$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xyq8cgEpgurs2lpVc8ZPCaEU9kM.roa File: Xyq8cgEpgurs2lpVc8ZPCaEU9kM.roa (raw, json) Hash identifier: RByhb5B6FnBz1l0KrtQVptxEfN7OqPy5Gc5TxZ8qxTE= Subject key identifier: 5F:2A:BC:72:01:29:82:EA:EC:DA:5A:55:73:C6:4F:09:A1:14:F6:43 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F47 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xyq8cgEpgurs2lpVc8ZPCaEU9kM.roa Signing time: Tue 10 Jun 2025 11:28:21 +0000 ROA not before: Tue 10 Jun 2025 11:28:21 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 219.114.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 18:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3911 (0xf47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:28:21 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=5F2ABC72012982EAECDA5A5573C64F09A114F643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:ce:75:11:b3:4d:d6:92:27:08:88:ed:18: fd:28:15:3f:bc:86:5d:c3:78:9d:bd:db:0f:d0:aa: cd:aa:da:27:c2:2d:d3:78:be:e2:ef:69:ba:bd:bf: a9:78:06:7f:bc:7b:e5:5f:b8:40:f4:bb:7c:05:a3: 93:83:9d:58:0f:a9:d0:3a:fa:eb:6f:d6:b3:95:7c: 79:4c:55:ca:bd:71:26:08:f4:f7:4b:76:9e:61:cd: cd:8a:ee:a0:44:78:bf:c5:06:5a:a2:ec:7d:19:42: 6d:93:df:70:95:65:44:65:ad:41:fd:fa:db:8e:33: ac:c3:ad:f5:18:63:5a:e5:5c:c4:aa:e7:09:f8:83: d2:64:e4:26:b6:e5:ba:54:99:cf:44:a2:a8:8b:18: b0:86:f4:4c:a8:b6:40:38:59:7b:3c:75:a8:e6:a8: 37:9d:1e:22:c7:99:5e:02:24:fe:3f:eb:c9:6b:43: 40:7b:4d:a3:3a:b5:36:ce:76:28:74:dd:61:b8:84: 36:57:fc:7f:71:f0:75:ec:3e:57:9f:a7:c1:23:78: 73:09:07:76:06:56:66:a2:12:10:40:fc:24:b5:1a: 2b:e7:4c:b5:6d:68:73:79:18:88:7a:88:03:21:6a: c2:c4:a2:aa:c3:77:13:ab:6d:b9:b3:ea:63:df:52: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2A:BC:72:01:29:82:EA:EC:DA:5A:55:73:C6:4F:09:A1:14:F6:43 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xyq8cgEpgurs2lpVc8ZPCaEU9kM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.168.0/22 Signature Algorithm: sha256WithRSAEncryption 48:5d:60:10:36:e9:08:0f:03:8a:d3:e4:ae:d3:22:15:4f:15: cf:dc:2c:4a:44:9a:31:b0:0c:ca:80:62:2e:4c:47:a7:8b:40: 72:6d:df:c7:be:52:a0:9c:cf:ee:32:79:42:6d:b3:c4:02:37: 4e:e8:b0:50:36:ef:5e:57:01:52:84:ff:1c:1e:10:91:bb:83: 5d:3f:57:a2:3b:9a:9d:91:0c:2d:19:bf:7b:70:67:0a:8f:4a: 63:c0:4f:33:8d:6c:02:39:34:45:16:5a:bf:17:7e:9d:00:24: 0f:a5:c1:0d:5b:72:03:41:8c:15:ae:ee:8e:9d:c5:e6:91:d2: 9f:2c:86:b5:ce:8e:b3:50:9e:c8:77:ff:05:5e:89:b4:63:c0: 7f:53:e1:64:22:e4:f5:36:1f:01:9f:d7:8c:46:68:e0:a5:9a: 83:ab:16:a4:17:af:8b:17:f2:ae:53:7c:6a:b9:35:6e:79:65: 47:b4:b4:5b:d3:d6:7f:6a:fa:5a:5e:3f:ef:3e:9b:8f:63:62: e3:ac:1f:56:63:5a:29:ff:f7:6e:8e:40:ff:c9:49:f3:d8:c5: 3c:dc:b1:1a:84:51:31:c8:e5:ce:de:34:c4:b9:29:35:f7:a5: 5b:9d:78:f4:5f:b2:84:b9:27:12:ba:b9:92:14:9a:20:28:5e: d9:0c:1a:6a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD0cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI4MjFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDVGMkFCQzcyMDEyOTgy RUFFQ0RBNUE1NTczQzY0RjA5QTExNEY2NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+3M51EbNN1pInCIjtGP0oFT+8hl3DeJ292w/Qqs2q2ifCLdN4 vuLvabq9v6l4Bn+8e+VfuED0u3wFo5ODnVgPqdA6+utv1rOVfHlMVcq9cSYI9PdL dp5hzc2K7qBEeL/FBlqi7H0ZQm2T33CVZURlrUH9+tuOM6zDrfUYY1rlXMSq5wn4 g9Jk5Ca25bpUmc9EoqiLGLCG9EyotkA4WXs8dajmqDedHiLHmV4CJP4/68lrQ0B7 TaM6tTbOdih03WG4hDZX/H9x8HXsPlefp8EjeHMJB3YGVmaiEhBA/CS1GivnTLVt aHN5GIh6iAMhasLEoqrDdxOrbbmz6mPfUrT9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXyq8cgEpgurs2lpVc8ZPCaEU9kMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1h5cThjZ0VwZ3VyczJscFZjOFpQQ2FFVTlrTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbcqgwDQYJKoZIhvcNAQELBQADggEBAEhdYBA26QgPA4rT5K7TIhVPFc/c LEpEmjGwDMqAYi5MR6eLQHJt38e+UqCcz+4yeUJts8QCN07osFA2715XAVKE/xwe EJG7g10/V6I7mp2RDC0Zv3twZwqPSmPATzONbAI5NEUWWr8Xfp0AJA+lwQ1bcgNB jBWu7o6dxeaR0p8shrXOjrNQnsh3/wVeibRjwH9T4WQi5PU2HwGf14xGaOClmoOr FqQXr4sX8q5TfGq5NW55ZUe0tFvT1n9q+lpeP+8+m49jYuOsH1ZjWin/926OQP/J SfPYxTzcsRqEUTHI5c7eNMS5KTX3pVudePRfsoS5JxK6uZIUmiAoXtkMGmo= -----END CERTIFICATE-----Generated at Sun Jun 22 22:42:19 2025 by rpki-client