$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jtQA2gE-KDzJgc1JCCc7U5CaJSM.roa File: jtQA2gE-KDzJgc1JCCc7U5CaJSM.roa (raw, json) Hash identifier: /QhmiHQEaDVOhW3IvHcYNoyc+D+nzt4rphC9/ouMKoY= Subject key identifier: 8E:D4:00:DA:01:3E:28:3C:C9:81:CD:49:08:27:3B:53:90:9A:25:23 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FB0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jtQA2gE-KDzJgc1JCCc7U5CaJSM.roa Signing time: Tue 10 Jun 2025 11:44:10 +0000 ROA not before: Tue 10 Jun 2025 11:44:10 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.76.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 12:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4016 (0xfb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:44:10 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=8ED400DA013E283CC981CD4908273B53909A2523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:a9:a7:66:b6:56:6c:3b:50:82:04:c7:28: 93:c9:e5:c0:18:15:6c:bc:d8:a2:23:c9:a5:35:79: 21:86:98:53:c4:9f:5e:ff:14:08:cd:dc:b7:fc:79: 44:e7:45:4a:53:ff:aa:fe:eb:56:47:dd:f6:d7:f6: f2:2b:00:d5:d3:19:df:d2:4b:1d:d8:19:44:27:08: 7e:d1:b4:51:8d:52:1b:a7:d5:30:b6:d5:e3:1a:17: 47:dd:2f:e0:75:a2:de:b8:fa:44:da:df:d3:eb:ee: 86:39:13:0a:b4:8a:78:f5:da:ac:93:08:f4:b1:29: 55:8e:a1:2c:4e:4e:d1:d6:c9:1b:8c:d6:07:6a:03: 22:42:3e:62:45:3f:fa:ad:41:c1:c8:0c:5c:21:2b: 97:cc:06:57:57:4d:05:b0:2c:a3:58:f9:c7:7a:de: 93:79:c4:6f:b2:21:b8:80:c6:2d:26:dd:6b:27:30: ff:02:ea:a3:1a:c4:0e:56:b4:6a:af:6b:9a:62:d6: 8d:82:8c:87:d1:1c:3c:98:56:d9:8a:0a:8e:ae:df: ec:f7:bb:ff:a0:c9:bc:f8:cb:96:2a:3a:8b:f5:e9: 95:9f:da:ca:dd:00:f1:fb:f3:d1:d2:b8:69:5a:60: 0b:a5:4c:57:e9:c1:64:b9:a6:16:3f:c8:99:eb:69: f3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D4:00:DA:01:3E:28:3C:C9:81:CD:49:08:27:3B:53:90:9A:25:23 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jtQA2gE-KDzJgc1JCCc7U5CaJSM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.80.0/22 Signature Algorithm: sha256WithRSAEncryption ce:fc:cb:d1:cf:25:c4:90:b3:fe:0d:2d:a5:71:d5:ed:f9:d4: da:65:a5:47:de:f6:b2:74:2f:2f:b7:86:df:fe:d0:48:3b:ea: ad:94:67:26:76:3c:d7:bc:6c:bb:b3:28:4f:dc:16:44:9a:fc: 2b:86:49:be:f1:94:ce:2b:22:86:3a:75:a7:28:44:49:88:d8: af:ac:80:06:ed:bc:ec:d4:f1:e8:ee:59:cb:81:48:cb:46:26: 72:e0:cc:20:c7:9b:0e:37:74:5c:7f:da:7d:cd:d2:67:83:de: 8f:d7:ba:91:88:d4:61:6e:7f:33:29:3f:67:43:6d:ed:c6:f6: 2f:eb:7c:6d:0a:d4:89:8e:3b:a9:2d:2e:5c:b9:a0:b4:47:77: 61:14:96:bf:a5:1e:e9:46:99:14:32:c5:7f:34:9d:85:5f:24: 89:51:42:86:bc:df:ab:a4:31:79:96:58:0b:d9:12:ae:57:52: e3:82:fd:af:b0:f7:c2:c2:fa:c4:d3:ac:b1:b6:c1:a8:07:96: b5:d1:2e:a8:8a:80:3a:5e:45:21:be:1c:28:af:4c:f8:f0:34: 83:14:bf:1c:4e:af:a2:45:ee:bc:36:fd:96:16:b1:ca:6c:d2: 05:62:53:da:8e:88:fb:56:14:74:1a:8a:b7:f9:b0:52:c1:ff: d0:4f:c4:de -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQ0MTBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDhFRDQwMERBMDEzRTI4 M0NDOTgxQ0Q0OTA4MjczQjUzOTA5QTI1MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAgamnZrZWbDtQggTHKJPJ5cAYFWy82KIjyaU1eSGGmFPEn17/ FAjN3Lf8eUTnRUpT/6r+61ZH3fbX9vIrANXTGd/SSx3YGUQnCH7RtFGNUhun1TC2 1eMaF0fdL+B1ot64+kTa39Pr7oY5Ewq0inj12qyTCPSxKVWOoSxOTtHWyRuM1gdq AyJCPmJFP/qtQcHIDFwhK5fMBldXTQWwLKNY+cd63pN5xG+yIbiAxi0m3WsnMP8C 6qMaxA5WtGqva5pi1o2CjIfRHDyYVtmKCo6u3+z3u/+gybz4y5YqOov16ZWf2srd APH789HSuGlaYAulTFfpwWS5phY/yJnrafMhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjtQA2gE+KDzJgc1JCCc7U5CaJSMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2p0UUEyZ0UtS0R6SmdjMUpDQ2M3VTVDYUpTTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTFAwDQYJKoZIhvcNAQELBQADggEBAM78y9HPJcSQs/4NLaVx1e351Npl pUfe9rJ0Ly+3ht/+0Eg76q2UZyZ2PNe8bLuzKE/cFkSa/CuGSb7xlM4rIoY6daco REmI2K+sgAbtvOzU8ejuWcuBSMtGJnLgzCDHmw43dFx/2n3N0meD3o/XupGI1GFu fzMpP2dDbe3G9i/rfG0K1ImOO6ktLly5oLRHd2EUlr+lHulGmRQyxX80nYVfJIlR Qoa836ukMXmWWAvZEq5XUuOC/a+w98LC+sTTrLG2wagHlrXRLqiKgDpeRSG+HCiv TPjwNIMUvxxOr6JF7rw2/ZYWscps0gViU9qOiPtWFHQairf5sFLB/9BPxN4= -----END CERTIFICATE-----Generated at Sun Jun 22 14:45:18 2025 by rpki-client