$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/g_Nd4natVJn_1JVKvafd2D0_9po.roa File: g_Nd4natVJn_1JVKvafd2D0_9po.roa (raw, json) Hash identifier: qInYmy/t9DNy6nSQ1Fi486Lhq1sza2K9Gchq/Ma+LJk= Subject key identifier: 83:F3:5D:E2:76:AD:54:99:FF:D4:95:4A:BD:A7:DD:D8:3D:3F:F6:9A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F6F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/g_Nd4natVJn_1JVKvafd2D0_9po.roa Signing time: Tue 10 Jun 2025 11:32:33 +0000 ROA not before: Tue 10 Jun 2025 11:32:33 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 219.114.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 18:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3951 (0xf6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:33 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=83F35DE276AD5499FFD4954ABDA7DDD83D3FF69A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:24:3f:b9:96:fc:29:4d:20:ef:b6:02:6d:d5: 23:e4:68:4a:81:3c:72:22:cd:0e:1d:1e:ed:f3:ba: 6e:f0:2c:c7:a7:2a:84:5d:cc:1b:2c:e1:3c:22:d8: 22:e0:15:4c:18:54:de:62:a8:91:08:26:24:aa:1e: 4d:6d:4e:1d:3f:f9:a5:48:d7:ef:07:b7:29:84:ff: 25:7a:27:d2:fd:0b:62:08:fd:0e:50:d7:4e:39:07: 2c:da:09:ff:b2:cf:98:38:3d:25:1d:93:5d:ff:42: 10:c1:bb:e7:f2:09:f1:f5:ea:25:e4:72:2d:a9:32: c2:8d:1e:43:a7:bf:2c:0c:17:52:b7:08:60:f7:ea: d0:3f:2b:a4:d7:fb:f9:a4:02:e7:9a:96:53:0f:36: f5:a3:13:24:01:14:8a:43:cd:ec:5b:8a:03:c4:aa: 82:b5:25:3b:41:a6:31:19:5a:2f:69:b2:af:19:71: 4b:e5:0d:de:d3:13:a3:73:bd:b3:15:2c:b3:cc:18: a5:45:5a:57:d5:83:aa:3a:dc:1e:df:9d:7f:1b:7f: 4d:56:12:4b:4d:18:4c:42:35:7f:46:6c:39:27:f9: ef:e5:5a:a0:a7:f2:fc:ff:13:29:ec:27:8f:71:55: 70:7a:52:89:2e:81:fd:00:70:2e:09:a6:fc:40:b4: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F3:5D:E2:76:AD:54:99:FF:D4:95:4A:BD:A7:DD:D8:3D:3F:F6:9A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/g_Nd4natVJn_1JVKvafd2D0_9po.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.180.0/22 Signature Algorithm: sha256WithRSAEncryption 48:af:70:a6:4a:24:06:b3:d2:a4:ea:db:8f:8b:84:ec:3a:23: 24:dc:7c:bd:a2:d4:c1:72:5a:9c:42:20:8b:f3:50:5f:98:8f: 31:64:27:13:2a:05:5f:6c:df:6c:e0:f5:e5:1e:14:20:38:1f: d2:d7:b4:13:96:4a:2a:70:bd:08:da:3d:79:f6:73:0e:96:7f: 75:e8:fb:a5:8b:e6:01:98:83:e0:2a:84:17:a7:1d:16:48:cf: e1:80:aa:6b:18:e5:89:1a:1e:12:d2:a2:31:68:d4:cd:02:a6: 04:c4:50:d8:8d:94:ab:03:66:81:f5:d2:c8:5b:75:9e:7f:28: bf:7f:43:24:3f:50:e4:2e:ce:42:72:2a:5f:a2:e7:30:8b:9e: d7:b4:a1:f4:33:fd:f0:32:f4:8d:44:86:cd:25:ca:79:21:c4: b9:a6:d5:ba:b7:95:99:88:b2:97:77:e4:87:cf:fe:24:49:9e: 09:9b:87:fd:12:db:01:f8:82:cf:68:a3:e0:93:31:87:6b:8f: b6:ae:ed:4b:da:47:48:54:e2:6f:15:e3:ff:a0:c8:58:0b:50: 0b:0d:24:d5:64:2c:31:63:10:99:6c:32:6b:30:b7:7b:e5:93: c0:14:f5:56:62:1e:a8:e1:0e:b3:fe:d0:de:85:e0:f1:eb:f9: 92:38:27:34 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMzNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDgzRjM1REUyNzZBRDU0 OTlGRkQ0OTU0QUJEQTdEREQ4M0QzRkY2OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwJD+5lvwpTSDvtgJt1SPkaEqBPHIizQ4dHu3zum7wLMenKoRd zBss4Twi2CLgFUwYVN5iqJEIJiSqHk1tTh0/+aVI1+8HtymE/yV6J9L9C2II/Q5Q 1045ByzaCf+yz5g4PSUdk13/QhDBu+fyCfH16iXkci2pMsKNHkOnvywMF1K3CGD3 6tA/K6TX+/mkAueallMPNvWjEyQBFIpDzexbigPEqoK1JTtBpjEZWi9psq8ZcUvl Dd7TE6NzvbMVLLPMGKVFWlfVg6o63B7fnX8bf01WEktNGExCNX9GbDkn+e/lWqCn 8vz/EynsJ49xVXB6Uokugf0AcC4JpvxAtLZ/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUg/Nd4natVJn/1JVKvafd2D0/9powHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2dfTmQ0bmF0VkpuXzFKVkt2YWZkMkQwXzlwby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbcrQwDQYJKoZIhvcNAQELBQADggEBAEivcKZKJAaz0qTq24+LhOw6IyTc fL2i1MFyWpxCIIvzUF+YjzFkJxMqBV9s32zg9eUeFCA4H9LXtBOWSipwvQjaPXn2 cw6Wf3Xo+6WL5gGYg+AqhBenHRZIz+GAqmsY5YkaHhLSojFo1M0CpgTEUNiNlKsD ZoH10shbdZ5/KL9/QyQ/UOQuzkJyKl+i5zCLnte0ofQz/fAy9I1Ehs0lynkhxLmm 1bq3lZmIspd35IfP/iRJngmbh/0S2wH4gs9oo+CTMYdrj7au7UvaR0hU4m8V4/+g yFgLUAsNJNVkLDFjEJlsMmswt3vlk8AU9VZiHqjhDrP+0N6F4PHr+ZI4JzQ= -----END CERTIFICATE-----Generated at Fri Jun 20 21:32:13 2025 by rpki-client