$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gPvo4OKfhLdLqG9Hy-m_6qHs-N0.roa File: gPvo4OKfhLdLqG9Hy-m_6qHs-N0.roa (raw, json) Hash identifier: QygzOPa1CcGqkOIDoWlFlAz+aKaX21MJ0giX42WZj2Y= Subject key identifier: 80:FB:E8:E0:E2:9F:84:B7:4B:A8:6F:47:CB:E9:BF:EA:A1:EC:F8:DD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0ED1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gPvo4OKfhLdLqG9Hy-m_6qHs-N0.roa Signing time: Tue 10 Jun 2025 11:09:09 +0000 ROA not before: Tue 10 Jun 2025 11:09:09 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.159.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3793 (0xed1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:09:09 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=80FBE8E0E29F84B74BA86F47CBE9BFEAA1ECF8DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6b:fe:02:61:d5:fa:49:5e:19:ae:53:65:62: 84:2e:49:c3:26:4b:16:b5:b3:f0:85:d6:ce:d2:8a: b7:64:06:63:4d:be:0a:51:51:4f:63:dc:2b:6f:b5: 6e:ed:3e:f3:82:0f:b4:a1:3e:b6:9b:b2:ab:47:0f: 91:30:03:2c:93:0e:02:99:a2:ca:c0:cc:85:f4:0b: 20:8f:2f:65:90:3f:15:b2:d3:d5:2b:6d:28:db:4a: be:10:0c:3d:fb:00:f5:00:01:74:dd:23:c3:f5:8b: 71:4a:db:4f:e2:f9:6e:f0:87:3e:ad:fa:58:e7:c6: d9:eb:93:a7:67:61:99:83:9d:db:ce:d0:5b:4f:99: e9:70:32:41:58:dc:0c:ea:9b:61:bc:42:18:92:37: 33:4a:af:04:fc:b6:bd:a9:0a:bc:e6:29:3c:9f:c2: 8c:f5:dd:3d:fa:b2:3d:c1:dc:a2:5c:95:28:e1:56: f6:6f:0b:89:6b:19:ed:0c:bd:c5:ae:ef:3f:0b:47: ae:61:94:e1:e4:ea:aa:a6:4e:27:aa:31:42:5d:c0: 2f:a9:4d:ee:6a:a9:1e:7f:68:7d:ac:10:55:c4:18: 86:33:45:58:19:f3:33:c2:39:a3:0b:39:68:9b:46: 3c:f2:01:ac:1c:8b:30:a1:b7:a8:2b:f7:af:9a:ae: f8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FB:E8:E0:E2:9F:84:B7:4B:A8:6F:47:CB:E9:BF:EA:A1:EC:F8:DD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gPvo4OKfhLdLqG9Hy-m_6qHs-N0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.160.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:82:f3:f8:1b:8b:c6:7a:28:24:94:fc:4d:9a:79:e2:91:4e: ae:26:54:84:29:2c:b5:72:53:b5:98:c0:f4:b2:65:d6:9f:a1: 44:32:15:d2:3c:e2:e8:3d:46:1f:e5:30:da:a9:9b:b2:73:f0: 24:e4:fc:9b:45:70:13:54:36:e2:d2:8a:3f:47:15:72:84:9c: c5:f2:71:59:d5:d1:44:26:f5:71:c3:10:b9:40:3e:ff:b3:5b: ca:74:5c:12:7d:9d:2f:09:6a:0d:d4:49:94:02:32:79:8f:07: 2c:69:49:67:79:72:6f:ef:91:1c:25:67:91:09:bd:f7:1d:c6: fa:29:ab:b3:eb:2e:23:ae:a6:5f:fe:36:47:87:3a:28:5b:6e: 54:6a:1b:79:7f:ca:6c:d8:31:3f:0f:5d:6f:d1:6a:f4:30:82: 96:81:8a:98:36:24:c8:ae:d7:4b:a9:c4:d2:c6:d4:8f:df:f7: cc:bc:48:72:fe:0c:74:35:8a:2c:40:71:e7:f5:74:aa:c8:17: 6f:d3:02:a3:b3:7a:6d:7c:de:a0:40:92:b0:8d:fc:c1:70:44: 0f:44:8c:77:79:b8:a3:de:a7:17:d0:29:8c:83:f3:0a:ae:76: 5f:6d:00:c3:bd:24:7a:9c:7d:ac:8f:5e:ec:6a:b4:04:7a:6a: c1:92:97:8c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA5MDlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDgwRkJFOEUwRTI5Rjg0 Qjc0QkE4NkY0N0NCRTlCRkVBQTFFQ0Y4REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1a/4CYdX6SV4ZrlNlYoQuScMmSxa1s/CF1s7SirdkBmNNvgpR UU9j3CtvtW7tPvOCD7ShPrabsqtHD5EwAyyTDgKZosrAzIX0CyCPL2WQPxWy09Ur bSjbSr4QDD37APUAAXTdI8P1i3FK20/i+W7whz6t+ljnxtnrk6dnYZmDndvO0FtP melwMkFY3Azqm2G8QhiSNzNKrwT8tr2pCrzmKTyfwoz13T36sj3B3KJclSjhVvZv C4lrGe0MvcWu7z8LR65hlOHk6qqmTieqMUJdwC+pTe5qqR5/aH2sEFXEGIYzRVgZ 8zPCOaMLOWibRjzyAawcizCht6gr96+arvi9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgPvo4OKfhLdLqG9Hy+m/6qHs+N0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2dQdm80T0tmaExkTHFHOUh5LW1fNnFIcy1OMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXcn6AwDQYJKoZIhvcNAQELBQADggEBAEqC8/gbi8Z6KCSU/E2aeeKRTq4m VIQpLLVyU7WYwPSyZdafoUQyFdI84ug9Rh/lMNqpm7Jz8CTk/JtFcBNUNuLSij9H FXKEnMXycVnV0UQm9XHDELlAPv+zW8p0XBJ9nS8Jag3USZQCMnmPByxpSWd5cm/v kRwlZ5EJvfcdxvopq7PrLiOupl/+NkeHOihbblRqG3l/ymzYMT8PXW/RavQwgpaB ipg2JMiu10upxNLG1I/f98y8SHL+DHQ1iixAcef1dKrIF2/TAqOzem183qBAkrCN /MFwRA9EjHd5uKPepxfQKYyD8wqudl9tAMO9JHqcfayPXuxqtAR6asGSl4w= -----END CERTIFICATE-----Generated at Sun Jun 22 06:03:39 2025 by rpki-client