$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Una6emEzll9It_9QEaAFtyZdllE.roa File: Una6emEzll9It_9QEaAFtyZdllE.roa (raw, json) Hash identifier: d/vUy5QXQ4FeTndBv1YzBCu9hB9Eg0BphY+v50YdsCA= Subject key identifier: 52:76:BA:7A:61:33:96:5F:48:B7:FF:50:11:A0:05:B7:26:5D:96:51 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F48 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Una6emEzll9It_9QEaAFtyZdllE.roa Signing time: Tue 10 Jun 2025 11:28:21 +0000 ROA not before: Tue 10 Jun 2025 11:28:21 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 219.122.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3912 (0xf48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:28:21 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=5276BA7A6133965F48B7FF5011A005B7265D9651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0c:4f:53:cc:89:3f:b7:4f:43:8b:67:43:1c: a2:c2:f3:e5:b0:20:04:1e:1e:e7:9e:a9:69:f9:51: 84:8d:2a:43:7e:fb:ad:05:34:a8:21:bf:d0:70:80: 0e:06:1d:f8:be:04:7f:cf:61:69:26:d4:fc:b7:2e: d7:70:e8:90:21:12:5e:9d:77:76:e7:35:bb:4b:09: 96:c2:54:be:a4:ae:3a:04:b3:c0:77:38:04:09:c8: e6:cb:8e:43:e8:53:c7:9b:28:69:c3:26:20:d7:8b: d0:cd:dd:84:00:46:55:51:a2:f5:75:c5:4a:ff:c4: 02:e9:99:c9:f2:7b:fc:51:cc:ff:e4:42:25:cc:da: e0:ea:2f:a0:9a:d0:c9:42:75:0c:b4:4e:7d:f1:c4: a0:c9:1b:bf:59:54:5c:92:e0:76:c5:15:6e:80:da: dc:56:0e:a0:02:09:6e:6d:86:13:6d:e4:1c:fb:46: c0:ff:4d:2a:47:20:97:a1:64:d8:8b:85:2a:39:58: 0f:9a:f2:3a:4e:de:88:ba:41:2c:67:a2:f2:01:b9: 34:3e:8f:4c:29:15:60:21:83:fe:4a:a4:fe:0a:30: 19:fd:ba:89:c1:1b:6c:e6:8c:19:3d:8e:6f:a3:f9: 88:63:28:3b:7e:b0:f5:b0:ac:1c:bc:64:03:a6:5d: 63:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:76:BA:7A:61:33:96:5F:48:B7:FF:50:11:A0:05:B7:26:5D:96:51 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Una6emEzll9It_9QEaAFtyZdllE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.122.72.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:36:58:60:c2:7a:0b:b1:86:f1:8f:34:61:c5:0a:05:d6:0b: 06:c2:93:7f:2b:64:1e:47:77:14:4f:29:15:07:74:61:03:ce: e2:b7:b2:09:a8:59:3a:78:8b:80:c3:a5:44:16:ef:8d:e6:f4: 58:f6:97:eb:23:73:aa:9c:d6:7a:2a:45:a0:c0:83:ea:4d:23: 1d:91:d4:e7:7d:73:df:b5:28:4d:a1:19:aa:8e:04:57:a2:11: 37:bd:c0:cb:da:66:17:20:40:8c:c9:0b:6d:ce:fd:56:51:cd: 75:16:d7:15:1b:7a:55:ca:dc:41:ba:b0:7f:49:42:3b:d5:64: f4:8c:73:3d:9f:f4:b2:98:1e:0d:f8:12:d6:dc:57:a0:6a:f6: 9c:1b:13:f8:c6:63:38:2e:2f:52:3c:39:ec:52:1d:bf:6a:16: fc:25:46:05:57:6d:cc:81:01:6b:90:16:8e:3d:6d:a2:72:8b: b9:53:96:a7:92:a9:5a:b4:06:34:13:fa:c0:08:4b:f1:6d:a8: 80:cb:53:ff:60:37:69:0e:ac:7a:b0:c8:b7:30:c3:71:aa:24: 4f:ce:3f:60:97:9a:0f:89:fd:6b:95:ac:19:c1:da:71:9f:7c: 3e:f6:6b:64:a4:cc:81:01:7f:40:a3:17:00:76:f4:b5:c8:76: 6d:7b:a7:61 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD0gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI4MjFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDUyNzZCQTdBNjEzMzk2 NUY0OEI3RkY1MDExQTAwNUI3MjY1RDk2NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbDE9TzIk/t09Di2dDHKLC8+WwIAQeHueeqWn5UYSNKkN++60F NKghv9BwgA4GHfi+BH/PYWkm1Py3Ltdw6JAhEl6dd3bnNbtLCZbCVL6krjoEs8B3 OAQJyObLjkPoU8ebKGnDJiDXi9DN3YQARlVRovV1xUr/xALpmcnye/xRzP/kQiXM 2uDqL6Ca0MlCdQy0Tn3xxKDJG79ZVFyS4HbFFW6A2txWDqACCW5thhNt5Bz7RsD/ TSpHIJehZNiLhSo5WA+a8jpO3oi6QSxnovIBuTQ+j0wpFWAhg/5KpP4KMBn9uonB G2zmjBk9jm+j+YhjKDt+sPWwrBy8ZAOmXWONAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUna6emEzll9It/9QEaAFtyZdllEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1VuYTZlbUV6bGw5SXRfOVFFYUFGdHlaZGxsRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbekgwDQYJKoZIhvcNAQELBQADggEBAH82WGDCeguxhvGPNGHFCgXWCwbC k38rZB5HdxRPKRUHdGEDzuK3sgmoWTp4i4DDpUQW743m9Fj2l+sjc6qc1noqRaDA g+pNIx2R1Od9c9+1KE2hGaqOBFeiETe9wMvaZhcgQIzJC23O/VZRzXUW1xUbelXK 3EG6sH9JQjvVZPSMcz2f9LKYHg34EtbcV6Bq9pwbE/jGYzguL1I8OexSHb9qFvwl RgVXbcyBAWuQFo49baJyi7lTlqeSqVq0BjQT+sAIS/FtqIDLU/9gN2kOrHqwyLcw w3GqJE/OP2CXmg+J/WuVrBnB2nGffD72a2SkzIEBf0CjFwB29LXIdm17p2E= -----END CERTIFICATE-----Generated at Sun Jun 22 05:30:07 2025 by rpki-client