$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fIovRMN5RvtcrUH94zxbfWBj5Aw.roa File: fIovRMN5RvtcrUH94zxbfWBj5Aw.roa (raw, json) Hash identifier: mFZe3X6rllEVjzeu5FjWPSlgdGs0uDiplf7SugEy3Nc= Subject key identifier: 7C:8A:2F:44:C3:79:46:FB:5C:AD:41:FD:E3:3C:5B:7D:60:63:E4:0C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F37 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fIovRMN5RvtcrUH94zxbfWBj5Aw.roa Signing time: Tue 10 Jun 2025 11:24:36 +0000 ROA not before: Tue 10 Jun 2025 11:24:36 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 27.229.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 18:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3895 (0xf37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:36 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=7C8A2F44C37946FB5CAD41FDE33C5B7D6063E40C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bb:f8:a1:68:fd:86:e5:b6:34:44:b0:8e:2f: 57:c5:ee:a2:f9:38:a1:72:ea:a5:f7:f6:e8:96:f2: b0:71:3e:d1:45:2c:e7:ca:9e:4d:e0:03:a4:46:c9: d1:0f:01:d3:03:20:59:1c:f6:19:f4:fd:21:69:af: 26:6e:67:1c:bc:96:aa:d0:de:d8:26:b4:9d:09:c5: 79:e9:01:01:50:c0:d9:04:68:9a:01:c2:d7:5d:8f: 8e:c3:36:f0:11:f1:12:d8:71:8d:64:28:dc:c6:0f: a4:2a:60:e8:f2:c6:58:d3:5d:ed:65:ab:e3:be:a5: ad:e7:2b:13:10:a6:f5:94:da:60:c7:00:6d:95:d2: 0c:f4:62:50:dc:6e:c1:62:fc:f4:7e:1d:c8:08:46: 82:e5:14:f2:84:9b:b6:a7:65:da:34:2d:af:a6:ca: d3:41:92:97:74:0e:48:8a:64:82:aa:d8:07:7b:29: a7:b4:da:9a:92:7b:65:ac:79:8e:75:59:0e:c5:77: ef:93:d5:7a:be:af:c6:e1:62:96:ba:e9:d4:62:0c: b7:c2:71:ca:24:06:48:e7:c6:a4:cb:af:24:09:bd: 36:6a:9e:e7:10:ff:97:6e:a9:21:48:00:b8:e2:3c: dd:e3:8c:63:8f:45:60:f4:fb:11:06:d0:4e:7f:26: c7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8A:2F:44:C3:79:46:FB:5C:AD:41:FD:E3:3C:5B:7D:60:63:E4:0C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fIovRMN5RvtcrUH94zxbfWBj5Aw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.229.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3f:de:57:7e:72:00:da:25:09:80:f3:81:85:af:7b:06:00:cf: fe:fb:a3:a2:e2:7e:da:a8:f6:0b:fa:ef:39:20:c5:c3:ec:89: 3a:1e:9d:2f:81:6b:8e:de:2c:63:94:5e:28:0c:a7:8a:67:7a: d6:ab:d1:4b:61:cd:dd:09:8a:47:26:a1:0a:9c:68:77:25:3e: 4e:92:9b:e9:3f:35:66:28:c4:1c:a8:28:62:13:95:1e:94:c9: 12:c2:6c:87:3d:5b:de:ac:00:bd:70:49:eb:3d:b3:2d:07:37: bf:9d:4a:a9:e1:e8:40:cc:66:b4:01:c3:91:a9:b3:6a:da:ba: 1a:bb:27:34:fc:28:00:b9:c0:6e:34:c5:77:bb:26:62:07:a6: e6:41:2e:9f:e8:da:38:8b:84:25:2d:7e:d5:1a:af:78:99:4d: f9:30:7e:2c:f2:eb:9f:a0:ef:0d:48:04:c6:06:33:92:c3:d5: a2:1e:dd:af:56:b9:28:7c:a1:95:6c:bf:8f:74:2e:e4:70:98: 5e:3a:b5:6b:a8:ea:e8:5a:04:42:b4:88:bf:70:9d:41:2c:75: 5c:f5:db:dd:17:78:d8:d5:d2:41:ef:e9:bd:fa:26:56:44:10: 64:68:e3:7d:ed:a9:e1:a7:42:9d:fc:69:f4:a3:3a:66:05:f3: 4d:79:34:59 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICDzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MzZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDdDOEEyRjQ0QzM3OTQ2 RkI1Q0FENDFGREUzM0M1QjdENjA2M0U0MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYu/ihaP2G5bY0RLCOL1fF7qL5OKFy6qX39uiW8rBxPtFFLOfK nk3gA6RGydEPAdMDIFkc9hn0/SFpryZuZxy8lqrQ3tgmtJ0JxXnpAQFQwNkEaJoB wtddj47DNvAR8RLYcY1kKNzGD6QqYOjyxljTXe1lq+O+pa3nKxMQpvWU2mDHAG2V 0gz0YlDcbsFi/PR+HcgIRoLlFPKEm7anZdo0La+mytNBkpd0DkiKZIKq2Ad7Kae0 2pqSe2WseY51WQ7Fd++T1Xq+r8bhYpa66dRiDLfCccokBkjnxqTLryQJvTZqnucQ /5duqSFIALjiPN3jjGOPRWD0+xEG0E5/JsfpAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUfIovRMN5RvtcrUH94zxbfWBj5AwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ZJb3ZSTU41UnZ0Y3JVSDk0enhiZldCajVBdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAb5TANBgkqhkiG9w0BAQsFAAOCAQEAP95XfnIA2iUJgPOBha97BgDP/vuj ouJ+2qj2C/rvOSDFw+yJOh6dL4Frjt4sY5ReKAynimd61qvRS2HN3QmKRyahCpxo dyU+TpKb6T81ZijEHKgoYhOVHpTJEsJshz1b3qwAvXBJ6z2zLQc3v51KqeHoQMxm tAHDkamzatq6GrsnNPwoALnAbjTFd7smYgem5kEun+jaOIuEJS1+1RqveJlN+TB+ LPLrn6DvDUgExgYzksPVoh7dr1a5KHyhlWy/j3Qu5HCYXjq1a6jq6FoEQrSIv3Cd QSx1XPXb3Rd42NXSQe/pvfomVkQQZGjjfe2p4adCnfxp9KM6ZgXzTXk0WQ== -----END CERTIFICATE-----Generated at Sat Jun 21 20:07:19 2025 by rpki-client