$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VCjr9skPMgpmL3_TRKcn16j_3Gs.roa File: VCjr9skPMgpmL3_TRKcn16j_3Gs.roa (raw, json) Hash identifier: oSAktFG1WYDKPKtzMBjoiNqnYf7v9ZV0E+3LG1ncCrc= Subject key identifier: 54:28:EB:F6:C9:0F:32:0A:66:2F:7F:D3:44:A7:27:D7:A8:FF:DC:6B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E8C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VCjr9skPMgpmL3_TRKcn16j_3Gs.roa Signing time: Tue 10 Jun 2025 10:56:52 +0000 ROA not before: Tue 10 Jun 2025 10:56:52 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.72.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 18:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3724 (0xe8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:56:52 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=5428EBF6C90F320A662F7FD344A727D7A8FFDC6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:63:ad:a3:f4:2e:63:7e:75:5c:2d:e4:74:0b: 70:1a:ce:56:88:74:df:52:24:00:b1:4e:a5:7f:4e: 01:09:7b:0d:33:8d:e4:17:51:3d:bc:99:f3:d0:ee: 70:37:0f:2f:1e:c4:7c:94:28:79:ca:31:ba:c9:e3: bb:03:94:ad:c9:bf:b8:e3:db:d6:52:d5:c9:5c:a9: ff:70:b6:b8:92:b2:1f:f1:a8:2c:48:e1:2b:b0:aa: 2b:f1:8a:58:26:08:56:a9:5a:56:8d:70:d9:b5:a0: d2:ea:c6:0b:96:0e:ba:0f:84:38:c3:d6:62:72:fc: b5:40:2c:6e:44:ca:4a:b9:e6:4b:30:c0:14:84:cb: 0e:e2:a5:df:eb:6c:92:f6:8b:6a:58:f6:14:6b:bc: 78:eb:b9:fd:b2:20:2b:8e:66:7b:9d:55:cb:ec:42: b8:d0:08:33:88:92:27:34:65:cd:b8:c6:ea:3d:f5: 13:35:a3:b2:cd:75:70:06:7a:70:7f:68:5f:dd:92: e7:b4:c9:5f:b0:e0:46:fb:ee:72:7d:7a:8d:d0:e1: 6a:b0:c9:95:86:b5:49:82:56:cc:85:10:d5:f5:24: a7:e5:37:27:75:93:57:63:44:59:c7:e4:8a:52:4b: 8d:e3:73:a7:e4:3c:ff:e7:1f:bc:52:06:25:ef:90: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:28:EB:F6:C9:0F:32:0A:66:2F:7F:D3:44:A7:27:D7:A8:FF:DC:6B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VCjr9skPMgpmL3_TRKcn16j_3Gs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.192.0/19 Signature Algorithm: sha256WithRSAEncryption 6d:49:14:e9:90:db:37:7b:42:21:1d:51:60:7e:b3:aa:94:21: 55:c0:3d:8d:cd:6b:75:08:0b:70:1e:3f:9f:f3:5b:66:a7:8a: be:f0:72:de:f3:8f:2c:30:8d:e2:0e:59:46:34:12:f4:44:55: ec:8b:c8:b2:3b:61:18:1a:99:91:c9:74:66:c7:21:4b:e8:47: a8:71:80:18:ec:05:fe:76:27:cd:f9:0d:8e:b8:3e:5c:94:2b: 9d:45:37:fd:82:5a:e4:cc:bb:bb:98:57:ef:7b:f2:f2:b2:ae: 72:51:48:55:a6:91:67:ac:c9:e0:52:af:15:2c:6d:c9:d7:67: 79:8d:52:40:ea:4d:81:8a:de:15:fa:0f:5f:9e:d6:9f:c2:a9: c4:87:99:d7:ae:68:ec:d5:55:a6:44:b9:43:c5:91:5a:2a:c1: b2:b1:54:17:38:3a:33:ec:5c:9d:30:ee:73:a8:f0:52:d3:d7: 64:d4:23:3f:9d:be:c3:16:30:3a:70:b9:00:36:06:41:36:ec: 1f:c3:02:07:13:86:5d:2c:41:77:eb:cc:b5:c2:63:4a:e6:98: d3:44:68:71:72:1f:e4:c1:cd:f6:5b:6c:67:26:90:17:f7:a0: 1f:99:54:76:09:11:e2:d1:69:83:40:c0:d3:ff:eb:cf:e7:9f: 2e:e7:4f:4c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDU2NTJaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDU0MjhFQkY2QzkwRjMy MEE2NjJGN0ZEMzQ0QTcyN0Q3QThGRkRDNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeY62j9C5jfnVcLeR0C3AazlaIdN9SJACxTqV/TgEJew0zjeQX UT28mfPQ7nA3Dy8exHyUKHnKMbrJ47sDlK3Jv7jj29ZS1clcqf9wtriSsh/xqCxI 4SuwqivxilgmCFapWlaNcNm1oNLqxguWDroPhDjD1mJy/LVALG5Eykq55kswwBSE yw7ipd/rbJL2i2pY9hRrvHjruf2yICuOZnudVcvsQrjQCDOIkic0Zc24xuo99RM1 o7LNdXAGenB/aF/dkue0yV+w4Eb77nJ9eo3Q4WqwyZWGtUmCVsyFENX1JKflNyd1 k1djRFnH5IpSS43jc6fkPP/nH7xSBiXvkF8xAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVCjr9skPMgpmL3/TRKcn16j/3GswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ZDanI5c2tQTWdwbUwzX1RSS2NuMTZqXzNHcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBSMAwDQYJKoZIhvcNAQELBQADggEBAG1JFOmQ2zd7QiEdUWB+s6qUIVXA PY3Na3UIC3AeP5/zW2anir7wct7zjywwjeIOWUY0EvREVeyLyLI7YRgamZHJdGbH IUvoR6hxgBjsBf52J835DY64PlyUK51FN/2CWuTMu7uYV+978vKyrnJRSFWmkWes yeBSrxUsbcnXZ3mNUkDqTYGK3hX6D1+e1p/CqcSHmdeuaOzVVaZEuUPFkVoqwbKx VBc4OjPsXJ0w7nOo8FLT12TUIz+dvsMWMDpwuQA2BkE27B/DAgcThl0sQXfrzLXC Y0rmmNNEaHFyH+TBzfZbbGcmkBf3oB+ZVHYJEeLRaYNAwNP/68/nny7nT0w= -----END CERTIFICATE-----Generated at Sat Jun 21 21:19:06 2025 by rpki-client