$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/i6EnUCfxlpiXbb45RAFgSwMle0Y.roa File: i6EnUCfxlpiXbb45RAFgSwMle0Y.roa (raw, json) Hash identifier: U4UoQx10ST2NnIA/1X1gz5kKOEYeM4PcumCEVk9/6bM= Subject key identifier: 8B:A1:27:50:27:F1:96:98:97:6D:BE:39:44:01:60:4B:03:25:7B:46 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FAE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i6EnUCfxlpiXbb45RAFgSwMle0Y.roa Signing time: Tue 10 Jun 2025 11:40:41 +0000 ROA not before: Tue 10 Jun 2025 11:40:41 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.67.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4014 (0xfae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:40:41 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=8BA1275027F19698976DBE394401604B03257B46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:88:c7:03:31:f5:f4:7e:4b:4e:8f:dd:87: 2a:b5:26:53:dd:fa:8c:8c:62:ff:f5:60:9a:ed:5a: d4:76:4e:26:d1:93:69:e8:97:52:a4:3f:53:8e:a8: 18:54:38:c5:2d:a9:8c:96:6a:bd:89:f9:7d:cc:76: c2:fa:40:b1:a9:fa:ef:19:f0:be:2b:f9:e1:a5:70: 80:8a:53:58:d4:09:d9:f5:07:5a:e7:de:5e:c9:d6: bf:0b:cd:a5:98:32:6a:f0:a0:d5:78:4f:89:9d:30: 0a:78:3b:b7:d7:c7:07:75:a0:53:8e:26:b4:49:f4: 21:be:61:93:c4:46:78:e9:d4:48:2e:d8:10:ee:4b: 8a:bf:9c:65:cc:6b:6f:9f:b5:b6:e9:f8:83:d7:e5: 4c:9c:c1:6b:13:4f:ee:94:4b:6b:ad:f4:7b:11:1d: 48:f8:53:3b:98:3a:70:7c:2b:53:be:66:65:33:fe: e1:b4:27:b8:fc:5f:ae:82:1f:db:d9:aa:38:89:fa: 45:37:e8:27:f3:34:a6:76:84:d1:5b:60:ff:6d:44: 55:5b:e0:06:7e:9f:de:76:63:2c:62:c1:3b:fe:a7: e8:d6:36:ec:1a:b3:a3:61:0a:b8:86:93:16:8f:95: a1:f0:99:3a:4e:5a:e1:e6:23:40:67:5b:a7:40:84: b1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A1:27:50:27:F1:96:98:97:6D:BE:39:44:01:60:4B:03:25:7B:46 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i6EnUCfxlpiXbb45RAFgSwMle0Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.160.0/19 Signature Algorithm: sha256WithRSAEncryption b0:2b:9c:f4:bf:97:2a:e3:2b:96:c9:c5:6f:df:77:a1:01:06: 94:88:95:56:ce:18:88:6b:03:8f:2d:1b:55:ba:db:78:2f:60: fe:44:56:c9:79:58:1d:56:54:da:29:5a:75:d8:8e:84:ce:47: 2b:bb:47:2a:4e:c8:a0:75:c5:27:6d:ba:d5:5d:13:ae:a8:b6: 9a:f4:4a:ec:b7:8e:5e:2d:d9:cf:f0:f9:88:52:4a:d4:d3:7e: 26:8b:98:63:c7:7d:0c:6a:fd:a3:89:f6:f5:b9:65:c3:b4:f3: c8:e0:5e:53:5f:f4:11:50:74:eb:bd:68:14:94:6c:30:8f:c3: 13:00:0b:f2:34:96:87:fe:08:aa:90:fd:7c:39:d1:de:4b:6b: f3:c1:0a:b2:dd:ef:26:10:d1:bd:d2:f1:28:f8:79:bb:7e:59: 08:fa:37:a0:e5:7d:72:b0:d1:46:bd:3c:57:0a:31:e2:7d:fd: 98:55:78:2a:c8:57:f4:31:a7:cb:48:43:4a:19:74:fc:19:60: ee:32:e5:60:01:1a:67:7d:0a:b2:7c:4b:5b:ac:10:d2:18:1d: 3b:67:3f:95:90:87:96:5a:a5:47:12:c6:31:c7:22:02:52:4e: 51:c0:d3:42:fb:3a:12:67:73:c6:d4:ad:65:c0:34:45:3b:7b: 4d:4a:2d:8d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQwNDFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDhCQTEyNzUwMjdGMTk2 OTg5NzZEQkUzOTQ0MDE2MDRCMDMyNTdCNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSJojHAzH19H5LTo/dhyq1JlPd+oyMYv/1YJrtWtR2TibRk2no l1KkP1OOqBhUOMUtqYyWar2J+X3MdsL6QLGp+u8Z8L4r+eGlcICKU1jUCdn1B1rn 3l7J1r8LzaWYMmrwoNV4T4mdMAp4O7fXxwd1oFOOJrRJ9CG+YZPERnjp1Egu2BDu S4q/nGXMa2+ftbbp+IPX5UycwWsTT+6US2ut9HsRHUj4UzuYOnB8K1O+ZmUz/uG0 J7j8X66CH9vZqjiJ+kU36CfzNKZ2hNFbYP9tRFVb4AZ+n952YyxiwTv+p+jWNuwa s6NhCriGkxaPlaHwmTpOWuHmI0BnW6dAhLEZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUi6EnUCfxlpiXbb45RAFgSwMle0YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2k2RW5VQ2Z4bHBpWGJiNDVSQUZnU3dNbGUwWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBQ6AwDQYJKoZIhvcNAQELBQADggEBALArnPS/lyrjK5bJxW/fd6EBBpSI lVbOGIhrA48tG1W623gvYP5EVsl5WB1WVNopWnXYjoTORyu7RypOyKB1xSdtutVd E66otpr0Suy3jl4t2c/w+YhSStTTfiaLmGPHfQxq/aOJ9vW5ZcO088jgXlNf9BFQ dOu9aBSUbDCPwxMAC/I0lof+CKqQ/Xw50d5La/PBCrLd7yYQ0b3S8Sj4ebt+WQj6 N6DlfXKw0Ua9PFcKMeJ9/ZhVeCrIV/Qxp8tIQ0oZdPwZYO4y5WABGmd9CrJ8S1us ENIYHTtnP5WQh5ZapUcSxjHHIgJSTlHA00L7OhJnc8bUrWXANEU7e01KLY0= -----END CERTIFICATE-----Generated at Sun Jun 22 05:09:59 2025 by rpki-client