$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ihRQMVj1mu54bRhJv6ocPB9g-eU.roa File: ihRQMVj1mu54bRhJv6ocPB9g-eU.roa (raw, json) Hash identifier: UYz0klFR1ycYjky8e+MJLIsWAGRg/DbuS/QTWMynpL8= Subject key identifier: 8A:14:50:31:58:F5:9A:EE:78:6D:18:49:BF:AA:1C:3C:1F:60:F9:E5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E6D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ihRQMVj1mu54bRhJv6ocPB9g-eU.roa Signing time: Tue 10 Jun 2025 10:53:28 +0000 ROA not before: Tue 10 Jun 2025 10:53:28 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.76.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 21:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3693 (0xe6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:53:28 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=8A14503158F59AEE786D1849BFAA1C3C1F60F9E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a2:ac:c2:f9:58:a6:86:0a:96:68:e2:50:03: 0f:ef:8b:a6:5a:dd:c6:a7:6e:23:02:e0:3f:90:a4: 5e:c0:c7:80:cc:30:59:5c:ab:15:c4:02:b0:28:04: ae:f8:bb:a5:8c:10:ec:51:ed:fc:05:0b:6f:b1:f5: d6:2d:4a:03:3a:d7:14:b3:ad:2b:83:1a:1a:02:39: cd:38:45:68:a9:fc:73:95:54:68:ee:ec:49:6b:c3: 4f:0c:fb:17:96:54:b8:bf:5d:7b:f2:78:0b:80:c8: e4:11:b7:ff:cb:96:ac:bb:10:c9:67:6f:60:83:86: aa:55:11:cc:da:a5:ca:42:f6:ea:8a:23:41:47:a9: 6f:11:03:a4:f4:8c:2e:a7:22:78:7c:5d:d4:e0:e6: 23:c2:87:c9:85:a3:b0:c7:3a:9b:b5:4d:62:8b:2d: 00:db:e1:20:bd:15:ae:79:d2:c5:5a:8e:9a:37:06: 15:54:45:65:be:7a:86:a7:da:35:33:6b:ec:5d:76: b3:f9:28:02:ff:ed:b1:f1:9d:33:ff:ea:cf:eb:ee: 5b:13:6a:ff:0e:d3:53:5c:7f:a1:e3:d7:ca:bf:dd: 78:3a:10:d9:e7:48:80:38:fb:9c:a0:f2:83:b8:a5: 46:67:75:7a:0e:78:2e:a7:ba:27:a4:e0:51:ef:8f: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:14:50:31:58:F5:9A:EE:78:6D:18:49:BF:AA:1C:3C:1F:60:F9:E5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ihRQMVj1mu54bRhJv6ocPB9g-eU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.64.0/22 Signature Algorithm: sha256WithRSAEncryption b8:78:db:4d:99:1b:f9:ee:ea:ad:91:ee:0d:be:2a:e1:0e:a2: 9f:88:7d:43:67:cc:1a:dc:21:7a:fa:15:ac:ae:31:6c:30:7b: 74:c8:42:ae:11:d8:9b:93:77:fc:0c:35:43:8d:07:08:b5:c6: 98:1c:8b:fe:2d:ff:4d:7a:11:ad:b1:04:83:a5:fd:67:a1:a5: 49:65:98:12:34:46:d4:d6:ee:5a:d7:7d:2b:cb:07:1c:10:08: f1:3b:ba:49:00:95:ba:68:32:cc:7b:2f:85:45:39:d4:b3:24: 85:32:d8:6c:0e:04:39:ba:1b:05:ce:08:f0:c3:bf:ca:0c:dd: b7:1e:10:ec:50:78:2b:78:04:1a:47:a3:ef:d0:6c:36:a5:7b: a7:70:11:45:7a:d4:c8:03:8d:bd:00:3d:cf:29:8d:a4:2a:01: 2c:e7:06:8b:9d:ce:7f:d8:2a:52:b5:cc:31:dd:d8:07:3c:64: 7a:23:43:60:f7:08:6d:ff:15:8b:4f:55:e9:2a:a9:fd:d7:1c: 70:21:13:6e:69:50:df:72:28:fb:d4:a0:dd:c7:9b:24:1b:bb: c3:f2:70:59:f9:32:b3:5e:07:92:95:22:1e:a3:cc:87:a9:db: 51:c2:95:eb:d5:05:1f:d8:00:c8:64:68:3f:3c:b6:d1:65:19: ec:2d:82:84 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDUzMjhaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDhBMTQ1MDMxNThGNTlB RUU3ODZEMTg0OUJGQUExQzNDMUY2MEY5RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+oqzC+VimhgqWaOJQAw/vi6Za3canbiMC4D+QpF7Ax4DMMFlc qxXEArAoBK74u6WMEOxR7fwFC2+x9dYtSgM61xSzrSuDGhoCOc04RWip/HOVVGju 7Elrw08M+xeWVLi/XXvyeAuAyOQRt//Llqy7EMlnb2CDhqpVEczapcpC9uqKI0FH qW8RA6T0jC6nInh8XdTg5iPCh8mFo7DHOpu1TWKLLQDb4SC9Fa550sVajpo3BhVU RWW+eoan2jUza+xddrP5KAL/7bHxnTP/6s/r7lsTav8O01Ncf6Hj18q/3Xg6ENnn SIA4+5yg8oO4pUZndXoOeC6nuiek4FHvj+6TAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUihRQMVj1mu54bRhJv6ocPB9g+eUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2loUlFNVmoxbXU1NGJSaEp2Nm9jUEI5Zy1lVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTEAwDQYJKoZIhvcNAQELBQADggEBALh4202ZG/nu6q2R7g2+KuEOop+I fUNnzBrcIXr6FayuMWwwe3TIQq4R2JuTd/wMNUONBwi1xpgci/4t/016Ea2xBIOl /WehpUllmBI0RtTW7lrXfSvLBxwQCPE7ukkAlbpoMsx7L4VFOdSzJIUy2GwOBDm6 GwXOCPDDv8oM3bceEOxQeCt4BBpHo+/QbDale6dwEUV61MgDjb0APc8pjaQqASzn Boudzn/YKlK1zDHd2Ac8ZHojQ2D3CG3/FYtPVekqqf3XHHAhE25pUN9yKPvUoN3H myQbu8PycFn5MrNeB5KVIh6jzIep21HClevVBR/YAMhkaD88ttFlGewtgoQ= -----END CERTIFICATE-----Generated at Sat Jun 21 03:30:15 2025 by rpki-client