$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_zmY8iYg0CPHn0J86UBgRw5tnZY.roa File: _zmY8iYg0CPHn0J86UBgRw5tnZY.roa (raw, json) Hash identifier: XbFnvu5L6zUHgC085tnoc8OlN7LNczVE2/O2niiTy2k= Subject key identifier: FF:39:98:F2:26:20:D0:23:C7:9F:42:7C:E9:40:60:47:0E:6D:9D:96 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FC1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_zmY8iYg0CPHn0J86UBgRw5tnZY.roa Signing time: Tue 10 Jun 2025 11:44:18 +0000 ROA not before: Tue 10 Jun 2025 11:44:18 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.67.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4033 (0xfc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:44:18 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=FF3998F22620D023C79F427CE94060470E6D9D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4e:d8:11:ef:48:f8:28:cd:0f:ca:8a:ae:cb: 4e:a6:da:01:a2:8c:a4:5e:af:fa:97:15:77:79:f6: b4:b5:ab:2a:80:2c:c9:26:8f:5c:eb:42:92:3b:71: 79:c8:e0:c8:61:1c:0d:93:97:01:66:d2:7b:13:68: f0:7f:5f:4c:43:21:32:be:14:81:bc:5e:d8:37:fe: 08:e6:af:ec:20:3e:6b:54:aa:91:9a:32:9a:5a:e7: 07:38:d9:63:de:6a:02:ea:c1:f1:dc:07:1a:f8:3e: 89:44:38:84:d8:76:d2:d6:3f:59:50:1a:7b:4e:87: 7a:e3:44:95:89:76:93:7c:43:b7:b3:fb:55:4a:3c: 74:61:b6:24:36:f5:97:1d:93:22:7f:9c:fd:1b:0a: 40:83:91:3a:96:4a:9a:7c:ab:03:1c:0d:aa:85:26: 9a:e5:08:e2:d0:fd:a6:67:e4:4e:2d:e8:fd:e2:fc: 24:9a:ae:30:ca:f8:80:15:f6:6a:a0:2c:98:9e:14: 2a:d3:ee:69:fd:30:df:28:ac:29:44:55:0e:01:93: 80:a7:4a:60:14:da:33:e6:55:e0:98:93:f2:00:b1: 48:40:1a:a7:e4:de:9c:1b:c9:2f:a6:97:b0:74:9e: 24:57:ed:85:60:5c:53:61:c7:3f:82:f7:9f:af:f7: bb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:39:98:F2:26:20:D0:23:C7:9F:42:7C:E9:40:60:47:0E:6D:9D:96 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_zmY8iYg0CPHn0J86UBgRw5tnZY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.0.0/18 Signature Algorithm: sha256WithRSAEncryption cc:76:03:20:ec:d4:bd:3f:20:a5:72:c6:06:ed:ea:d8:24:e7: 09:9f:e1:73:76:db:c8:e7:a1:4f:f9:6a:9b:0e:14:57:bb:44: f4:42:cd:19:3a:6e:f1:e8:22:33:ec:16:0b:26:cb:76:cb:fc: 1b:03:33:f2:e5:f2:49:ea:fa:0d:b5:1e:b9:1d:46:a7:fd:40: 8e:3c:e7:e9:cd:1d:1d:25:c6:82:0d:57:ad:ed:a9:03:db:63: 73:0e:06:25:4c:61:9c:d8:45:27:97:04:cd:85:83:f6:6a:d2: 0e:82:b0:56:58:cf:41:61:bb:d5:19:b3:0f:1b:9c:68:3a:7f: 5a:f7:74:85:f9:09:39:90:d5:f5:2e:f3:7b:49:9b:83:b5:1a: cf:74:05:5e:35:3e:ec:35:83:1d:f2:82:99:71:78:05:25:cc: eb:96:9f:08:b1:3e:62:93:7b:f4:22:fc:f8:20:de:32:90:bc: cf:50:f7:ef:ff:37:9e:10:e0:41:e7:8a:59:6e:54:1e:5c:74: bf:24:80:9f:38:08:13:99:cd:b2:32:8f:27:1c:8b:94:1e:b0: a1:44:08:27:bb:06:b7:57:05:24:89:0d:ee:66:be:0d:7d:35: a1:56:54:17:73:08:dc:72:f5:a3:b0:51:90:b8:be:34:2e:cb: 2c:87:f4:5f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD8EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQ0MThaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEZGMzk5OEYyMjYyMEQw MjNDNzlGNDI3Q0U5NDA2MDQ3MEU2RDlEOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfTtgR70j4KM0Pyoquy06m2gGijKRer/qXFXd59rS1qyqALMkm j1zrQpI7cXnI4MhhHA2TlwFm0nsTaPB/X0xDITK+FIG8Xtg3/gjmr+wgPmtUqpGa Mppa5wc42WPeagLqwfHcBxr4PolEOITYdtLWP1lQGntOh3rjRJWJdpN8Q7ez+1VK PHRhtiQ29ZcdkyJ/nP0bCkCDkTqWSpp8qwMcDaqFJprlCOLQ/aZn5E4t6P3i/CSa rjDK+IAV9mqgLJieFCrT7mn9MN8orClEVQ4Bk4CnSmAU2jPmVeCYk/IAsUhAGqfk 3pwbyS+ml7B0niRX7YVgXFNhxz+C95+v97uvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/zmY8iYg0CPHn0J86UBgRw5tnZYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L196bVk4aVlnMENQSG4wSjg2VUJnUnc1dG5aWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYBQwAwDQYJKoZIhvcNAQELBQADggEBAMx2AyDs1L0/IKVyxgbt6tgk5wmf 4XN228jnoU/5apsOFFe7RPRCzRk6bvHoIjPsFgsmy3bL/BsDM/Ll8knq+g21Hrkd Rqf9QI485+nNHR0lxoINV63tqQPbY3MOBiVMYZzYRSeXBM2Fg/Zq0g6CsFZYz0Fh u9UZsw8bnGg6f1r3dIX5CTmQ1fUu83tJm4O1Gs90BV41Puw1gx3ygplxeAUlzOuW nwixPmKTe/Qi/Pgg3jKQvM9Q9+//N54Q4EHnilluVB5cdL8kgJ84CBOZzbIyjycc i5QesKFECCe7BrdXBSSJDe5mvg19NaFWVBdzCNxy9aOwUZC4vjQuyyyH9F8= -----END CERTIFICATE-----Generated at Sat Jun 21 23:25:50 2025 by rpki-client