$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TjHaIC0oeEyBuUrZYksMNk1Q6Jg.roa File: TjHaIC0oeEyBuUrZYksMNk1Q6Jg.roa (raw, json) Hash identifier: S5sZnEMFvE/4l8N9pntR/u/QHgyvB1+G8KnovnK3yn4= Subject key identifier: 4E:31:DA:20:2D:28:78:4C:81:B9:4A:D9:62:4B:0C:36:4D:50:E8:98 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F3F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TjHaIC0oeEyBuUrZYksMNk1Q6Jg.roa Signing time: Tue 10 Jun 2025 11:24:40 +0000 ROA not before: Tue 10 Jun 2025 11:24:40 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.76.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 06:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3903 (0xf3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:40 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=4E31DA202D28784C81B94AD9624B0C364D50E898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:a1:d6:85:07:51:9e:52:81:12:08:57:fe: 58:2e:df:0b:62:68:23:7b:77:31:33:e3:be:80:82: af:1c:79:25:b0:c7:5c:8b:da:56:cf:d9:60:28:fc: 78:a4:51:46:68:d8:6d:25:bd:76:58:30:f0:41:24: 7b:0c:5b:96:9e:78:ee:b7:85:c7:7e:9c:a8:b3:f0: 37:fe:54:d8:30:2d:77:f1:2f:f4:cf:9c:aa:78:77: e7:c5:36:6b:4d:8d:4b:f0:a1:0f:6d:17:cf:da:07: 8b:3c:7c:7e:c7:2c:b0:24:64:22:a6:5a:f3:43:06: 5f:54:3e:52:25:96:fc:54:01:eb:1e:e7:f6:a3:9b: 5e:84:5f:fb:99:c5:29:77:14:e0:31:36:32:eb:bc: cb:78:fe:96:60:7a:ed:27:2f:d1:29:49:5c:93:85: f3:23:41:54:d2:65:7b:d7:20:95:f8:d7:31:ab:89: d9:7c:a3:38:ed:64:1d:68:5b:de:3f:5b:18:cd:dd: 6d:28:66:7e:6e:9a:8d:03:4c:09:5a:2a:d4:45:11: d5:4c:d6:44:14:61:19:a7:b2:28:3e:c8:50:47:c5: 5a:c3:16:77:21:ef:ed:ad:73:9a:d9:e5:6b:2b:f6: 52:ce:86:5f:03:15:21:20:af:2b:a5:98:f5:57:06: 4b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:31:DA:20:2D:28:78:4C:81:B9:4A:D9:62:4B:0C:36:4D:50:E8:98 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TjHaIC0oeEyBuUrZYksMNk1Q6Jg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.48.0/20 Signature Algorithm: sha256WithRSAEncryption 3a:48:8f:ea:5f:b1:6b:1a:95:a7:0d:a5:6d:94:d5:98:07:b8: 18:3f:92:40:43:3d:ef:d4:fc:f7:a6:52:07:a9:32:40:55:a1: fa:a2:2b:c2:8f:20:ec:ee:ef:0b:d5:47:b8:54:36:8e:a7:73: 01:0a:87:1c:e0:83:07:81:72:4a:23:73:e6:a6:48:a6:de:d3: 2a:5e:b4:b8:fd:75:8a:95:20:49:fb:19:ea:8a:24:72:f5:67: 28:75:cd:c9:9b:5d:5f:8c:aa:e4:f1:81:c6:b5:2b:a1:df:04: 11:81:69:d8:b1:61:9b:97:d6:95:3d:37:e1:43:50:0a:25:a3: 02:83:81:36:e4:98:3e:8a:22:15:5f:d9:27:21:60:61:bb:1f: e6:f4:69:08:9d:56:20:2c:5d:11:4a:27:56:d7:6c:0c:89:8f: a2:87:4c:0f:30:b3:62:6f:c5:ec:7f:9a:f5:d1:14:cf:b8:2f: d4:e4:8c:d4:36:b8:9b:16:5d:47:b1:43:93:1c:19:fb:15:5d: 1c:81:dd:de:91:3e:50:89:82:33:0d:fa:10:ec:f3:7e:af:a9: 30:42:e7:71:06:40:1b:e2:ed:7a:95:ef:6b:dc:5c:52:4a:0f: e7:79:70:d7:15:a1:52:2a:3c:73:40:8a:7f:73:7d:8f:24:9b: 61:76:03:45 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDz8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0NDBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDRFMzFEQTIwMkQyODc4 NEM4MUI5NEFEOTYyNEIwQzM2NEQ1MEU4OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3ZKHWhQdRnlKBEghX/lgu3wtiaCN7dzEz476Agq8ceSWwx1yL 2lbP2WAo/HikUUZo2G0lvXZYMPBBJHsMW5aeeO63hcd+nKiz8Df+VNgwLXfxL/TP nKp4d+fFNmtNjUvwoQ9tF8/aB4s8fH7HLLAkZCKmWvNDBl9UPlIllvxUAese5/aj m16EX/uZxSl3FOAxNjLrvMt4/pZgeu0nL9EpSVyThfMjQVTSZXvXIJX41zGridl8 ozjtZB1oW94/WxjN3W0oZn5umo0DTAlaKtRFEdVM1kQUYRmnsig+yFBHxVrDFnch 7+2tc5rZ5Wsr9lLOhl8DFSEgryulmPVXBktbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTjHaIC0oeEyBuUrZYksMNk1Q6JgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RqSGFJQzBvZUV5QnVVclpZa3NNTmsxUTZKZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBTDAwDQYJKoZIhvcNAQELBQADggEBADpIj+pfsWsalacNpW2U1ZgHuBg/ kkBDPe/U/PemUgepMkBVofqiK8KPIOzu7wvVR7hUNo6ncwEKhxzggweBckojc+am SKbe0ypetLj9dYqVIEn7GeqKJHL1Zyh1zcmbXV+MquTxgca1K6HfBBGBadixYZuX 1pU9N+FDUAolowKDgTbkmD6KIhVf2SchYGG7H+b0aQidViAsXRFKJ1bXbAyJj6KH TA8ws2Jvxex/mvXRFM+4L9TkjNQ2uJsWXUexQ5McGfsVXRyB3d6RPlCJgjMN+hDs 836vqTBC53EGQBvi7XqV72vcXFJKD+d5cNcVoVIqPHNAin9zfY8km2F2A0U= -----END CERTIFICATE-----Generated at Mon Jun 23 09:24:28 2025 by rpki-client