:60: 7b:5c:0c:1a:4d:a2:b4:11:ca:db:ca:ac:fe:37:0d: d2:7c:96:4c:d1:98:d3:1c:01:75:25:f1:d4:b9:ab: 2c:36:c8:b1:d7:a0:13:11:8f:5a:cf:29:da:07:12: 92:2a:81:4f:97:66:ed:99:0a:10:bc:37:1f:3c:c0: d9:75:00:11:b2:c8:ec:19:38:ae:eb:15:14:63:20: 79:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9E:94:86:02:D4:AB:5E:DD:9E:CD:84:75:53:1E:F1:91:59:B6:56 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S56UhgLUq17dns2EdVMe8ZFZtlY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.129.0/24 Signature Algorithm: sha256WithRSAEncryption b0:fe:b9:d6:22:ef:6d:e4:d2:25:ee:03:54:79:f0:bc:7f:d6: a8:9f:55:ed:a7:a5:87:c1:d0:8a:48:a1:0e:ce:1e:39:5b:c0: 13:c5:d6:7d:ef:39:08:3b:1b:dd:29:5f:b6:19:99:1a:91:0f: fb:4d:7f:92:68:74:df:d4:9e:32:52:4b:1a:cc:5d:fa:a7:c6: b1:3c:d0:90:12:89:84:2d:52:d7:53:1a:f7:87:3e:b2:4f:3a: a3:32:f0:5b:4b:c4:4e:ce:f2:3b:bb:02:2e:e4:91:28:a8:52: f9:60:03:d9:a6:82:1c:47:34:7f:53:97:66:a9:53:0c:f7:44: ba:86:4e:0e:ae:40:9a:33:43:2e:32:82:25:3b:43:02:04:6a: d0:69:7f:27:42:86:fb:b7:f6:e0:7c:c4:16:79:21:1a:c0:33: ff:f5:7d:e4:84:f0:8d:b7:d3:bd:47:b5:cb:d3:dc:c1:a5:d3: 3a:3a:6b:23:81:f0:d9:d2:a7:5c:6b:f9:d5:1d:59:4d:9f:67: b7:ff:f7:ac:23:42:6b:2e:af:39:77:f8:5c:82:59:c9:b9:8f: 5e:1a:ca:05:0b:74:ae:54:c7:59:3f:0b:6f:f2:3e:24:fa:88: 5c:e4:5d:d9:58:d3:ed:92:81:6d:60:20:4d:88:77:df:63:8d: b3:a8:d6:af -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD5IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTM2MjFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDRCOUU5NDg2MDJENEFC NUVERDlFQ0Q4NDc1NTMxRUYxOTE1OUI2NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2cIM+SqKtRo0QRNVfFexHldOlkJPZnjTecedkQ2bczCEOLrOQ 4omvdR92cA6RNe/Rq8h2nyL5f1Y0sOyAOCf7v903UZdloPTafXPdE/oaEEAMwbL0 pUDvg3FAzONXo80cjvVt/TFHLDKDgzZBl5yWBKJ1QVeanjBuioFBt+bWlFFwYW/Q 7tDUAqpe9OVq7QZW9Vg/61O09MgFw6Q4zMoZ5J2EBlCc4rRx19iaAYeUJyABYHtc DBpNorQRytvKrP43DdJ8lkzRmNMcAXUl8dS5qyw2yLHXoBMRj1rPKdoHEpIqgU+X Zu2ZChC8Nx88wNl1ABGyyOwZOK7rFRRjIHndAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUS56UhgLUq17dns2EdVMe8ZFZtlYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1M1NlVoZ0xVcTE3ZG5zMkVkVk1lOFpGWnRsWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABunoEwDQYJKoZIhvcNAQELBQADggEBALD+udYi723k0iXuA1R58Lx/1qif Ve2npYfB0IpIoQ7OHjlbwBPF1n3vOQg7G90pX7YZmRqRD/tNf5JodN/UnjJSSxrM XfqnxrE80JASiYQtUtdTGveHPrJPOqMy8FtLxE7O8ju7Ai7kkSioUvlgA9mmghxH NH9Tl2apUwz3RLqGTg6uQJozQy4ygiU7QwIEatBpfydChvu39uB8xBZ5IRrAM//1 feSE8I23071HtcvT3MGl0zo6ayOB8NnSp1xr+dUdWU2fZ7f/96wjQmsurzl3+FyC Wcm5j14aygULdK5Ux1k/C2/yPiT6iFzkXdlY0+2SgW1gIE2Id99jjbOo1q8= -----END CERTIFICATE-----Generated at Sun Jun 22 12:01:32 2025 by rpki-client