$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bUNzbCJMWxiJTSnyTsbpIaSCBpI.roa File: bUNzbCJMWxiJTSnyTsbpIaSCBpI.roa (raw, json) Hash identifier: P7muet5wyxQj31ULd71u4tQbGSQet3Ig6CFHZuwtX+Y= Subject key identifier: 6D:43:73:6C:22:4C:5B:18:89:4D:29:F2:4E:C6:E9:21:A4:82:06:92 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0ED3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bUNzbCJMWxiJTSnyTsbpIaSCBpI.roa Signing time: Tue 10 Jun 2025 11:09:10 +0000 ROA not before: Tue 10 Jun 2025 11:09:10 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3795 (0xed3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:09:10 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=6D43736C224C5B18894D29F24EC6E921A4820692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5d:25:31:45:c4:c5:18:86:f5:d2:7d:fd:e7: ae:49:23:7d:48:db:0e:32:a4:17:48:af:73:e7:e2: 9b:43:0e:de:3b:26:a5:76:73:0a:61:db:0a:05:aa: 50:78:58:53:be:fc:16:44:f5:28:a6:d9:d0:1c:42: 08:ba:bb:61:d5:bf:e5:ba:ce:66:a9:53:18:a9:95: 15:06:40:0e:4e:67:b6:33:84:15:06:01:bf:e7:87: d6:69:e3:74:d1:36:5f:60:ff:00:57:3e:ac:a9:ea: 56:22:47:76:56:43:43:2f:86:e5:e2:34:49:3a:dd: f6:d1:08:52:38:8c:c9:15:f3:bf:84:7d:ee:ef:92: b7:8a:12:91:ed:45:89:52:21:90:0d:5f:4f:92:79: 4f:e1:0a:a1:4f:30:f6:9e:6c:c3:a1:77:56:69:80: 01:9d:68:09:3f:fd:ad:e0:a5:64:7d:08:59:11:b5: d4:a1:a5:d2:0a:98:26:2a:f5:fa:b6:80:12:72:e1: 80:10:96:cc:95:e2:04:ad:bc:2e:cf:91:d2:90:70: dc:8e:bd:c2:8f:df:28:36:c4:92:00:03:9d:f0:1e: 9c:49:9b:f8:d8:a2:d6:1e:52:8c:04:f3:87:86:76: 19:79:b0:df:c4:dc:b2:db:3d:7b:6f:09:e0:6b:bd: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:43:73:6C:22:4C:5B:18:89:4D:29:F2:4E:C6:E9:21:A4:82:06:92 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bUNzbCJMWxiJTSnyTsbpIaSCBpI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.64.0/23 Signature Algorithm: sha256WithRSAEncryption a4:2e:4f:37:31:f3:df:f4:03:de:6a:e8:a1:f0:d5:cf:7d:e5: f0:d5:8a:e2:41:2e:d0:20:47:ec:4a:58:09:c3:d7:dd:3e:53: c7:bb:f0:37:55:c3:72:82:14:de:40:94:9f:8d:c9:a9:59:2b: 11:21:3f:52:b9:3d:14:4e:69:d1:19:74:d3:4e:a7:8c:97:0c: 56:a8:62:33:36:64:bc:c5:59:ff:d2:0c:8e:71:49:fe:8a:06: fb:29:1d:fe:8b:8d:0f:03:99:ae:cf:2c:b3:87:83:8b:bf:bc: 5a:b4:8b:0f:70:a2:36:4b:96:2c:84:b9:f1:f6:b0:6e:d4:e5: b6:60:86:f4:61:90:04:84:44:02:3e:5b:dd:a4:8b:1f:ef:44: 0a:67:57:47:42:3e:be:7b:fa:c9:0b:29:27:71:e8:4e:9f:5f: fb:c4:f1:bb:50:fd:79:62:2b:01:18:3a:9c:21:c7:1b:0a:09: 68:a6:f7:5c:18:68:3d:97:24:21:26:44:3a:57:6c:b4:bc:00: 68:59:25:28:70:ae:13:ea:8a:4c:be:6c:ab:27:97:8e:59:7a: 2d:2c:06:d4:7e:ed:4d:ba:e1:ee:dd:01:a4:c8:0b:21:7b:e4: 4e:0e:62:9e:9e:0b:0b:a0:22:f9:18:3a:2b:1f:88:80:ac:68: bb:23:cb:4b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDtMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA5MTBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDZENDM3MzZDMjI0QzVC MTg4OTREMjlGMjRFQzZFOTIxQTQ4MjA2OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYXSUxRcTFGIb10n39565JI31I2w4ypBdIr3Pn4ptDDt47JqV2 cwph2woFqlB4WFO+/BZE9Sim2dAcQgi6u2HVv+W6zmapUxiplRUGQA5OZ7YzhBUG Ab/nh9Zp43TRNl9g/wBXPqyp6lYiR3ZWQ0MvhuXiNEk63fbRCFI4jMkV87+Efe7v kreKEpHtRYlSIZANX0+SeU/hCqFPMPaebMOhd1ZpgAGdaAk//a3gpWR9CFkRtdSh pdIKmCYq9fq2gBJy4YAQlsyV4gStvC7PkdKQcNyOvcKP3yg2xJIAA53wHpxJm/jY otYeUowE84eGdhl5sN/E3LLbPXtvCeBrvY1rAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbUNzbCJMWxiJTSnyTsbpIaSCBpIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2JVTnpiQ0pNV3hpSlRTbnlUc2JwSWFTQ0JwSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0kAwDQYJKoZIhvcNAQELBQADggEBAKQuTzcx89/0A95q6KHw1c995fDV iuJBLtAgR+xKWAnD190+U8e78DdVw3KCFN5AlJ+NyalZKxEhP1K5PRROadEZdNNO p4yXDFaoYjM2ZLzFWf/SDI5xSf6KBvspHf6LjQ8Dma7PLLOHg4u/vFq0iw9wojZL liyEufH2sG7U5bZghvRhkASERAI+W92kix/vRApnV0dCPr57+skLKSdx6E6fX/vE 8btQ/XliKwEYOpwhxxsKCWim91wYaD2XJCEmRDpXbLS8AGhZJShwrhPqiky+bKsn l45Zei0sBtR+7U264e7dAaTICyF75E4OYp6eCwugIvkYOisfiICsaLsjy0s= -----END CERTIFICATE-----Generated at Sun Jun 22 13:52:57 2025 by rpki-client