$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gjrANxFO9qwAmqdA0v_alqafL8I.roa File: gjrANxFO9qwAmqdA0v_alqafL8I.roa (raw, json) Hash identifier: YzvSCl3FK0tjePOmDWSIpoQHigOkwEID2SHEt6uvqnE= Subject key identifier: 82:3A:C0:37:11:4E:F6:AC:00:9A:A7:40:D2:FF:DA:96:A6:9F:2F:C2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E87 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gjrANxFO9qwAmqdA0v_alqafL8I.roa Signing time: Tue 10 Jun 2025 10:56:49 +0000 ROA not before: Tue 10 Jun 2025 10:56:49 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 13:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3719 (0xe87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:56:49 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=823AC037114EF6AC009AA740D2FFDA96A69F2FC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:d1:bc:93:8a:02:ef:25:f8:a8:e0:57:b3: b6:d4:ae:83:c9:39:ff:44:16:00:5b:b3:16:14:a4: 82:51:4f:81:86:ce:72:08:e7:ca:fb:10:1c:a9:c3: fa:b6:a4:a4:a1:00:fd:d1:ee:5e:ef:22:a0:02:cc: 86:1c:ce:1f:ae:1d:7a:d1:77:f1:87:8a:6a:84:7d: 98:6c:92:59:ca:8e:70:1c:a5:af:7c:47:23:3f:34: 2b:2c:79:eb:b2:d3:1d:2e:81:b2:fc:e8:0c:ab:bb: 2f:b4:91:52:a6:47:ab:f7:97:fd:86:85:4d:75:db: 1d:84:c7:0f:87:67:80:6d:f0:15:91:7a:a1:8d:ba: df:de:b4:7e:58:32:e9:e0:6d:5f:b0:3f:c3:49:22: 1c:19:9e:96:d9:45:79:42:c4:1e:f1:65:39:05:0b: 53:c2:46:de:3e:05:a4:ab:89:d1:cc:12:96:e0:43: 0f:c7:48:be:f2:d1:ab:ae:f8:b0:12:8c:49:53:b7: 94:a2:96:9e:bf:33:42:4d:36:07:6d:69:e4:50:40: 15:fe:a7:64:53:b4:fc:a8:e2:72:75:03:bc:99:4d: d4:7c:76:d0:40:d7:b9:4a:b8:91:f3:42:66:f8:84: 82:58:9c:de:81:81:2c:73:44:85:40:bd:1d:d3:e6: fc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3A:C0:37:11:4E:F6:AC:00:9A:A7:40:D2:FF:DA:96:A6:9F:2F:C2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gjrANxFO9qwAmqdA0v_alqafL8I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.20.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:2a:25:73:d9:da:21:ed:8c:61:0e:45:d1:32:0c:20:e9:f0: 29:d8:69:ec:c4:9e:df:97:81:10:b8:20:79:f9:00:45:11:90: 9d:23:a0:29:5c:6d:fa:bb:0a:2d:93:dc:c2:b4:e6:ad:fc:2a: 1e:e9:84:02:ab:bd:17:cc:3e:7a:86:2f:ed:de:2b:8f:84:64: b5:1f:85:9c:02:13:f9:dd:1a:7e:dd:3d:97:a5:c1:d5:b9:21: bc:63:cc:fe:95:a1:ec:05:6a:f0:d6:9c:3d:3b:ed:5f:ea:af: 9c:16:5e:d4:76:f2:c6:e7:26:e4:a1:67:8a:7d:dd:d5:57:e1: 2f:7f:60:62:0b:f7:4c:56:68:8b:19:c8:eb:c7:be:35:5d:c7: 8e:22:f8:e8:7d:01:4b:7c:7e:b1:76:41:35:6d:21:7b:ea:bc: 4a:5f:95:b6:5b:0b:1a:fb:74:df:ab:d6:88:ec:93:52:ca:b8: 02:3f:33:83:c2:b2:ca:c7:e0:31:72:97:ff:0e:07:72:ba:88: 7f:64:66:70:e7:5c:f4:72:07:75:bb:9d:90:3a:66:a9:d0:7a: 2e:3f:5d:e6:82:63:e1:07:4d:84:c7:e7:58:c3:7e:e1:d3:e1: e7:01:86:3b:8b:56:3d:eb:d9:99:2d:3f:1d:af:88:0b:f0:48: 70:a1:dc:12 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDU2NDlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDgyM0FDMDM3MTE0RUY2 QUMwMDlBQTc0MEQyRkZEQTk2QTY5RjJGQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6ztG8k4oC7yX4qOBXs7bUroPJOf9EFgBbsxYUpIJRT4GGznII 58r7EBypw/q2pKShAP3R7l7vIqACzIYczh+uHXrRd/GHimqEfZhsklnKjnAcpa98 RyM/NCsseeuy0x0ugbL86Ayruy+0kVKmR6v3l/2GhU112x2Exw+HZ4Bt8BWReqGN ut/etH5YMungbV+wP8NJIhwZnpbZRXlCxB7xZTkFC1PCRt4+BaSridHMEpbgQw/H SL7y0auu+LASjElTt5Silp6/M0JNNgdtaeRQQBX+p2RTtPyo4nJ1A7yZTdR8dtBA 17lKuJHzQmb4hIJYnN6BgSxzRIVAvR3T5vyZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgjrANxFO9qwAmqdA0v/alqafL8IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2dqckFOeEZPOXF3QW1xZEEwdl9hbHFhZkw4SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADc0hQwDQYJKoZIhvcNAQELBQADggEBAB0qJXPZ2iHtjGEORdEyDCDp8CnY aezEnt+XgRC4IHn5AEURkJ0joClcbfq7Ci2T3MK05q38Kh7phAKrvRfMPnqGL+3e K4+EZLUfhZwCE/ndGn7dPZelwdW5IbxjzP6VoewFavDWnD077V/qr5wWXtR28sbn JuShZ4p93dVX4S9/YGIL90xWaIsZyOvHvjVdx44i+Oh9AUt8frF2QTVtIXvqvEpf lbZbCxr7dN+r1ojsk1LKuAI/M4PCssrH4DFyl/8OB3K6iH9kZnDnXPRyB3W7nZA6 ZqnQei4/XeaCY+EHTYTH51jDfuHT4ecBhjuLVj3r2ZktPx2viAvwSHCh3BI= -----END CERTIFICATE-----Generated at Sun Jun 22 16:42:07 2025 by rpki-client