$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WBL1MaQojOzxGunyVibAw4Iv6S4.roa File: WBL1MaQojOzxGunyVibAw4Iv6S4.roa (raw, json) Hash identifier: fLm4Ctsh35zDG8Br3SlbsJ2L6aUmhf9aNhdRQraEFsc= Subject key identifier: 58:12:F5:31:A4:28:8C:EC:F1:1A:E9:F2:56:26:C0:C3:82:2F:E9:2E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E97 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WBL1MaQojOzxGunyVibAw4Iv6S4.roa Signing time: Tue 10 Jun 2025 10:56:58 +0000 ROA not before: Tue 10 Jun 2025 10:56:58 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 27.230.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3735 (0xe97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:56:58 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=5812F531A4288CECF11AE9F25626C0C3822FE92E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:ca:da:f1:0c:31:89:bf:68:1f:eb:67:62: b1:4f:8e:fc:84:1e:7f:b4:92:05:94:c9:a5:f5:ca: b3:bb:9c:d1:d4:d1:d6:03:1e:e4:58:51:58:0c:cf: cd:55:53:25:c1:5a:e1:e3:1b:27:16:8d:6f:06:8c: 94:78:14:5d:57:61:83:06:3a:45:45:4d:2a:f6:6f: 6e:e2:ff:1d:ac:37:6a:78:62:df:94:d5:b6:0a:72: fb:64:2b:e6:11:fc:0a:37:5a:40:0b:c4:84:ed:a9: 31:51:31:10:25:dc:2c:16:b7:76:da:6f:de:ee:03: f9:be:f0:01:d6:3a:db:05:18:7c:67:35:f0:09:e5: ad:0a:02:c3:0e:88:5c:cc:65:e6:46:71:41:05:77: 65:24:fb:81:23:4b:7f:f6:be:7e:84:0d:a8:ad:0a: 61:e9:2c:71:30:32:84:90:93:1d:36:1b:7e:2c:44: dd:d5:bc:2a:ae:f8:62:db:24:42:dd:db:2e:43:47: 72:d2:7d:9b:10:f6:df:44:b4:f3:0a:46:dc:9c:b8: c7:d9:34:02:3b:db:f4:c1:98:16:4c:b7:a9:58:82: 4a:8c:ae:9f:5d:3c:a0:54:8c:3b:df:ee:b1:c3:c4: 12:85:dc:7d:b9:e0:df:0f:59:02:c7:5a:73:ef:ca: 9d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:12:F5:31:A4:28:8C:EC:F1:1A:E9:F2:56:26:C0:C3:82:2F:E9:2E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WBL1MaQojOzxGunyVibAw4Iv6S4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.90.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:d2:05:6d:db:51:84:b8:9f:5c:43:7d:b2:3e:ac:60:0d:a9: c5:d5:32:64:da:54:d1:fe:c2:37:f0:5e:a2:74:e1:8e:61:ab: f7:e9:0c:36:9b:cb:99:fe:f7:cc:b9:da:e1:f3:48:79:6c:37: e6:c7:2d:45:b2:8c:79:99:14:30:38:8f:9f:6f:85:57:93:2c: 74:90:3c:13:3a:07:ca:14:bb:ba:40:67:1b:f2:6d:d2:c5:57: 2d:36:88:fe:dc:e3:7a:8c:ec:90:e6:a3:b7:fd:e7:d0:d3:bb: 6e:c2:58:7c:6d:8a:ab:d0:3e:2d:69:cd:b9:c6:5a:2b:1a:7f: c3:13:c0:b0:fb:ac:8e:4f:90:cf:ee:4f:fb:f1:54:86:ef:09: e1:ff:9f:7c:cc:46:91:7e:a4:ec:40:8f:17:7f:7a:2f:1e:60: 61:0d:45:a4:4f:6c:1f:48:8c:30:7a:b6:d5:a4:03:8d:7a:04: fb:d6:e1:56:1e:54:58:f2:76:c7:bd:5e:40:11:51:c2:85:33: 78:66:30:eb:ce:8f:d2:02:d5:4b:49:67:6f:a5:74:60:d6:ff: ec:5a:58:7b:e2:69:ea:69:28:4b:04:bf:a8:fd:84:70:3a:8c: 26:e7:88:42:e3:4c:eb:a8:d8:ea:db:9d:20:73:84:4a:b7:6f: 0a:d0:57:7a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDpcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDU2NThaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDU4MTJGNTMxQTQyODhD RUNGMTFBRTlGMjU2MjZDMEMzODIyRkU5MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwBMra8Qwxib9oH+tnYrFPjvyEHn+0kgWUyaX1yrO7nNHU0dYD HuRYUVgMz81VUyXBWuHjGycWjW8GjJR4FF1XYYMGOkVFTSr2b27i/x2sN2p4Yt+U 1bYKcvtkK+YR/Ao3WkALxITtqTFRMRAl3CwWt3bab97uA/m+8AHWOtsFGHxnNfAJ 5a0KAsMOiFzMZeZGcUEFd2Uk+4EjS3/2vn6EDaitCmHpLHEwMoSQkx02G34sRN3V vCqu+GLbJELd2y5DR3LSfZsQ9t9EtPMKRtycuMfZNAI72/TBmBZMt6lYgkqMrp9d PKBUjDvf7rHDxBKF3H254N8PWQLHWnPvyp3zAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWBL1MaQojOzxGunyVibAw4Iv6S4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1dCTDFNYVFvak96eEd1bnlWaWJBdzRJdjZTNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEb5lowDQYJKoZIhvcNAQELBQADggEBAC3SBW3bUYS4n1xDfbI+rGANqcXV MmTaVNH+wjfwXqJ04Y5hq/fpDDaby5n+98y52uHzSHlsN+bHLUWyjHmZFDA4j59v hVeTLHSQPBM6B8oUu7pAZxvybdLFVy02iP7c43qM7JDmo7f959DTu27CWHxtiqvQ Pi1pzbnGWisaf8MTwLD7rI5PkM/uT/vxVIbvCeH/n3zMRpF+pOxAjxd/ei8eYGEN RaRPbB9IjDB6ttWkA416BPvW4VYeVFjydse9XkARUcKFM3hmMOvOj9IC1UtJZ2+l dGDW/+xaWHviaeppKEsEv6j9hHA6jCbniELjTOuo2OrbnSBzhEq3bwrQV3o= -----END CERTIFICATE-----Generated at Sun Jun 22 01:00:47 2025 by rpki-client