$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/f17mTUS6UZJ9BSUXB2g3Gpz7ukQ.roa File: f17mTUS6UZJ9BSUXB2g3Gpz7ukQ.roa (raw, json) Hash identifier: ujQukxwfLjn2JX+Xt7j1ZvnDwaIGSpYURAptcQ58aQY= Subject key identifier: 7F:5E:E6:4D:44:BA:51:92:7D:05:25:17:07:68:37:1A:9C:FB:BA:44 Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 7A Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f17mTUS6UZJ9BSUXB2g3Gpz7ukQ.roa Signing time: Tue 10 Jun 2025 11:20:20 +0000 ROA not before: Tue 10 Jun 2025 11:20:20 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 148.68.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 18:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Jun 10 11:20:20 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=7F5EE64D44BA51927D0525170768371A9CFBBA44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:02:37:a7:c4:93:dc:32:bd:bf:69:68:a0: a2:ce:e4:7e:e6:9d:fb:c9:e1:74:c1:2e:e9:b7:b8: b9:39:e0:d0:6e:0f:58:6d:1d:c2:c0:f8:f5:c5:95: 7f:91:15:e9:c7:0b:f4:64:52:79:77:2c:39:d2:4e: e8:4e:0f:0c:bd:28:83:20:4a:7e:76:90:aa:b1:7f: 2a:45:5b:49:8c:c7:cd:9b:79:be:2e:7d:04:fc:b5: ba:f0:c9:5c:12:d6:dc:92:7c:2e:67:a2:1b:0d:1a: ff:a4:5f:44:76:6a:dc:27:80:2e:0e:40:b7:d5:58: d9:c5:e2:b9:ca:fc:57:6f:43:48:f3:d6:ca:a4:29: 3e:78:8d:ce:93:53:48:c7:95:f9:8d:bf:35:9a:82: 53:e4:fb:a8:f0:3b:37:94:8e:14:6e:ff:8e:57:4d: 8f:9f:54:56:81:03:c1:3c:13:87:eb:4a:ed:c2:ae: 49:f7:6b:b1:6c:54:8b:a6:79:60:99:33:d5:74:76: dd:5d:3d:b0:49:1f:b7:b2:10:f3:2c:ac:0a:3b:bb: e3:46:3b:35:b1:5e:d5:b0:af:2b:58:c9:79:1f:85: 44:f3:b7:15:98:b1:85:98:11:d8:98:ab:67:f6:0e: bc:93:3d:4b:2a:69:ca:22:44:ef:3a:b7:b0:72:ce: b6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5E:E6:4D:44:BA:51:92:7D:05:25:17:07:68:37:1A:9C:FB:BA:44 X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f17mTUS6UZJ9BSUXB2g3Gpz7ukQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 148.68.0.0/17 Signature Algorithm: sha256WithRSAEncryption a6:b5:79:33:96:10:d0:d4:91:00:3b:12:17:9a:3b:9c:27:a4: fb:29:0a:d0:78:fe:5d:58:cb:fa:3c:a2:3d:e1:9c:2f:ba:1f: 52:b6:9d:9e:d5:62:4b:ee:ec:b9:15:d9:e6:59:fe:02:44:01: ed:56:f0:2e:5a:cb:ad:f1:ac:d3:3f:1d:d4:78:89:dc:bf:c9: 76:49:5c:a3:de:29:23:f5:01:df:d9:92:f8:46:05:a8:c4:ae: e1:48:5d:de:c1:c7:33:0c:d5:95:2c:60:fb:ba:43:29:78:71: 60:48:18:d5:89:3b:e9:8d:b6:cc:52:d9:5e:fe:c4:87:e0:ac: 51:6b:e4:f1:50:43:dc:c8:99:fa:50:76:b4:69:d9:65:0e:2d: 9d:96:4f:e9:58:46:9c:bd:d3:9e:de:ec:a7:8d:28:1d:9f:1a: 12:b9:0e:b8:65:78:47:e1:8b:80:78:cc:4b:7d:90:5c:9a:5e: 26:a5:c8:65:68:23:bc:d4:82:98:b3:8c:df:a2:f8:d8:cf:04: b0:56:36:6d:98:b5:79:3c:3d:7f:04:83:7c:8c:8b:9a:ad:5c: 1c:a6:5b:7d:15:7d:c5:44:25:fb:ca:0b:ef:37:0e:e4:3f:b8: ed:ef:c1:bc:9d:c3:3a:e9:e5:43:d7:72:6a:0e:89:85:ce:c4: 04:41:bf:15 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTI1MDYxMDEx MjAyMFoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoN0Y1RUU2NEQ0NEJBNTE5 MjdEMDUyNTE3MDc2ODM3MUE5Q0ZCQkE0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMWhAjenxJPcMr2/aWigos7kfuad+8nhdMEu6be4uTng0G4PWG0d wsD49cWVf5EV6ccL9GRSeXcsOdJO6E4PDL0ogyBKfnaQqrF/KkVbSYzHzZt5vi59 BPy1uvDJXBLW3JJ8LmeiGw0a/6RfRHZq3CeALg5At9VY2cXiucr8V29DSPPWyqQp PniNzpNTSMeV+Y2/NZqCU+T7qPA7N5SOFG7/jldNj59UVoEDwTwTh+tK7cKuSfdr sWxUi6Z5YJkz1XR23V09sEkft7IQ8yysCju740Y7NbFe1bCvK1jJeR+FRPO3FZix hZgR2JirZ/YOvJM9SyppyiJE7zq3sHLOtmsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR/XuZNRLpRkn0FJRcHaDcanPu6RDAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDkvZjE3bVRVUzZVWko5QlNVWEIyZzNHcHo3dWtRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB5READANBgkqhkiG9w0BAQsFAAOCAQEAprV5M5YQ0NSRADsSF5o7nCek+ykK 0Hj+XVjL+jyiPeGcL7ofUradntViS+7suRXZ5ln+AkQB7VbwLlrLrfGs0z8d1HiJ 3L/Jdklco94pI/UB39mS+EYFqMSu4Uhd3sHHMwzVlSxg+7pDKXhxYEgY1Yk76Y22 zFLZXv7Eh+CsUWvk8VBD3MiZ+lB2tGnZZQ4tnZZP6VhGnL3Tnt7sp40oHZ8aErkO uGV4R+GLgHjMS32QXJpeJqXIZWgjvNSCmLOM36L42M8EsFY2bZi1eTw9fwSDfIyL mq1cHKZbfRV9xUQl+8oL7zcO5D+47e/BvJ3DOunlQ9dyag6Jhc7EBEG/FQ== -----END CERTIFICATE-----Generated at Sat Jun 21 22:47:53 2025 by rpki-client