$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ct2OcTM3vdl80gnKkpsFn8EQqgs.roa File: ct2OcTM3vdl80gnKkpsFn8EQqgs.roa (raw, json) Hash identifier: B7jufk/7q4uLrEvHas+sjJiBj6d9bFkBY2SmSfe4oco= Subject key identifier: 72:DD:8E:71:33:37:BD:D9:7C:D2:09:CA:92:9B:05:9F:C1:10:AA:0B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FA9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ct2OcTM3vdl80gnKkpsFn8EQqgs.roa Signing time: Tue 10 Jun 2025 11:40:39 +0000 ROA not before: Tue 10 Jun 2025 11:40:39 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 211.14.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4009 (0xfa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:40:39 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=72DD8E713337BDD97CD209CA929B059FC110AA0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:44:37:f1:f3:e5:4f:b9:71:89:9d:fa:23: 9f:65:40:90:19:e7:eb:3e:ce:4b:51:0b:cd:25:3f: db:01:18:ad:39:05:c6:54:19:5c:d7:98:40:95:1d: 09:5b:c0:75:d2:64:c7:2f:ec:6e:dc:b9:12:c6:fb: fa:41:06:7f:43:04:34:93:d0:1c:d1:b8:48:a2:52: 9d:4d:50:f3:56:c1:c7:88:6c:13:ca:51:f8:c4:8b: 09:32:28:d3:1b:14:16:ce:55:21:b2:94:dd:bc:ad: c8:81:cd:15:44:ff:b2:cf:b0:2e:b1:f4:17:cd:58: 42:f8:2d:18:26:3e:9e:37:82:8c:cb:58:ec:b7:7f: b0:f0:6f:2d:86:cc:50:11:bd:9a:b0:b9:2f:3b:13: 16:47:21:57:13:1e:1f:c5:0d:98:92:83:c5:43:fb: f6:bd:dc:a9:7f:f6:4c:24:d9:b0:12:76:90:01:f0: 9a:b4:f6:f4:66:80:e3:73:a7:6d:de:e6:f6:98:98: 34:0c:7f:73:72:21:a6:57:09:0c:e8:b5:62:ae:b3: bf:75:49:7f:fd:e4:db:b4:18:bd:84:38:00:03:02: cb:88:02:d6:e5:96:fc:73:ad:8b:1f:5b:49:7f:6e: a7:f8:fd:fa:b5:5f:1d:95:c3:05:56:38:59:1f:7f: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DD:8E:71:33:37:BD:D9:7C:D2:09:CA:92:9B:05:9F:C1:10:AA:0B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ct2OcTM3vdl80gnKkpsFn8EQqgs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.92.0/24 Signature Algorithm: sha256WithRSAEncryption db:a2:f4:ff:f7:c2:17:f7:5c:99:fb:62:de:66:a9:10:fa:02: da:22:8a:83:5c:ab:79:0e:62:17:92:8a:d8:b0:3c:e1:fa:3d: 73:5e:4c:0b:bd:aa:65:d9:c7:0f:ab:01:0a:81:f1:f8:63:98: ce:9d:c9:a1:f2:9c:13:d7:44:58:1b:d6:5d:09:9f:b5:22:48: ab:9c:50:0d:54:95:7a:14:a9:5b:4c:95:42:78:6a:8b:9f:8b: ed:a0:55:93:f4:29:24:23:08:b4:8f:1b:86:17:54:69:3e:66: 32:61:cc:9b:58:04:c1:8f:8c:ac:5e:b9:c4:9b:8e:66:8c:96: a8:5c:51:5a:ef:f4:73:e7:43:b0:1e:96:de:bd:7c:48:b4:49: 83:30:f5:2c:88:09:db:34:4b:ee:22:02:f1:d4:d1:e6:13:44: 82:74:eb:be:95:9c:16:dc:84:8f:80:57:b4:ae:72:e9:68:60: 04:ec:e7:f5:2a:c6:11:f8:9f:18:ac:bd:95:dc:28:b5:ec:c8: 4f:bf:37:29:a4:71:5a:d6:10:be:4e:a0:7a:7d:80:de:dd:9e: 57:1e:1b:15:d2:ad:cf:7c:02:cb:15:1b:e2:59:97:b5:5a:d1: 1d:8d:dc:08:42:e0:e3:26:73:df:81:00:8e:ca:25:97:61:a2: 1b:73:89:b4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD6kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQwMzlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDcyREQ4RTcxMzMzN0JE RDk3Q0QyMDlDQTkyOUIwNTlGQzExMEFBMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC74kQ38fPlT7lxiZ36I59lQJAZ5+s+zktRC80lP9sBGK05BcZU GVzXmECVHQlbwHXSZMcv7G7cuRLG+/pBBn9DBDST0BzRuEiiUp1NUPNWwceIbBPK UfjEiwkyKNMbFBbOVSGylN28rciBzRVE/7LPsC6x9BfNWEL4LRgmPp43gozLWOy3 f7Dwby2GzFARvZqwuS87ExZHIVcTHh/FDZiSg8VD+/a93Kl/9kwk2bASdpAB8Jq0 9vRmgONzp23e5vaYmDQMf3NyIaZXCQzotWKus791SX/95Nu0GL2EOAADAsuIAtbl lvxzrYsfW0l/bqf4/fq1Xx2VwwVWOFkffx+zAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUct2OcTM3vdl80gnKkpsFn8EQqgswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2N0Mk9jVE0zdmRsODBnbktrcHNGbjhFUXFncy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADTDlwwDQYJKoZIhvcNAQELBQADggEBANui9P/3whf3XJn7Yt5mqRD6Atoi ioNcq3kOYheSitiwPOH6PXNeTAu9qmXZxw+rAQqB8fhjmM6dyaHynBPXRFgb1l0J n7UiSKucUA1UlXoUqVtMlUJ4aoufi+2gVZP0KSQjCLSPG4YXVGk+ZjJhzJtYBMGP jKxeucSbjmaMlqhcUVrv9HPnQ7Aelt69fEi0SYMw9SyICds0S+4iAvHU0eYTRIJ0 676VnBbchI+AV7SuculoYATs5/UqxhH4nxisvZXcKLXsyE+/NymkcVrWEL5OoHp9 gN7dnlceGxXSrc98AssVG+JZl7Va0R2N3AhC4OMmc9+BAI7KJZdhohtzibQ= -----END CERTIFICATE-----Generated at Sun Jun 22 03:57:25 2025 by rpki-client