$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XLI756FI5Z5d3xoY4g880tXdfVU.roa File: XLI756FI5Z5d3xoY4g880tXdfVU.roa (raw, json) Hash identifier: B5GN6dIKPDf+Ka8aHvsp4kpabvVl3FlHHKH9m11Oaag= Subject key identifier: 5C:B2:3B:E7:A1:48:E5:9E:5D:DF:1A:18:E2:0F:3C:D2:D5:DD:7D:55 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F5F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XLI756FI5Z5d3xoY4g880tXdfVU.roa Signing time: Tue 10 Jun 2025 11:32:25 +0000 ROA not before: Tue 10 Jun 2025 11:32:25 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.79.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3935 (0xf5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:25 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=5CB23BE7A148E59E5DDF1A18E20F3CD2D5DD7D55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:ab:92:52:06:cf:6e:e5:bf:b2:f4:cc:ba: c2:d1:92:38:f8:41:b2:a4:b0:5a:56:4c:23:5c:bf: f4:a1:f4:bf:24:f7:d5:a3:bb:83:c5:64:55:30:63: e7:a4:e3:02:00:c3:39:a4:25:8d:09:e0:97:e3:fb: 05:10:b8:37:68:bc:84:d3:69:c1:7d:d9:fc:87:f7: 39:08:d1:9c:65:2f:64:da:af:a7:51:22:b6:fd:e5: c9:7b:cb:c0:83:f0:d4:63:1c:41:87:8b:18:65:5e: 83:c3:2e:e1:99:27:9c:77:67:6b:3b:32:41:39:51: 44:2e:1c:27:d5:6e:96:da:02:0f:ae:45:2e:32:45: aa:6d:56:0e:f2:d5:91:4f:c6:25:ac:1f:36:95:e3: b8:88:7d:ed:f0:1d:61:e0:a4:ce:5f:b3:fa:3a:0e: b6:02:c5:8a:d5:47:eb:80:0f:14:95:d3:f0:48:62: 51:f1:fb:87:4e:56:b8:4a:80:7c:23:3c:19:dc:5e: 17:eb:c6:03:ed:f0:a5:0a:38:fc:20:54:09:2e:88: 72:20:40:93:4a:44:37:2c:dc:68:fb:c1:5e:4c:91: be:e4:76:3f:56:e4:1f:ba:33:e3:63:8a:9f:99:18: af:2f:3d:ee:ed:cc:c0:32:18:28:84:12:dc:39:bb: 7e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B2:3B:E7:A1:48:E5:9E:5D:DF:1A:18:E2:0F:3C:D2:D5:DD:7D:55 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XLI756FI5Z5d3xoY4g880tXdfVU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.108.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:75:b8:81:a7:9a:e0:73:67:17:4e:81:e2:c4:6b:ed:77:b1: 89:1e:32:72:71:cb:e3:ac:16:0f:fd:28:4f:e7:9a:f8:e2:f0: 55:21:42:7c:4c:36:ff:a4:1b:80:31:7b:78:5d:44:18:11:b4: c5:f2:ad:4e:f6:67:65:34:4b:50:b6:6d:29:f2:dd:c7:55:0a: 00:14:93:09:83:d0:67:9e:3b:80:0b:56:b4:07:de:15:9e:90: 7a:88:97:00:31:45:65:01:8b:3f:c1:58:0a:9d:ee:20:c5:cb: b5:31:b7:c4:37:b2:12:9d:de:40:04:6d:bc:04:fa:00:45:55: 5e:7e:43:64:0e:1f:9e:b0:0b:ac:e0:48:90:c2:90:25:f5:a7: bd:21:8c:09:d6:92:f8:02:c0:df:7a:2b:28:6d:93:b0:1c:0a: ad:0f:35:49:eb:92:a5:e7:38:d4:50:50:28:a0:2d:1a:0d:49: a2:a6:4a:6d:fb:69:fa:05:11:01:3b:bb:ad:16:52:a2:f5:4d: c8:9a:b7:47:15:00:8b:40:2f:79:ce:db:2a:fb:d2:68:35:23: 74:47:c8:5f:59:1b:b9:10:ff:b9:72:27:da:2a:4f:bb:9b:16: 17:f3:13:b9:2d:ed:1a:5f:b1:c3:41:f6:38:40:d1:dc:3e:11: 09:b9:fb:5d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD18wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMjVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDVDQjIzQkU3QTE0OEU1 OUU1RERGMUExOEUyMEYzQ0QyRDVERDdENTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdL6uSUgbPbuW/svTMusLRkjj4QbKksFpWTCNcv/Sh9L8k99Wj u4PFZFUwY+ek4wIAwzmkJY0J4Jfj+wUQuDdovITTacF92fyH9zkI0ZxlL2Tar6dR Irb95cl7y8CD8NRjHEGHixhlXoPDLuGZJ5x3Z2s7MkE5UUQuHCfVbpbaAg+uRS4y RaptVg7y1ZFPxiWsHzaV47iIfe3wHWHgpM5fs/o6DrYCxYrVR+uADxSV0/BIYlHx +4dOVrhKgHwjPBncXhfrxgPt8KUKOPwgVAkuiHIgQJNKRDcs3Gj7wV5Mkb7kdj9W 5B+6M+Njip+ZGK8vPe7tzMAyGCiEEtw5u34BAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXLI756FI5Z5d3xoY4g880tXdfVUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hMSTc1NkZJNVo1ZDN4b1k0Zzg4MHRYZGZWVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT2wwDQYJKoZIhvcNAQELBQADggEBAH11uIGnmuBzZxdOgeLEa+13sYke MnJxy+OsFg/9KE/nmvji8FUhQnxMNv+kG4Axe3hdRBgRtMXyrU72Z2U0S1C2bSny 3cdVCgAUkwmD0GeeO4ALVrQH3hWekHqIlwAxRWUBiz/BWAqd7iDFy7Uxt8Q3shKd 3kAEbbwE+gBFVV5+Q2QOH56wC6zgSJDCkCX1p70hjAnWkvgCwN96Kyhtk7AcCq0P NUnrkqXnONRQUCigLRoNSaKmSm37afoFEQE7u60WUqL1Tciat0cVAItAL3nO2yr7 0mg1I3RHyF9ZG7kQ/7lyJ9oqT7ubFhfzE7kt7RpfscNB9jhA0dw+EQm5+10= -----END CERTIFICATE-----Generated at Sun Jun 22 01:13:01 2025 by rpki-client