$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TWQaOTjMOsG253n85F2UqsVUScw.roa File: TWQaOTjMOsG253n85F2UqsVUScw.roa (raw, json) Hash identifier: N6VXduJAYJG7BYsbf0A7MgCvf3bfRvTrSu+D8CQlA88= Subject key identifier: 4D:64:1A:39:38:CC:3A:C1:B6:E7:79:FC:E4:5D:94:AA:C5:54:49:CC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F79 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TWQaOTjMOsG253n85F2UqsVUScw.roa Signing time: Tue 10 Jun 2025 11:32:38 +0000 ROA not before: Tue 10 Jun 2025 11:32:38 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3961 (0xf79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:38 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=4D641A3938CC3AC1B6E779FCE45D94AAC55449CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:aa:ea:54:fb:0e:6f:b8:3a:0b:fe:ec:27:de: f5:d4:92:48:e5:fe:b3:bf:f6:45:e2:17:a2:77:f2: e4:d8:5d:e4:8c:8a:3a:96:82:1b:62:4b:16:48:a6: c3:ef:01:b3:76:0a:13:5c:c2:6b:a1:dc:8b:9c:a8: 39:98:e8:f4:f3:8b:e0:86:5b:2a:03:67:74:d4:42: 2a:bd:fe:dc:8c:97:db:6d:84:30:d6:40:61:c0:3f: ae:e0:0f:ee:dd:07:27:9f:63:d2:6a:04:1a:5a:4f: f7:3e:1b:aa:1f:da:07:5c:57:59:18:a0:bd:f3:0c: f7:c5:9c:1b:5b:18:87:c0:2d:96:b4:51:4b:6c:2b: dc:ad:f2:44:31:6f:66:e2:8a:2f:d0:e9:2f:12:ff: 40:3e:45:32:64:08:b7:8c:4b:00:e7:56:ba:3b:f4: cf:56:0c:27:82:6b:ed:6e:72:46:92:27:82:43:5a: a2:30:b7:eb:d5:2f:af:df:f2:70:68:4e:6d:8c:74: 30:b4:57:8e:14:da:53:15:9e:d0:db:2d:c3:e7:eb: d4:45:c0:15:08:99:77:90:5b:30:6d:50:4a:24:84: ad:47:31:06:fc:bd:d1:04:c3:8f:0f:db:69:3f:99: 4d:aa:2d:55:56:01:95:5f:29:9e:a8:12:41:64:5a: 89:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:64:1A:39:38:CC:3A:C1:B6:E7:79:FC:E4:5D:94:AA:C5:54:49:CC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TWQaOTjMOsG253n85F2UqsVUScw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.78.0/23 Signature Algorithm: sha256WithRSAEncryption c2:69:c1:3d:6d:a7:3d:39:46:99:89:d9:2b:eb:a8:da:65:b0: f5:6e:26:5b:4f:2b:88:f1:ca:8c:a7:d7:61:04:c6:94:d2:31: 2b:7c:cf:45:0d:e4:7c:c8:cc:20:02:65:e3:a1:12:be:8f:dc: 43:f9:db:f0:49:e9:16:d4:53:e4:16:9f:88:79:7e:6b:8a:5d: 82:d5:56:5e:dc:f9:30:1e:1b:0d:ce:19:e2:7e:9b:6b:42:09: de:91:c6:a2:33:91:e5:8a:3d:e8:31:01:d9:d0:d0:4f:51:18: f4:48:91:d7:c2:59:32:a8:c5:08:da:43:75:d6:bf:ed:90:8f: d0:d1:d4:cc:4e:ca:07:02:d0:f8:11:ce:56:1c:71:dd:cf:6a: 23:3b:9b:21:f0:a7:4c:f7:91:29:a0:3e:82:5c:7f:6d:58:e6: fe:69:07:05:a7:ab:ad:a9:c3:90:cb:fb:b7:02:16:fa:f6:aa: c8:a3:6d:7f:06:73:75:09:fb:2c:00:ef:25:a3:9d:3f:21:74: bf:a1:30:69:92:1e:1f:fc:9d:07:47:7a:2b:52:ce:be:41:a7: 9e:53:56:fc:ee:74:a7:96:f9:86:61:7a:9b:d0:6c:8c:b1:ce: 0f:d8:c8:59:ca:3e:85:df:bd:14:45:f6:e3:c5:0b:ba:89:83: c7:eb:73:2a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMzhaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDRENjQxQTM5MzhDQzNB QzFCNkU3NzlGQ0U0NUQ5NEFBQzU1NDQ5Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1qupU+w5vuDoL/uwn3vXUkkjl/rO/9kXiF6J38uTYXeSMijqW ghtiSxZIpsPvAbN2ChNcwmuh3IucqDmY6PTzi+CGWyoDZ3TUQiq9/tyMl9tthDDW QGHAP67gD+7dByefY9JqBBpaT/c+G6of2gdcV1kYoL3zDPfFnBtbGIfALZa0UUts K9yt8kQxb2biii/Q6S8S/0A+RTJkCLeMSwDnVro79M9WDCeCa+1uckaSJ4JDWqIw t+vVL6/f8nBoTm2MdDC0V44U2lMVntDbLcPn69RFwBUImXeQWzBtUEokhK1HMQb8 vdEEw48P22k/mU2qLVVWAZVfKZ6oEkFkWokJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTWQaOTjMOsG253n85F2UqsVUScwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RXUWFPVGpNT3NHMjUzbjg1RjJVcXNWVVNjdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0k4wDQYJKoZIhvcNAQELBQADggEBAMJpwT1tpz05RpmJ2SvrqNplsPVu JltPK4jxyoyn12EExpTSMSt8z0UN5HzIzCACZeOhEr6P3EP52/BJ6RbUU+QWn4h5 fmuKXYLVVl7c+TAeGw3OGeJ+m2tCCd6RxqIzkeWKPegxAdnQ0E9RGPRIkdfCWTKo xQjaQ3XWv+2Qj9DR1MxOygcC0PgRzlYccd3PaiM7myHwp0z3kSmgPoJcf21Y5v5p BwWnq62pw5DL+7cCFvr2qsijbX8Gc3UJ+ywA7yWjnT8hdL+hMGmSHh/8nQdHeitS zr5Bp55TVvzudKeW+YZhepvQbIyxzg/YyFnKPoXfvRRF9uPFC7qJg8frcyo= -----END CERTIFICATE-----Generated at Sun Jun 22 00:53:00 2025 by rpki-client