$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cKpe596_OgTED08TxB9Ua43aMes.roa File: cKpe596_OgTED08TxB9Ua43aMes.roa (raw, json) Hash identifier: Ced8zzc7rPEO8RL2BnOvuoUEh/XseTDjM+MHmSOioZs= Subject key identifier: 70:AA:5E:E7:DE:BF:3A:04:C4:0F:4F:13:C4:1F:54:6B:8D:DA:31:EB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D51 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cKpe596_OgTED08TxB9Ua43aMes.roa Signing time: Tue 01 Apr 2025 02:17:14 +0000 ROA not before: Tue 01 Apr 2025 02:17:14 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3409 (0xd51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:17:14 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=70AA5EE7DEBF3A04C40F4F13C41F546B8DDA31EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:b4:5c:54:e7:5f:a3:c1:d7:69:e1:38:69: 9d:17:03:ba:b6:40:97:20:31:af:93:65:4d:db:a2: 44:51:36:fb:9d:8b:a6:4b:2d:76:28:37:ff:3e:55: 11:1c:ec:79:46:58:11:55:fb:a5:74:e6:35:e5:b5: ae:84:93:dd:1a:e6:11:15:fa:d7:f4:c8:9e:81:dd: 96:dd:43:91:76:6c:7a:91:20:d5:01:82:fe:87:e8: 67:7d:8f:a1:31:b6:c0:4d:69:2f:46:6f:42:0a:28: 8b:e7:8a:2e:e9:1c:b9:3e:38:33:5f:04:1c:53:12: db:f6:10:59:ff:0c:b8:59:db:03:61:3f:e6:59:4f: b9:58:7d:73:eb:48:45:6c:4f:0a:16:50:56:0c:b6: 67:38:84:5e:3a:95:bb:7c:df:0e:f3:76:cd:51:ce: f2:68:c2:09:53:08:87:34:47:39:d2:34:b1:bc:3c: a9:4b:53:a0:cb:4f:64:4c:73:e3:13:8b:65:66:75: 7c:e9:47:26:c7:ad:4a:f5:81:6f:0a:3d:1e:d0:10: f8:26:84:81:ed:88:1f:a4:4b:80:68:4a:e0:3a:df: 7e:5b:f0:17:56:17:6a:f0:2f:36:9a:7a:ae:a7:0a: fa:2f:7f:50:2c:6e:04:45:4e:f1:d0:c5:08:f7:0f: 78:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AA:5E:E7:DE:BF:3A:04:C4:0F:4F:13:C4:1F:54:6B:8D:DA:31:EB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cKpe596_OgTED08TxB9Ua43aMes.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.104.0/21 Signature Algorithm: sha256WithRSAEncryption b9:cc:f1:2a:39:fd:52:27:f8:f5:a4:bd:82:f0:6e:61:39:d4: c2:26:ea:74:32:9e:94:16:84:76:01:69:47:24:b2:69:50:2f: 6e:39:5d:05:98:a2:88:b4:39:82:9e:34:84:32:2d:29:1f:f0: c6:4b:14:45:2c:b2:a1:65:10:71:52:26:ec:72:d8:f0:76:4c: 94:9a:5f:80:37:53:4c:ae:ba:c9:1d:ed:39:a2:62:a5:6c:e0: 8f:17:10:3c:19:e1:fe:15:4f:0d:e9:85:27:f2:d0:68:ec:a1: 45:bb:e3:8d:dd:5e:fe:a9:f0:94:78:99:b7:06:14:9f:0b:a4: f1:2c:95:ed:34:7d:bd:7e:76:e3:e2:22:64:86:a4:ff:a5:e0: 6f:b2:9e:e6:81:a1:14:4b:c4:48:c8:22:8f:f3:39:46:11:c0: 6c:1d:de:cf:ad:1f:c2:47:46:96:72:0c:ba:89:4b:0f:e3:5e: eb:93:32:ba:db:83:2e:f7:82:c4:07:34:11:9c:5f:20:bf:93: 21:0c:af:bb:f5:cb:ae:1a:b6:f2:81:26:10:80:b2:18:0b:d6: ab:13:6a:79:3c:43:32:f9:d9:65:a8:1c:5e:67:2f:38:00:99: c3:6c:79:ff:69:09:5d:24:be:70:96:51:02:13:10:ce:e1:28: 1b:2d:0e:27 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDVEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE3MTRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDcwQUE1RUU3REVCRjNB MDRDNDBGNEYxM0M0MUY1NDZCOEREQTMxRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1trRcVOdfo8HXaeE4aZ0XA7q2QJcgMa+TZU3bokRRNvudi6ZL LXYoN/8+VREc7HlGWBFV+6V05jXlta6Ek90a5hEV+tf0yJ6B3ZbdQ5F2bHqRINUB gv6H6Gd9j6ExtsBNaS9Gb0IKKIvnii7pHLk+ODNfBBxTEtv2EFn/DLhZ2wNhP+ZZ T7lYfXPrSEVsTwoWUFYMtmc4hF46lbt83w7zds1RzvJowglTCIc0RznSNLG8PKlL U6DLT2RMc+MTi2VmdXzpRybHrUr1gW8KPR7QEPgmhIHtiB+kS4BoSuA6335b8BdW F2rwLzaaeq6nCvovf1AsbgRFTvHQxQj3D3i5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcKpe596/OgTED08TxB9Ua43aMeswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2NLcGU1OTZfT2dURUQwOFR4QjlVYTQzYU1lcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMb5mgwDQYJKoZIhvcNAQELBQADggEBALnM8So5/VIn+PWkvYLwbmE51MIm 6nQynpQWhHYBaUcksmlQL245XQWYooi0OYKeNIQyLSkf8MZLFEUssqFlEHFSJuxy 2PB2TJSaX4A3U0yuuskd7TmiYqVs4I8XEDwZ4f4VTw3phSfy0GjsoUW7443dXv6p 8JR4mbcGFJ8LpPEsle00fb1+duPiImSGpP+l4G+ynuaBoRRLxEjIIo/zOUYRwGwd 3s+tH8JHRpZyDLqJSw/jXuuTMrrbgy73gsQHNBGcXyC/kyEMr7v1y64atvKBJhCA shgL1qsTank8QzL52WWoHF5nLzgAmcNsef9pCV0kvnCWUQITEM7hKBstDic= -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:33 2025 by rpki-client