$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y7HxKPUeoUm7eMFSmCBimHnncNE.roa File: Y7HxKPUeoUm7eMFSmCBimHnncNE.roa (raw, json) Hash identifier: UW6LDBeTmYBA4LA6jW9s3/kDCQ7d6L1YjtV2i6jNLfw= Subject key identifier: 63:B1:F1:28:F5:1E:A1:49:BB:78:C1:52:98:20:62:98:79:E7:70:D1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F04 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y7HxKPUeoUm7eMFSmCBimHnncNE.roa Signing time: Tue 10 Jun 2025 11:16:49 +0000 ROA not before: Tue 10 Jun 2025 11:16:49 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.162.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 15:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3844 (0xf04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:49 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=63B1F128F51EA149BB78C1529820629879E770D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2f:03:88:61:66:40:a4:c3:a9:d2:6b:e1:5f: b2:3f:13:f8:52:f0:8d:06:eb:b3:0d:46:d7:f4:69: 54:68:a7:50:b8:78:c2:b5:ef:e9:f4:30:38:88:54: 24:96:3d:ee:18:b8:35:6f:d6:81:35:e0:93:92:7e: 9c:b0:4a:9d:a6:e5:53:cd:9e:27:17:3f:5f:d6:62: 73:c9:d6:6c:b6:1b:c1:43:c4:0c:5d:ef:05:c4:2f: ef:bd:6f:31:ba:81:03:05:8f:1b:64:29:2c:ec:d9: 04:72:ae:bb:b5:da:11:a9:c6:f2:9b:21:dd:26:4c: 94:3a:3d:30:d9:84:6b:28:3f:c0:59:31:7b:ae:6e: a9:85:8f:b4:ce:23:d4:93:79:30:5d:cd:41:99:e8: 70:ee:05:14:0e:3a:64:a8:aa:37:9c:ac:2e:c3:0e: 4d:54:8b:34:de:a0:cd:ef:f8:39:73:11:58:c5:a6: e5:f2:3b:e1:67:08:bb:bf:31:b2:3d:ce:ed:64:d8: 90:a5:6d:42:23:15:3b:d3:98:f5:a1:7c:f6:2d:e5: 98:e8:f6:c1:2d:cb:81:81:e3:45:50:c2:85:e5:9d: 5d:4c:86:10:11:44:b3:41:f9:eb:a4:06:56:e8:2e: 64:1e:d0:f9:f4:43:62:1c:35:f5:38:ca:6e:04:28: 45:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B1:F1:28:F5:1E:A1:49:BB:78:C1:52:98:20:62:98:79:E7:70:D1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y7HxKPUeoUm7eMFSmCBimHnncNE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.162.112.0/20 Signature Algorithm: sha256WithRSAEncryption 98:b3:20:cf:56:35:c4:3a:06:f5:49:be:91:e3:7f:7e:f6:1a: c0:52:cd:c6:67:91:e7:93:ab:a5:14:3e:b8:c4:40:2f:c8:c9: b2:27:d3:d4:f2:3e:7a:a4:df:ed:08:7d:39:d1:f2:d7:33:de: d3:2e:5b:c5:fd:27:04:e5:d0:69:0d:c9:40:15:02:fd:fe:52: 7c:f8:3e:27:00:fc:35:53:72:16:ba:f5:b1:38:30:b3:fd:ff: 62:45:d5:5c:32:e3:02:e3:33:c1:37:55:e6:bc:ef:4e:0f:f0: 84:56:26:c0:22:0d:f8:4e:39:b7:7b:f5:f4:bf:a3:46:2b:b9: 99:74:21:57:e4:30:bb:1d:00:4c:6a:25:64:9f:c7:e7:db:52: 59:64:a4:2b:41:e0:a6:7c:81:d4:92:18:b0:d2:bd:4e:e5:b5: ca:4a:70:38:38:a2:c7:81:33:ad:6e:28:b9:1e:1a:e3:52:81: 80:c2:ac:15:13:f1:2b:00:7b:ed:1a:7b:44:dc:7a:16:3d:96: f6:7b:88:78:d8:0d:ac:22:01:fe:4c:9c:f2:26:67:85:f4:1a: e4:b2:56:87:f2:8d:66:3b:32:8e:2e:0a:c9:2c:03:b8:69:a8: cc:51:ec:85:18:32:f0:f3:18:5e:df:9e:78:07:a3:55:76:28: 3f:27:dd:d5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDwQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NDlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDYzQjFGMTI4RjUxRUEx NDlCQjc4QzE1Mjk4MjA2Mjk4NzlFNzcwRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbLwOIYWZApMOp0mvhX7I/E/hS8I0G67MNRtf0aVRop1C4eMK1 7+n0MDiIVCSWPe4YuDVv1oE14JOSfpywSp2m5VPNnicXP1/WYnPJ1my2G8FDxAxd 7wXEL++9bzG6gQMFjxtkKSzs2QRyrru12hGpxvKbId0mTJQ6PTDZhGsoP8BZMXuu bqmFj7TOI9STeTBdzUGZ6HDuBRQOOmSoqjecrC7DDk1UizTeoM3v+DlzEVjFpuXy O+FnCLu/MbI9zu1k2JClbUIjFTvTmPWhfPYt5Zjo9sEty4GB40VQwoXlnV1MhhAR RLNB+eukBlboLmQe0Pn0Q2IcNfU4ym4EKEXTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUY7HxKPUeoUm7eMFSmCBimHnncNEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1k3SHhLUFVlb1VtN2VNRlNtQ0JpbUhubmNORS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARuonAwDQYJKoZIhvcNAQELBQADggEBAJizIM9WNcQ6BvVJvpHjf372GsBS zcZnkeeTq6UUPrjEQC/IybIn09TyPnqk3+0IfTnR8tcz3tMuW8X9JwTl0GkNyUAV Av3+Unz4PicA/DVTcha69bE4MLP9/2JF1Vwy4wLjM8E3Vea8704P8IRWJsAiDfhO Obd79fS/o0YruZl0IVfkMLsdAExqJWSfx+fbUllkpCtB4KZ8gdSSGLDSvU7ltcpK cDg4oseBM61uKLkeGuNSgYDCrBUT8SsAe+0ae0TcehY9lvZ7iHjYDawiAf5MnPIm Z4X0GuSyVofyjWY7Mo4uCsksA7hpqMxR7IUYMvDzGF7fnngHo1V2KD8n3dU= -----END CERTIFICATE-----Generated at Sat Jun 21 17:31:50 2025 by rpki-client