$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/j4MnnVi6CsUHiDMBf5RW2SNpBjU.roa File: j4MnnVi6CsUHiDMBf5RW2SNpBjU.roa (raw, json) Hash identifier: /gLaWdi/MRqGXbPWJGWU3BXm9NJasZGJ9EyeYD3POWg= Subject key identifier: 8F:83:27:9D:58:BA:0A:C5:07:88:33:01:7F:94:56:D9:23:69:06:35 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F2F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j4MnnVi6CsUHiDMBf5RW2SNpBjU.roa Signing time: Tue 10 Jun 2025 11:24:31 +0000 ROA not before: Tue 10 Jun 2025 11:24:31 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.74.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 05:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3887 (0xf2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:31 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=8F83279D58BA0AC5078833017F9456D923690635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:da:dc:88:b1:d5:67:b3:d4:d3:3b:75:89:71: 4a:e1:14:8b:47:b0:63:f1:b6:5f:91:4b:41:6e:ca: 28:72:d2:b6:42:be:93:d5:1c:d6:e6:a7:ce:c8:ee: f7:ef:53:50:6a:1c:52:dd:7e:20:e8:69:3e:bf:38: 05:34:2d:5f:42:3b:de:dc:3d:f9:17:5e:e2:53:37: 6a:3b:33:b4:20:64:c8:19:61:4b:5f:4e:c9:c9:4f: fe:9a:fd:82:0e:19:c2:53:3e:df:53:25:5e:22:e1: 6e:04:36:92:46:62:bb:fe:f0:d3:a4:29:77:b2:60: 57:21:22:b4:40:a8:71:11:2f:57:76:7a:b4:08:6c: 97:21:fc:8e:27:43:3d:e9:07:a5:a3:99:b9:d1:7b: 7a:75:3e:92:92:ea:4c:b4:9e:8e:c9:ce:65:9b:61: f4:f5:c0:7f:19:2d:0e:ef:40:9e:ea:b6:c6:08:82: 41:50:9f:4c:d6:50:68:ee:44:04:b6:47:00:72:8c: 2f:27:73:e7:bb:d7:2a:be:29:66:76:4a:ed:8b:50: 47:5f:8f:61:41:2d:4b:0f:db:fd:3f:d1:a9:23:12: f2:5a:6a:25:09:1b:e0:ac:aa:e6:98:11:cc:38:65: cf:bb:a4:f8:ec:9d:fc:61:96:dc:ca:b2:ee:35:f7: a8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:83:27:9D:58:BA:0A:C5:07:88:33:01:7F:94:56:D9:23:69:06:35 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j4MnnVi6CsUHiDMBf5RW2SNpBjU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.74.0.0/19 Signature Algorithm: sha256WithRSAEncryption d3:a8:ee:74:b7:ef:b0:a9:2b:de:ef:f7:ea:8d:47:e6:69:b7: 9a:31:6d:91:2e:a9:7d:51:43:cd:a5:0b:d9:85:87:50:8d:1b: 30:ed:33:0d:b7:22:b3:7c:62:19:2d:3c:4e:88:83:b3:e0:bd: b5:67:fe:b9:ca:87:ca:80:22:96:34:64:e0:ee:a2:98:b3:52: 5a:45:94:3e:df:38:c5:99:66:19:3f:53:1c:8e:91:ad:7a:90: ea:23:ba:8c:b6:58:41:c7:9f:eb:23:87:cb:d3:d9:67:1a:4f: 08:70:17:33:cb:d8:f8:1d:90:46:73:1e:59:db:45:cc:4f:e5: 6c:c3:90:fc:a3:1e:69:f7:59:a5:cd:49:fc:5e:02:a3:fe:7f: 6a:b8:d9:9d:eb:89:5f:ed:d6:65:31:f5:6c:5d:ac:4f:bc:5b: b1:f9:57:91:5b:0b:38:2c:2b:ab:4d:ca:21:ee:21:15:13:8f: 07:c6:14:97:92:3c:03:79:5b:a3:dc:fb:c1:e1:e2:04:02:cf: 65:3a:ed:cd:f7:90:85:4e:59:dc:55:57:59:0b:69:0e:3e:0b: 51:8f:e4:3a:a4:77:20:59:d5:26:51:d4:99:e2:73:00:b8:3d: 03:66:14:62:fe:19:6d:8b:16:46:67:b5:8a:76:86:f1:c9:f5: 3e:eb:f1:d6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDy8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MzFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDhGODMyNzlENThCQTBB QzUwNzg4MzMwMTdGOTQ1NkQ5MjM2OTA2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO2tyIsdVns9TTO3WJcUrhFItHsGPxtl+RS0Fuyihy0rZCvpPV HNbmp87I7vfvU1BqHFLdfiDoaT6/OAU0LV9CO97cPfkXXuJTN2o7M7QgZMgZYUtf TsnJT/6a/YIOGcJTPt9TJV4i4W4ENpJGYrv+8NOkKXeyYFchIrRAqHERL1d2erQI bJch/I4nQz3pB6WjmbnRe3p1PpKS6ky0no7JzmWbYfT1wH8ZLQ7vQJ7qtsYIgkFQ n0zWUGjuRAS2RwByjC8nc+e71yq+KWZ2Su2LUEdfj2FBLUsP2/0/0akjEvJaaiUJ G+CsquaYEcw4Zc+7pPjsnfxhltzKsu4196ipAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUj4MnnVi6CsUHiDMBf5RW2SNpBjUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2o0TW5uVmk2Q3NVSGlETUJmNVJXMlNOcEJqVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBSgAwDQYJKoZIhvcNAQELBQADggEBANOo7nS377CpK97v9+qNR+Zpt5ox bZEuqX1RQ82lC9mFh1CNGzDtMw23IrN8YhktPE6Ig7PgvbVn/rnKh8qAIpY0ZODu opizUlpFlD7fOMWZZhk/UxyOka16kOojuoy2WEHHn+sjh8vT2WcaTwhwFzPL2Pgd kEZzHlnbRcxP5WzDkPyjHmn3WaXNSfxeAqP+f2q42Z3riV/t1mUx9WxdrE+8W7H5 V5FbCzgsK6tNyiHuIRUTjwfGFJeSPAN5W6Pc+8Hh4gQCz2U67c33kIVOWdxVV1kL aQ4+C1GP5DqkdyBZ1SZR1JnicwC4PQNmFGL+GW2LFkZntYp2hvHJ9T7r8dY= -----END CERTIFICATE-----Generated at Fri Jun 20 09:38:18 2025 by rpki-client