$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gdI88xDRRSkNDEFKF2bAPRI-Pgw.roa File: gdI88xDRRSkNDEFKF2bAPRI-Pgw.roa (raw, json) Hash identifier: 6p6BAcU35Z/9rYhBoKmtiSLXO+vXRlWQBUnDHHze/H4= Subject key identifier: 81:D2:3C:F3:10:D1:45:29:0D:0C:41:4A:17:66:C0:3D:12:3E:3E:0C Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 7E Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gdI88xDRRSkNDEFKF2bAPRI-Pgw.roa Signing time: Tue 10 Jun 2025 11:24:35 +0000 ROA not before: Tue 10 Jun 2025 11:24:35 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 148.67.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 14:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Jun 10 11:24:35 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=81D23CF310D145290D0C414A1766C03D123E3E0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1f:98:00:7a:30:5b:b5:77:63:a1:7c:b7:82: 17:79:0e:b6:8e:81:e2:99:a3:fb:ad:7f:86:b1:e1: 64:b2:7f:ad:09:b3:1a:81:c2:42:dc:7b:ed:be:bf: 7e:8c:64:d5:1a:b4:b1:62:d0:9b:5b:20:7f:39:0c: 06:6b:f8:6e:d5:42:2b:ef:79:1b:4c:df:2e:8f:67: 18:d7:5d:36:b4:f6:01:88:f9:05:10:c1:1f:30:14: 17:c8:e4:1d:6b:ad:74:76:6f:c4:54:2b:95:0d:79: 7f:bc:d2:0f:b2:2e:c4:f0:f0:2b:72:45:84:dc:8a: 48:71:39:b8:d6:ad:b3:6e:9d:b9:89:72:bb:eb:0f: 8b:4b:3a:ec:06:80:e8:7f:6d:d6:4a:b9:91:3f:46: 94:47:3a:1d:f6:36:3d:52:b4:15:6f:9a:7b:58:83: 17:9b:44:59:a7:f2:f9:70:0d:73:a9:26:fb:9b:2c: e1:37:bc:8d:b1:33:5c:41:6f:29:48:f8:79:26:5e: 68:62:f0:2e:22:39:31:ff:95:43:2d:a3:b6:05:e4: d8:75:43:cc:26:be:8e:4e:ea:e0:70:bf:3e:2a:13: 56:12:e7:78:71:ad:2d:09:e5:bf:55:02:e5:8e:6a: e6:5c:f3:1a:97:8e:09:25:8d:b0:54:d0:a7:cd:26: 81:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D2:3C:F3:10:D1:45:29:0D:0C:41:4A:17:66:C0:3D:12:3E:3E:0C X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gdI88xDRRSkNDEFKF2bAPRI-Pgw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 148.67.128.0/17 Signature Algorithm: sha256WithRSAEncryption 2c:a9:fb:fc:55:0c:d9:eb:01:1a:00:cb:9d:f2:90:df:16:bd: e0:ee:b8:1c:6d:ea:75:ff:77:41:77:fe:82:45:ee:50:2f:f8: e7:04:fe:e7:7a:4a:e4:a4:d5:13:51:39:f7:28:ca:53:05:36: 79:17:fb:3b:57:7b:10:c6:ae:f6:4f:c2:c0:6b:58:9d:16:d7: 39:7a:12:0c:25:29:8d:71:cb:12:77:f6:26:5b:48:f6:9e:62: 6a:17:33:1f:c8:67:4c:4a:aa:06:37:28:8c:43:64:bd:37:cc: cd:85:74:f4:e6:19:bd:98:a4:70:02:b8:93:8f:24:3e:a1:b2: 95:54:2e:a8:13:f6:ca:78:a8:2c:8d:db:e4:60:f2:db:c7:3d: 6a:cc:a0:89:ec:83:4e:b1:ba:34:65:21:f9:f3:55:92:21:36: b5:70:5e:33:08:67:8f:a7:4d:14:09:f8:79:c3:29:af:b2:e2: 7d:46:68:09:ac:ca:1e:e6:3f:70:5a:bf:5d:ee:2e:60:aa:76: 20:15:31:19:9b:55:74:12:86:81:c8:00:2c:f5:b8:df:49:31: 5e:35:f3:6d:5d:ac:24:c4:cb:15:17:79:91:f5:a5:4e:d2:cb: 8c:7b:e4:60:eb:d9:9e:c2:ea:40:c3:43:da:1b:00:dd:b4:8e: 3e:a8:52:cd -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTI1MDYxMDEx MjQzNVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoODFEMjNDRjMxMEQxNDUy OTBEMEM0MTRBMTc2NkMwM0QxMjNFM0UwQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOMfmAB6MFu1d2OhfLeCF3kOto6B4pmj+61/hrHhZLJ/rQmzGoHC Qtx77b6/foxk1Rq0sWLQm1sgfzkMBmv4btVCK+95G0zfLo9nGNddNrT2AYj5BRDB HzAUF8jkHWutdHZvxFQrlQ15f7zSD7IuxPDwK3JFhNyKSHE5uNats26duYlyu+sP i0s67AaA6H9t1kq5kT9GlEc6HfY2PVK0FW+ae1iDF5tEWafy+XANc6km+5ss4Te8 jbEzXEFvKUj4eSZeaGLwLiI5Mf+VQy2jtgXk2HVDzCa+jk7q4HC/PioTVhLneHGt LQnlv1UC5Y5q5lzzGpeOCSWNsFTQp80mgZMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSB0jzzENFFKQ0MQUoXZsA9Ej4+DDAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDkvZ2RJODh4RFJSU2tOREVGS0YyYkFQUkktUGd3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB5RDgDANBgkqhkiG9w0BAQsFAAOCAQEALKn7/FUM2esBGgDLnfKQ3xa94O64 HG3qdf93QXf+gkXuUC/45wT+53pK5KTVE1E59yjKUwU2eRf7O1d7EMau9k/CwGtY nRbXOXoSDCUpjXHLEnf2JltI9p5iahczH8hnTEqqBjcojENkvTfMzYV09OYZvZik cAK4k48kPqGylVQuqBP2ynioLI3b5GDy28c9asygieyDTrG6NGUh+fNVkiE2tXBe Mwhnj6dNFAn4ecMpr7LifUZoCazKHuY/cFq/Xe4uYKp2IBUxGZtVdBKGgcgALPW4 30kxXjXzbV2sJMTLFRd5kfWlTtLLjHvkYOvZnsLqQMND2hsA3bSOPqhSzQ== -----END CERTIFICATE-----Generated at Sun Jun 22 20:42:17 2025 by rpki-client