$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/k1zlS85s37R6D4T7lV7x5UCrn8A.roa File: k1zlS85s37R6D4T7lV7x5UCrn8A.roa (raw, json) Hash identifier: p6Fd4VpLM7LU/JGLn9DJyQdks3CP9q1uXXxFtDo0vWU= Subject key identifier: 93:5C:E5:4B:CE:6C:DF:B4:7A:0F:84:FB:95:5E:F1:E5:40:AB:9F:C0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F30 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k1zlS85s37R6D4T7lV7x5UCrn8A.roa Signing time: Tue 10 Jun 2025 11:24:32 +0000 ROA not before: Tue 10 Jun 2025 11:24:32 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 211.14.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3888 (0xf30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:32 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=935CE54BCE6CDFB47A0F84FB955EF1E540AB9FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:70:52:2f:74:f1:b1:5e:80:93:c3:08:f8:a4: f2:1a:aa:71:41:0f:c1:a5:09:a0:49:b6:8c:ad:e8: d4:a9:03:24:34:e1:96:0c:84:b9:ea:92:c7:49:ca: f3:70:90:18:7b:cc:1e:76:4c:b6:7f:08:14:ab:ba: 2a:3a:65:42:3b:68:84:db:9b:30:e8:62:83:9b:ab: 90:7b:cc:82:2f:d3:3a:b8:2a:58:ba:c0:c7:88:c8: 12:2a:64:61:4a:5e:80:e8:c6:26:d0:5d:b3:40:60: 56:74:8d:91:94:d2:c6:5a:48:7d:28:11:2f:fe:3a: f0:04:56:e5:ba:9d:50:f4:54:8d:77:47:76:20:0a: 97:37:33:b4:c5:06:89:db:41:36:ab:2f:76:76:33: 8b:3b:51:80:4a:83:51:e0:13:f9:c7:1f:fd:a5:d8: 25:b8:82:86:ae:c0:b5:df:12:2d:7c:b4:0b:b6:08: f1:5f:80:4f:08:7c:8e:52:fd:2a:27:41:cd:ba:f5: b2:14:a6:c5:3b:47:e3:35:aa:45:a8:a1:b2:2e:86: 6c:f7:83:13:a1:90:09:f6:9f:94:a0:d1:53:c0:46: 10:d1:f8:04:39:e8:d3:11:9e:01:72:72:9a:81:69: 13:a9:c7:f8:7a:5a:e7:6c:18:63:f9:ae:02:86:d0: c8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5C:E5:4B:CE:6C:DF:B4:7A:0F:84:FB:95:5E:F1:E5:40:AB:9F:C0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k1zlS85s37R6D4T7lV7x5UCrn8A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.78.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:0d:97:a8:91:06:9e:79:5a:40:9d:89:81:03:02:21:48:40: 10:ef:16:ae:10:b6:fd:07:ef:62:6f:95:9b:fb:28:36:e7:7d: 95:ec:f9:4a:32:84:fd:14:82:f9:0a:95:95:f2:43:39:c9:58: 95:0e:c9:65:77:47:63:4c:6b:4b:1d:69:aa:04:5b:56:a2:f9: 35:69:bb:63:77:49:45:6d:13:9b:83:c2:5f:75:5a:5d:67:bf: 6f:ae:6e:0d:d3:e2:6e:e9:3c:bd:2e:57:77:72:de:bd:9b:c3: 62:cf:75:1c:40:cd:c2:a4:58:17:b2:20:6b:09:28:3e:e6:79: 30:d8:2b:64:72:cd:20:65:f7:fb:19:9a:03:ad:09:a4:14:3a: ff:72:4b:9f:e1:52:0f:5f:62:73:6c:0f:d1:40:c6:e2:ae:66: b8:b9:28:af:64:1d:1d:9b:48:37:84:77:36:b2:f3:d9:e0:e2: 17:60:2f:30:aa:ee:4b:6e:4b:a5:a1:b1:1e:b6:a0:bd:f0:3a: 90:57:01:20:0d:80:95:f4:84:ee:06:d9:a8:6e:be:5a:41:30: c0:c3:8b:99:60:23:dd:3d:89:14:e9:a2:a8:0d:a7:e8:5d:2a: 79:00:1f:81:1a:f9:44:45:fe:db:de:24:10:d7:a3:20:95:eb: 34:88:88:4c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDzAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MzJaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDkzNUNFNTRCQ0U2Q0RG QjQ3QTBGODRGQjk1NUVGMUU1NDBBQjlGQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYcFIvdPGxXoCTwwj4pPIaqnFBD8GlCaBJtoyt6NSpAyQ04ZYM hLnqksdJyvNwkBh7zB52TLZ/CBSruio6ZUI7aITbmzDoYoObq5B7zIIv0zq4Kli6 wMeIyBIqZGFKXoDoxibQXbNAYFZ0jZGU0sZaSH0oES/+OvAEVuW6nVD0VI13R3Yg Cpc3M7TFBonbQTarL3Z2M4s7UYBKg1HgE/nHH/2l2CW4goauwLXfEi18tAu2CPFf gE8IfI5S/SonQc269bIUpsU7R+M1qkWoobIuhmz3gxOhkAn2n5Sg0VPARhDR+AQ5 6NMRngFycpqBaROpx/h6WudsGGP5rgKG0MjFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUk1zlS85s37R6D4T7lV7x5UCrn8AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2sxemxTODVzMzdSNkQ0VDdsVjd4NVVDcm44QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADTDk4wDQYJKoZIhvcNAQELBQADggEBAF8Nl6iRBp55WkCdiYEDAiFIQBDv Fq4Qtv0H72JvlZv7KDbnfZXs+UoyhP0UgvkKlZXyQznJWJUOyWV3R2NMa0sdaaoE W1ai+TVpu2N3SUVtE5uDwl91Wl1nv2+ubg3T4m7pPL0uV3dy3r2bw2LPdRxAzcKk WBeyIGsJKD7meTDYK2RyzSBl9/sZmgOtCaQUOv9yS5/hUg9fYnNsD9FAxuKuZri5 KK9kHR2bSDeEdzay89ng4hdgLzCq7ktuS6WhsR62oL3wOpBXASANgJX0hO4G2ahu vlpBMMDDi5lgI909iRTpoqgNp+hdKnkAH4Ea+URF/tveJBDXoyCV6zSIiEw= -----END CERTIFICATE-----Generated at Sun Jun 22 03:58:46 2025 by rpki-client