$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gkiLZNmsZa2ZDEMW6txMe6lM8Bs.roa File: gkiLZNmsZa2ZDEMW6txMe6lM8Bs.roa (raw, json) Hash identifier: LuMiLW23PMvx1V7Qi3DcClfLFxswkRlmwOwFEw6rk20= Subject key identifier: 82:48:8B:64:D9:AC:65:AD:99:0C:43:16:EA:DC:4C:7B:A9:4C:F0:1B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EE0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gkiLZNmsZa2ZDEMW6txMe6lM8Bs.roa Signing time: Tue 10 Jun 2025 11:12:29 +0000 ROA not before: Tue 10 Jun 2025 11:12:29 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.76.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3808 (0xee0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:12:29 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=82488B64D9AC65AD990C4316EADC4C7BA94CF01B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:b2:a2:b7:14:01:df:ef:b9:20:e0:9f:81: 84:b0:19:88:db:d0:5d:05:47:de:eb:b4:cd:fd:7b: a0:5a:bd:78:97:7e:ac:91:35:f5:3b:4e:53:ed:d5: 50:6f:cf:56:48:3c:85:37:57:10:57:ea:41:13:b3: 01:b2:75:01:f5:f8:0d:db:79:d1:54:60:a2:8e:d9: 93:3f:e4:56:1b:12:09:16:fe:17:b0:d2:d9:0c:e0: c4:5e:8e:0d:a3:fc:dd:16:7b:ff:cd:ba:be:d5:86: bd:3e:39:9f:a8:40:64:81:0f:d4:0c:c1:0f:ba:d3: 0b:cd:9f:ed:71:19:b9:08:c7:b5:9b:b7:1f:67:ff: ba:d5:0d:f6:a9:31:60:15:a9:4d:4f:5b:af:38:7e: fe:b6:22:63:1e:33:58:4e:8d:e1:d9:fd:1f:41:bf: 0d:3e:6d:b5:a8:78:60:80:93:40:61:2d:32:31:7e: db:97:4d:22:ea:b8:b1:0a:d6:a7:35:5e:5d:ce:78: 3d:9f:c6:c3:ef:6b:a0:09:00:be:fe:d0:47:73:1d: 00:e0:be:c9:c0:2c:43:34:69:89:9f:47:80:16:57: 87:2b:c1:d0:0d:7c:c8:cc:0f:ac:57:09:fc:d0:08: 77:00:75:d0:bd:1f:c0:ed:5a:99:b7:40:af:31:16: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:48:8B:64:D9:AC:65:AD:99:0C:43:16:EA:DC:4C:7B:A9:4C:F0:1B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gkiLZNmsZa2ZDEMW6txMe6lM8Bs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.176.0/20 Signature Algorithm: sha256WithRSAEncryption d6:07:42:14:83:d8:76:9e:a7:99:0d:c6:3b:24:7f:cd:ec:07: 91:8b:3f:52:58:94:a8:be:c3:35:49:4e:ab:c9:19:1d:9a:9a: 83:13:8d:fc:fc:fd:8c:5c:87:ed:a0:45:8d:a4:e8:41:ac:cf: c3:b4:e6:53:91:46:ce:da:dc:29:28:9d:f4:ba:73:4b:bb:5a: 03:52:d1:fb:82:a8:51:7e:2b:27:ea:83:da:04:4f:f3:f4:b0: b6:9d:d0:1e:54:0d:1b:06:e0:93:51:f8:56:bc:9e:90:03:3e: 52:b9:e5:1b:e3:0b:a8:3f:a4:40:d8:42:f2:46:8c:cf:7a:d6: 8e:bb:16:29:63:51:88:f8:d8:e4:9f:e3:31:00:a3:de:05:ed: 26:2a:81:c5:33:1a:99:18:2b:12:17:0f:f7:5f:96:23:53:ec: 12:74:9e:4b:f5:2f:1f:09:0a:d9:d2:18:e7:09:ee:68:f5:62: d8:37:1a:43:ed:7d:14:cd:ea:56:d1:b0:3a:7a:67:5e:f9:f3: 60:68:da:60:3b:37:20:08:2c:c5:dc:ef:e2:7c:aa:f1:8b:b4: 6a:9a:92:e4:a5:c9:06:62:a4:f7:19:97:ba:6c:5f:e1:c0:d7: 9a:91:ab:93:0e:e9:e1:bd:1d:67:68:1c:bd:5a:06:e4:4f:9f: 18:92:60:8d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDuAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTEyMjlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDgyNDg4QjY0RDlBQzY1 QUQ5OTBDNDMxNkVBREM0QzdCQTk0Q0YwMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCb87KitxQB3++5IOCfgYSwGYjb0F0FR97rtM39e6BavXiXfqyR NfU7TlPt1VBvz1ZIPIU3VxBX6kETswGydQH1+A3bedFUYKKO2ZM/5FYbEgkW/hew 0tkM4MRejg2j/N0We//Nur7Vhr0+OZ+oQGSBD9QMwQ+60wvNn+1xGbkIx7Wbtx9n /7rVDfapMWAVqU1PW684fv62ImMeM1hOjeHZ/R9Bvw0+bbWoeGCAk0BhLTIxftuX TSLquLEK1qc1Xl3OeD2fxsPva6AJAL7+0EdzHQDgvsnALEM0aYmfR4AWV4crwdAN fMjMD6xXCfzQCHcAddC9H8DtWpm3QK8xFsV9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgkiLZNmsZa2ZDEMW6txMe6lM8BswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2draUxaTm1zWmEyWkRFTVc2dHhNZTZsTThCcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBTLAwDQYJKoZIhvcNAQELBQADggEBANYHQhSD2Haep5kNxjskf83sB5GL P1JYlKi+wzVJTqvJGR2amoMTjfz8/Yxch+2gRY2k6EGsz8O05lORRs7a3CkonfS6 c0u7WgNS0fuCqFF+Kyfqg9oET/P0sLad0B5UDRsG4JNR+Fa8npADPlK55RvjC6g/ pEDYQvJGjM961o67FiljUYj42OSf4zEAo94F7SYqgcUzGpkYKxIXD/dfliNT7BJ0 nkv1Lx8JCtnSGOcJ7mj1Ytg3GkPtfRTN6lbRsDp6Z17582Bo2mA7NyAILMXc7+J8 qvGLtGqakuSlyQZipPcZl7psX+HA15qRq5MO6eG9HWdoHL1aBuRPnxiSYI0= -----END CERTIFICATE-----Generated at Sat Jun 21 09:05:39 2025 by rpki-client