$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/V3EbGvmpZ5LYikeBVVTCg0PyT0Q.roa File: V3EbGvmpZ5LYikeBVVTCg0PyT0Q.roa (raw, json) Hash identifier: 8NuEOqW7AmY1l6Ddodxf1tGij8BLPG95Xx0rr3KCnFQ= Subject key identifier: 57:71:1B:1A:F9:A9:67:92:D8:8A:47:81:55:54:C2:83:43:F2:4F:44 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E77 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V3EbGvmpZ5LYikeBVVTCg0PyT0Q.roa Signing time: Tue 10 Jun 2025 10:53:35 +0000 ROA not before: Tue 10 Jun 2025 10:53:35 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.67.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 13:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3703 (0xe77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:53:35 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=57711B1AF9A96792D88A47815554C28343F24F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:98:47:fe:31:c0:2f:e2:00:ca:e7:ef:b7: 83:9a:8d:c4:0f:52:f2:da:e4:8d:c4:6d:34:9c:fa: 33:d0:8a:11:b5:5f:a5:20:9e:b6:25:e7:d8:4f:3c: 7c:d9:14:1c:b2:de:a2:0b:2b:64:55:f4:d9:e6:e6: 1f:47:26:c6:11:9a:02:bd:68:3a:92:86:9c:12:42: d6:bc:34:81:d3:89:1c:f8:f1:4d:1a:c3:1a:50:3b: 14:49:c5:75:d2:e9:88:12:06:99:eb:95:08:8a:86: 83:c9:27:dc:03:01:ce:34:ac:6d:d0:61:4c:ac:91: f6:be:0c:e3:2e:73:f7:79:19:9c:04:b6:ae:c2:81: 29:a3:75:f6:90:02:76:cb:d3:f3:9c:34:47:ef:0a: 2d:d3:e0:99:47:84:5e:a0:36:b3:ea:f2:71:bc:44: ef:ab:f6:a5:ba:59:c7:0e:d4:34:5f:f7:1f:54:2d: 8e:f7:39:19:52:b8:e4:76:5e:02:41:ff:71:bd:40: c6:83:bf:07:38:aa:73:c3:bd:b7:ab:b6:47:d6:d6: b1:58:52:76:13:4d:aa:d4:37:3d:d3:1b:3b:8a:be: 56:70:e8:2a:b7:97:9d:b3:32:f5:23:bc:49:9d:fb: 73:79:6c:8d:d4:f1:e3:87:39:ee:6b:67:d0:fe:21: 43:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:71:1B:1A:F9:A9:67:92:D8:8A:47:81:55:54:C2:83:43:F2:4F:44 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V3EbGvmpZ5LYikeBVVTCg0PyT0Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.192.0/20 Signature Algorithm: sha256WithRSAEncryption 36:c7:f9:9b:ee:36:fa:60:73:5f:12:62:6b:a3:14:d3:23:b3: cc:91:04:9b:bd:7b:57:3e:d4:bf:a1:4e:c6:2d:ad:bb:54:ac: 45:d7:64:f5:dc:e2:98:61:77:78:d3:64:4b:99:32:cf:2a:4f: fb:5f:c2:98:d6:56:cf:26:75:3e:3a:a3:bf:73:10:36:81:79: b1:c2:8a:53:cc:5b:8b:00:76:e4:fc:54:55:fd:93:a6:12:16: c1:0f:15:09:63:07:32:1a:df:93:08:c2:d5:4a:77:af:9f:43: ec:cc:8f:1d:76:7a:03:c1:90:12:35:57:0c:8a:73:ac:66:92: f7:0e:a4:33:b2:d9:72:b9:5a:f4:9c:a6:12:3e:e6:9b:f9:18: 15:a1:c6:29:f0:5a:7a:80:56:f1:b0:d6:10:ba:d3:43:b9:55: eb:3b:12:71:9e:ac:7c:e9:60:25:0a:9e:d1:09:3c:7f:94:42: 5e:ef:54:b3:38:06:29:7f:c8:93:ab:bc:a7:69:4f:e5:7c:37: 22:91:99:a9:3d:df:7c:de:d3:cc:a2:10:a2:49:b8:9c:f6:94: f8:e7:08:b3:17:6d:f2:b5:f0:2c:0c:8e:e8:22:25:6e:4b:bb: 70:f9:04:4b:b4:38:23:b2:80:47:dc:b4:e2:ed:8e:73:33:a4: 2a:7c:67:7c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDncwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDUzMzVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDU3NzExQjFBRjlBOTY3 OTJEODhBNDc4MTU1NTRDMjgzNDNGMjRGNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqjZhH/jHAL+IAyufvt4OajcQPUvLa5I3EbTSc+jPQihG1X6Ug nrYl59hPPHzZFByy3qILK2RV9Nnm5h9HJsYRmgK9aDqShpwSQta8NIHTiRz48U0a wxpQOxRJxXXS6YgSBpnrlQiKhoPJJ9wDAc40rG3QYUyskfa+DOMuc/d5GZwEtq7C gSmjdfaQAnbL0/OcNEfvCi3T4JlHhF6gNrPq8nG8RO+r9qW6WccO1DRf9x9ULY73 ORlSuOR2XgJB/3G9QMaDvwc4qnPDvbertkfW1rFYUnYTTarUNz3TGzuKvlZw6Cq3 l52zMvUjvEmd+3N5bI3U8eOHOe5rZ9D+IUPjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUV3EbGvmpZ5LYikeBVVTCg0PyT0QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1YzRWJHdm1wWjVMWWlrZUJWVlRDZzBQeVQwUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBQ8AwDQYJKoZIhvcNAQELBQADggEBADbH+ZvuNvpgc18SYmujFNMjs8yR BJu9e1c+1L+hTsYtrbtUrEXXZPXc4phhd3jTZEuZMs8qT/tfwpjWVs8mdT46o79z EDaBebHCilPMW4sAduT8VFX9k6YSFsEPFQljBzIa35MIwtVKd6+fQ+zMjx12egPB kBI1VwyKc6xmkvcOpDOy2XK5WvScphI+5pv5GBWhxinwWnqAVvGw1hC600O5Ves7 EnGerHzpYCUKntEJPH+UQl7vVLM4Bil/yJOrvKdpT+V8NyKRmak933ze08yiEKJJ uJz2lPjnCLMXbfK18CwMjugiJW5Lu3D5BEu0OCOygEfctOLtjnMzpCp8Z3w= -----END CERTIFICATE-----Generated at Fri Jun 20 15:58:12 2025 by rpki-client