$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jIz0-4iRfLIPC6btD3_NM5n7PK0.roa File: jIz0-4iRfLIPC6btD3_NM5n7PK0.roa (raw, json) Hash identifier: J6ERFxq2PiqNuxTj/NOfk0hMwMBF6yPanuj9VCKQDuY= Subject key identifier: 8C:8C:F4:FB:88:91:7C:B2:0F:0B:A6:ED:0F:7F:CD:33:99:FB:3C:AD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F35 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jIz0-4iRfLIPC6btD3_NM5n7PK0.roa Signing time: Tue 10 Jun 2025 11:24:35 +0000 ROA not before: Tue 10 Jun 2025 11:24:35 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 183.72.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3893 (0xf35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:35 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=8C8CF4FB88917CB20F0BA6ED0F7FCD3399FB3CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:00:a3:9c:31:e5:a8:ed:7e:88:dd:c4:87:5b: 47:76:18:35:41:99:31:3b:65:bf:38:f9:dd:a5:39: 4f:99:14:c6:af:60:dc:5c:ed:1d:d2:64:89:e9:28: 36:78:2f:ff:8b:b7:a3:02:ce:1c:2b:6d:6e:d5:ec: b0:c1:31:81:16:6a:2a:bb:64:24:cf:9a:d6:de:79: bc:ca:3d:1e:54:91:7b:f8:3c:0b:18:34:2b:39:1b: c5:2f:6f:de:5d:32:71:3b:be:d2:a5:30:29:ec:39: 6d:42:3a:cd:db:5b:49:de:43:67:33:94:46:62:ec: 20:04:6a:e3:05:aa:7e:e4:90:70:1a:4e:9b:71:2a: b0:12:6e:a7:e5:98:31:42:59:61:e9:b7:93:bf:27: 19:41:5d:9b:61:96:4d:66:17:3c:32:6f:78:0f:01: 0a:ee:c9:fb:9b:54:23:43:cc:35:82:d2:10:db:c5: 58:b1:7a:a0:e3:cd:be:5d:6b:8c:8b:81:79:a7:55: e6:21:e4:b0:84:30:eb:05:b6:60:a4:39:b1:7f:02: 31:10:70:2d:7b:68:ce:d2:7f:29:c7:17:f6:14:24: 98:19:2f:ad:c2:4e:88:74:04:af:f9:70:db:2f:76: 14:63:13:69:f3:20:5f:31:18:c4:e0:17:ae:a9:ce: b7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8C:F4:FB:88:91:7C:B2:0F:0B:A6:ED:0F:7F:CD:33:99:FB:3C:AD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jIz0-4iRfLIPC6btD3_NM5n7PK0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.72.128.0/17 Signature Algorithm: sha256WithRSAEncryption ab:9b:9f:f7:50:ee:c1:6b:e8:77:f4:60:74:1b:71:08:86:f6: 81:03:b0:bc:d0:f8:56:57:e2:a2:ea:80:ba:70:8f:1f:ca:5e: 66:a1:c5:39:86:18:35:a1:63:e9:b2:bc:d4:c6:8b:4e:1d:a6: 1c:80:60:0b:eb:1c:5c:06:cd:3d:68:52:f0:73:ab:67:92:09: 15:34:51:ec:ae:9d:27:de:4c:cc:28:a5:cf:03:b6:96:ce:fa: db:4e:a2:2e:76:71:b7:56:36:b9:1f:c3:69:b3:87:0f:e7:32: b0:bd:e5:e6:f3:db:f6:e0:ce:13:b1:d3:be:ca:4a:da:75:4b: da:cf:e3:2e:c8:04:7d:6b:39:6f:6d:c4:5c:f5:7b:50:11:53: ab:1c:48:9f:3f:05:30:de:ab:e9:51:82:48:8b:dd:5f:1f:15: eb:0c:21:db:92:ee:38:19:64:db:e1:a2:0d:56:0e:65:39:43: 7c:f6:6d:20:06:74:9a:5e:b6:8a:b9:e1:e6:62:0f:0c:98:ce: e4:8b:18:65:90:90:f2:69:23:86:7e:44:2d:2f:43:a5:50:29: f2:08:51:e3:df:53:a1:43:aa:e8:e6:f1:10:88:0e:8c:2e:83: f8:fb:58:a7:0d:bd:8f:b0:cb:33:6c:4f:d4:3f:ec:06:ae:f9: 42:ac:f9:3a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDzUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MzVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDhDOENGNEZCODg5MTdD QjIwRjBCQTZFRDBGN0ZDRDMzOTlGQjNDQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVAKOcMeWo7X6I3cSHW0d2GDVBmTE7Zb84+d2lOU+ZFMavYNxc 7R3SZInpKDZ4L/+Lt6MCzhwrbW7V7LDBMYEWaiq7ZCTPmtbeebzKPR5UkXv4PAsY NCs5G8Uvb95dMnE7vtKlMCnsOW1COs3bW0neQ2czlEZi7CAEauMFqn7kkHAaTptx KrASbqflmDFCWWHpt5O/JxlBXZthlk1mFzwyb3gPAQruyfubVCNDzDWC0hDbxVix eqDjzb5da4yLgXmnVeYh5LCEMOsFtmCkObF/AjEQcC17aM7SfynHF/YUJJgZL63C Toh0BK/5cNsvdhRjE2nzIF8xGMTgF66pzrexAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjIz0+4iRfLIPC6btD3/NM5n7PK0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2pJejAtNGlSZkxJUEM2YnREM19OTTVuN1BLMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe3SIAwDQYJKoZIhvcNAQELBQADggEBAKubn/dQ7sFr6Hf0YHQbcQiG9oED sLzQ+FZX4qLqgLpwjx/KXmahxTmGGDWhY+myvNTGi04dphyAYAvrHFwGzT1oUvBz q2eSCRU0UeyunSfeTMwopc8DtpbO+ttOoi52cbdWNrkfw2mzhw/nMrC95ebz2/bg zhOx077KStp1S9rP4y7IBH1rOW9txFz1e1ARU6scSJ8/BTDeq+lRgkiL3V8fFesM IduS7jgZZNvhog1WDmU5Q3z2bSAGdJpetoq54eZiDwyYzuSLGGWQkPJpI4Z+RC0v Q6VQKfIIUePfU6FDqujm8RCIDowug/j7WKcNvY+wyzNsT9Q/7Aau+UKs+To= -----END CERTIFICATE-----Generated at Sun Jun 22 00:31:22 2025 by rpki-client