$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dKPIC9SM9Dyj95Kkgf5SX2ALZUQ.roa File: dKPIC9SM9Dyj95Kkgf5SX2ALZUQ.roa (raw, json) Hash identifier: Gl3PtD1cwsg+epOCRsG8EhXFh7SuZ/E8vBGG9u96GwE= Subject key identifier: 74:A3:C8:0B:D4:8C:F4:3C:A3:F7:92:A4:81:FE:52:5F:60:0B:65:44 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F75 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dKPIC9SM9Dyj95Kkgf5SX2ALZUQ.roa Signing time: Tue 10 Jun 2025 11:32:37 +0000 ROA not before: Tue 10 Jun 2025 11:32:37 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 183.73.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 12:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3957 (0xf75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:37 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=74A3C80BD48CF43CA3F792A481FE525F600B6544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:b0:be:e6:22:4f:cd:03:80:f1:b2:03:bd: e0:aa:99:61:4e:99:f5:26:38:22:7f:45:76:8f:7c: 0c:dc:0e:68:9a:69:ab:9e:98:a5:62:5b:2d:ac:f3: f8:76:d4:ea:5d:76:db:6a:a2:d8:f2:e6:63:b0:3c: 3c:83:99:6b:1c:7b:6d:22:88:00:13:08:cd:d1:07: de:ad:61:1b:83:9a:ca:6d:3e:00:c3:90:e9:12:59: 6c:79:52:87:ff:3b:4a:69:f5:98:23:4a:cc:ca:bc: 2f:13:4a:ed:23:43:f4:34:99:fa:af:d4:50:fd:24: 50:19:33:09:66:ee:53:dd:7e:fa:dd:47:f3:23:15: bf:99:bd:84:29:28:9a:48:2f:9d:5c:e5:05:c4:3d: c9:d6:01:58:3a:c1:2d:56:dd:f4:5a:46:09:e0:be: 03:1d:8c:82:2c:89:b4:dc:22:c0:96:3a:07:f1:99: 9e:9f:0b:5a:cc:62:a3:eb:48:f3:b5:3d:60:e1:c1: 22:64:54:37:3f:ca:44:9d:d3:2c:8e:bf:71:85:d6: 51:23:88:b2:f6:27:dd:00:0a:50:ad:66:53:ca:bc: 88:d1:64:73:00:d5:90:b5:3a:d5:e0:45:4b:fb:a5: 3a:b8:97:d4:da:0f:ae:22:dc:06:04:d9:e3:7b:54: 77:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A3:C8:0B:D4:8C:F4:3C:A3:F7:92:A4:81:FE:52:5F:60:0B:65:44 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dKPIC9SM9Dyj95Kkgf5SX2ALZUQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.73.16.0/22 Signature Algorithm: sha256WithRSAEncryption 39:e1:7d:5d:bb:1b:ac:ca:c1:a4:25:64:68:ef:13:d0:71:cf: b0:10:87:22:74:84:19:53:6d:96:7c:ad:0c:8f:27:bb:ac:75: 1c:22:bb:e8:17:d8:58:9a:7b:b5:19:93:f0:31:c3:cf:af:34: 9f:d3:f5:d0:23:32:c9:06:23:18:41:02:b6:69:23:34:4e:46: 54:60:12:2d:96:ab:4b:f5:a3:f8:59:44:3f:58:13:04:05:fb: af:e0:94:f9:7a:12:88:17:85:c0:f2:f7:26:01:52:b8:e3:e1: 47:ff:07:e2:a8:69:b4:db:c8:15:d2:6d:0d:44:69:de:a0:b7: 66:ed:6b:00:fc:51:89:43:ef:f8:d0:34:15:73:7f:a3:4f:df: eb:2c:a9:5d:6d:71:eb:71:9e:50:10:0d:6c:8a:53:f0:3a:65: 69:27:61:ce:0e:6f:ff:2b:d5:8b:d3:75:70:9b:05:52:7c:d6: 21:90:4d:d7:db:f6:19:15:b7:dc:68:c3:0a:2a:3d:de:86:e7: 51:d5:f8:28:51:eb:34:05:a7:9e:7f:53:84:6c:35:cd:24:16: b5:44:e8:bc:7c:60:86:96:bc:91:0c:6c:68:db:3d:1e:b3:f2: 0a:eb:ed:bf:0e:57:c4:6a:d8:bb:ac:3e:f6:35:9a:0a:6d:7f: bf:b5:b9:a2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMzdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDc0QTNDODBCRDQ4Q0Y0 M0NBM0Y3OTJBNDgxRkU1MjVGNjAwQjY1NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC27LC+5iJPzQOA8bIDveCqmWFOmfUmOCJ/RXaPfAzcDmiaaaue mKViWy2s8/h21Opddttqotjy5mOwPDyDmWsce20iiAATCM3RB96tYRuDmsptPgDD kOkSWWx5Uof/O0pp9ZgjSszKvC8TSu0jQ/Q0mfqv1FD9JFAZMwlm7lPdfvrdR/Mj Fb+ZvYQpKJpIL51c5QXEPcnWAVg6wS1W3fRaRgngvgMdjIIsibTcIsCWOgfxmZ6f C1rMYqPrSPO1PWDhwSJkVDc/ykSd0yyOv3GF1lEjiLL2J90AClCtZlPKvIjRZHMA 1ZC1OtXgRUv7pTq4l9TaD64i3AYE2eN7VHfxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdKPIC9SM9Dyj95Kkgf5SX2ALZUQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2RLUElDOVNNOUR5ajk1S2tnZjVTWDJBTFpVUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAK3SRAwDQYJKoZIhvcNAQELBQADggEBADnhfV27G6zKwaQlZGjvE9Bxz7AQ hyJ0hBlTbZZ8rQyPJ7usdRwiu+gX2Fiae7UZk/Axw8+vNJ/T9dAjMskGIxhBArZp IzRORlRgEi2Wq0v1o/hZRD9YEwQF+6/glPl6EogXhcDy9yYBUrjj4Uf/B+KoabTb yBXSbQ1Ead6gt2btawD8UYlD7/jQNBVzf6NP3+ssqV1tcetxnlAQDWyKU/A6ZWkn Yc4Ob/8r1YvTdXCbBVJ81iGQTdfb9hkVt9xowwoqPd6G51HV+ChR6zQFp55/U4Rs Nc0kFrVE6Lx8YIaWvJEMbGjbPR6z8grr7b8OV8Rq2LusPvY1mgptf7+1uaI= -----END CERTIFICATE-----Generated at Sun Jun 22 15:04:35 2025 by rpki-client