$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aOk0u_wZFGyavnah5VurpXTD6e0.roa File: aOk0u_wZFGyavnah5VurpXTD6e0.roa (raw, json) Hash identifier: xD379C2XEqB3gbZvIIjIEhNGr5yo6IkVXkNDABy1M3Q= Subject key identifier: 68:E9:34:BB:FC:19:14:6C:9A:BE:76:A1:E5:5B:AB:A5:74:C3:E9:ED Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F39 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aOk0u_wZFGyavnah5VurpXTD6e0.roa Signing time: Tue 10 Jun 2025 11:24:38 +0000 ROA not before: Tue 10 Jun 2025 11:24:38 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 27.230.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 10:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3897 (0xf39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:38 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=68E934BBFC19146C9ABE76A1E55BABA574C3E9ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4f:d1:b4:66:a1:38:09:11:b2:be:e7:45:ab: f5:d8:4b:a4:eb:0e:2a:cc:18:48:c6:ae:f3:3e:2b: 78:cc:67:5a:c7:e6:7f:85:df:e0:45:6c:40:84:9f: 9e:9c:0d:e6:0f:f5:02:ed:96:1f:23:34:d7:a2:81: cd:35:0f:82:3c:4e:e0:15:e0:ad:a4:d7:b5:81:ae: d8:50:88:c9:59:34:7a:43:7d:d0:f3:91:14:b8:b7: f0:12:20:1f:3f:1a:b6:59:f7:06:d6:e4:4e:bc:f5: 6f:37:cf:73:7e:05:95:a2:0d:e3:23:01:59:17:54: 51:a8:f2:d1:7b:81:43:38:90:82:fe:46:02:e6:7b: 7f:fb:ab:11:6c:64:b5:e2:13:a1:13:09:c6:e5:c5: 4d:7d:00:5e:54:43:06:7c:8d:73:24:1e:7e:4e:69: 2e:06:fe:19:ad:c1:47:2b:14:2e:fa:19:10:67:d2: ea:39:e0:ed:30:fb:58:ab:a4:f2:da:c0:03:dd:8f: 76:bd:59:b1:5d:ea:06:fa:71:f4:cc:78:51:99:9b: a4:cf:af:b1:ef:95:31:38:a5:e1:c3:a7:a4:c2:2c: ec:eb:2c:58:01:f0:9a:30:8c:ac:d7:96:89:61:8a: 74:7e:e6:21:69:3b:c3:88:b9:4b:6e:37:5e:61:2f: 3c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E9:34:BB:FC:19:14:6C:9A:BE:76:A1:E5:5B:AB:A5:74:C3:E9:ED X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aOk0u_wZFGyavnah5VurpXTD6e0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.88.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:b9:97:2a:4d:d4:0d:22:7e:84:cd:52:a9:f4:a9:52:1a:c1: dc:82:73:e2:60:c3:83:5c:78:80:e8:a6:ba:75:23:01:5b:e6: fc:18:31:ed:2e:aa:6a:ba:1a:fd:6a:40:73:fd:eb:8e:4b:c8: e0:4c:d6:ce:bd:fa:56:a1:83:19:0c:c7:b8:54:8f:33:02:4f: e3:36:31:8e:c4:4b:c9:b2:96:c3:e7:c3:13:ea:e2:a6:82:5b: ef:82:c7:f1:45:7e:a9:2d:08:5b:1d:1b:65:af:bf:43:0b:e3: c4:64:ec:22:59:54:93:fe:66:8e:2b:c8:a3:c2:6d:60:07:1e: de:c8:77:43:9a:8c:04:2d:67:b0:d9:f9:4f:f5:c2:76:38:6b: 7d:ac:17:ec:3a:d3:b9:47:1b:3b:af:5f:c7:41:0e:74:13:03: 4f:0a:7f:97:29:17:4a:a6:cf:fb:52:1b:ec:f9:98:d6:af:f6: f0:73:72:47:ee:7f:4c:19:0a:ac:fa:f1:9a:f1:08:a8:de:8d: c1:a7:0a:99:f5:f6:c9:3d:70:2a:1c:ca:f8:3d:ee:dc:09:13: 13:47:28:12:78:47:be:96:b1:25:53:18:02:9e:58:31:cb:79: da:f8:b0:ad:7f:90:fe:9b:26:b6:60:1e:7c:d0:37:79:09:61: 9e:4f:f2:6a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDzkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MzhaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDY4RTkzNEJCRkMxOTE0 NkM5QUJFNzZBMUU1NUJBQkE1NzRDM0U5RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbT9G0ZqE4CRGyvudFq/XYS6TrDirMGEjGrvM+K3jMZ1rH5n+F 3+BFbECEn56cDeYP9QLtlh8jNNeigc01D4I8TuAV4K2k17WBrthQiMlZNHpDfdDz kRS4t/ASIB8/GrZZ9wbW5E689W83z3N+BZWiDeMjAVkXVFGo8tF7gUM4kIL+RgLm e3/7qxFsZLXiE6ETCcblxU19AF5UQwZ8jXMkHn5OaS4G/hmtwUcrFC76GRBn0uo5 4O0w+1irpPLawAPdj3a9WbFd6gb6cfTMeFGZm6TPr7HvlTE4peHDp6TCLOzrLFgB 8JowjKzXlolhinR+5iFpO8OIuUtuN15hLzzZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUaOk0u/wZFGyavnah5VurpXTD6e0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2FPazB1X3daRkd5YXZuYWg1VnVycFhURDZlMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEb5lgwDQYJKoZIhvcNAQELBQADggEBACy5lypN1A0ifoTNUqn0qVIawdyC c+Jgw4NceIDoprp1IwFb5vwYMe0uqmq6Gv1qQHP9645LyOBM1s69+lahgxkMx7hU jzMCT+M2MY7ES8mylsPnwxPq4qaCW++Cx/FFfqktCFsdG2Wvv0ML48Rk7CJZVJP+ Zo4ryKPCbWAHHt7Id0OajAQtZ7DZ+U/1wnY4a32sF+w607lHGzuvX8dBDnQTA08K f5cpF0qmz/tSG+z5mNav9vBzckfuf0wZCqz68ZrxCKjejcGnCpn19sk9cCocyvg9 7twJExNHKBJ4R76WsSVTGAKeWDHLedr4sK1/kP6bJrZgHnzQN3kJYZ5P8mo= -----END CERTIFICATE-----Generated at Sat Jun 21 13:38:34 2025 by rpki-client