$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/k95fD9vz1bFW2NOrsyHD-AB7ZBQ.roa File: k95fD9vz1bFW2NOrsyHD-AB7ZBQ.roa (raw, json) Hash identifier: PgNUOIsFSlhXMEPncVB7xJm8KHVEkV/bng1WNHZgmHU= Subject key identifier: 93:DE:5F:0F:DB:F3:D5:B1:56:D8:D3:AB:B3:21:C3:F8:00:7B:64:14 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F34 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k95fD9vz1bFW2NOrsyHD-AB7ZBQ.roa Signing time: Tue 10 Jun 2025 11:24:34 +0000 ROA not before: Tue 10 Jun 2025 11:24:34 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3892 (0xf34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:34 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=93DE5F0FDBF3D5B156D8D3ABB321C3F8007B6414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:b7:36:12:ff:e5:6f:4d:04:2b:fc:50:36: 28:fa:e4:50:72:e5:19:67:c4:62:76:20:1f:0a:42: 5d:a1:83:8a:65:70:01:78:d7:da:30:56:99:89:0a: 39:b1:4f:b1:d4:09:0c:6f:45:13:81:a7:a3:c3:a8: b7:54:48:4d:7e:b6:57:08:0a:ad:16:b7:fe:a9:8d: 8b:48:63:4d:40:bc:4a:fc:b1:34:42:e5:8d:db:1f: 5a:f1:eb:51:be:7b:24:ea:9d:00:3b:82:01:38:d1: aa:46:c7:92:cd:b0:b3:10:46:8a:34:3f:36:26:f9: 6a:59:b7:a6:9c:09:bd:0e:3b:2f:03:cc:a5:16:b6: 14:4e:4f:be:e6:f1:91:8e:f1:37:a4:d2:36:c6:51: 1c:46:75:81:94:58:76:4b:83:55:af:2c:c3:de:49: f5:98:44:8f:77:62:f1:7c:6e:5d:bf:a6:7e:50:81: 58:8d:27:34:1b:a0:d2:9e:de:9f:6d:97:95:df:1c: d5:c1:b9:d2:e6:a9:28:65:8a:69:e5:75:70:f8:49: a6:78:5a:be:1c:ca:78:75:53:48:82:39:a8:ab:ea: c3:fd:8e:ee:82:df:16:88:86:e3:05:8a:ed:84:5d: 02:33:71:93:6a:01:3d:ed:89:70:51:0f:90:19:26: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DE:5F:0F:DB:F3:D5:B1:56:D8:D3:AB:B3:21:C3:F8:00:7B:64:14 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k95fD9vz1bFW2NOrsyHD-AB7ZBQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.31.0/24 Signature Algorithm: sha256WithRSAEncryption 40:b7:c8:eb:a9:a8:d3:d8:91:e0:21:5e:fe:68:e7:0e:57:b5: 21:40:15:fe:8a:df:88:41:13:ba:b0:88:81:1e:a7:b9:65:0a: cd:51:1c:8a:a3:ca:66:4b:6c:52:cd:69:32:b6:56:2b:53:fb: f2:ec:98:a0:d3:b1:f5:b8:93:57:e7:6b:cd:4d:34:cd:18:ed: b4:28:e9:da:98:7b:2f:f3:7c:89:f5:2a:21:5a:62:d4:d9:62: 0e:80:38:ae:61:04:44:7f:a4:24:08:c9:86:d3:51:c0:d7:05: 0e:83:ee:b2:4b:36:ee:a1:4e:95:f1:1e:5f:78:b0:91:9d:7b: a0:41:0b:d8:98:e2:19:1e:5d:18:49:21:56:4d:c2:f4:2c:65: ed:ed:c8:ee:9b:05:46:2e:ec:c7:6a:80:2a:1a:0c:27:eb:6f: d2:b1:49:1e:32:71:22:d9:2e:98:b1:c0:58:53:35:a4:9c:d3: c0:bd:76:64:88:8d:e0:a5:c4:ba:5c:b9:a9:8d:d1:e1:da:4f: 83:d0:61:e3:66:59:48:96:d7:74:17:21:4d:2f:77:04:ac:54: 94:3d:d6:8d:93:b7:99:37:48:0d:58:4b:3c:89:7d:bd:14:44: d8:b2:48:d0:3f:12:2b:85:85:6b:9d:9e:7b:a3:37:42:6a:b5: 5e:09:9d:0f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDzQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MzRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDkzREU1RjBGREJGM0Q1 QjE1NkQ4RDNBQkIzMjFDM0Y4MDA3QjY0MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl07c2Ev/lb00EK/xQNij65FBy5RlnxGJ2IB8KQl2hg4plcAF4 19owVpmJCjmxT7HUCQxvRROBp6PDqLdUSE1+tlcICq0Wt/6pjYtIY01AvEr8sTRC 5Y3bH1rx61G+eyTqnQA7ggE40apGx5LNsLMQRoo0PzYm+WpZt6acCb0OOy8DzKUW thROT77m8ZGO8Tek0jbGURxGdYGUWHZLg1WvLMPeSfWYRI93YvF8bl2/pn5QgViN JzQboNKe3p9tl5XfHNXBudLmqShlimnldXD4SaZ4Wr4cynh1U0iCOair6sP9ju6C 3xaIhuMFiu2EXQIzcZNqAT3tiXBRD5AZJt0pAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUk95fD9vz1bFW2NOrsyHD+AB7ZBQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2s5NWZEOXZ6MWJGVzJOT3JzeUhELUFCN1pCUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADc0h8wDQYJKoZIhvcNAQELBQADggEBAEC3yOupqNPYkeAhXv5o5w5XtSFA Ff6K34hBE7qwiIEep7llCs1RHIqjymZLbFLNaTK2VitT+/LsmKDTsfW4k1fna81N NM0Y7bQo6dqYey/zfIn1KiFaYtTZYg6AOK5hBER/pCQIyYbTUcDXBQ6D7rJLNu6h TpXxHl94sJGde6BBC9iY4hkeXRhJIVZNwvQsZe3tyO6bBUYu7MdqgCoaDCfrb9Kx SR4ycSLZLpixwFhTNaSc08C9dmSIjeClxLpcuamN0eHaT4PQYeNmWUiW13QXIU0v dwSsVJQ91o2Tt5k3SA1YSzyJfb0URNiySNA/EiuFhWudnnujN0JqtV4JnQ8= -----END CERTIFICATE-----Generated at Sun Jun 22 05:01:27 2025 by rpki-client