$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kBFFtztQ8XRND-3b3m_sd8-HhM8.roa File: kBFFtztQ8XRND-3b3m_sd8-HhM8.roa (raw, json) Hash identifier: dCVjUAp6WEyQQ4mA5T/dSH5pv5ra5Iya+oQECBTtNCI= Subject key identifier: 90:11:45:B7:3B:50:F1:74:4D:0F:ED:DB:DE:6F:EC:77:CF:87:84:CF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EB5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kBFFtztQ8XRND-3b3m_sd8-HhM8.roa Signing time: Tue 10 Jun 2025 11:04:52 +0000 ROA not before: Tue 10 Jun 2025 11:04:52 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.79.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3765 (0xeb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:04:52 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=901145B73B50F1744D0FEDDBDE6FEC77CF8784CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:e0:92:47:2c:94:8f:a0:b1:71:91:2f:c8: ec:bd:e0:f2:86:1e:d5:92:f0:a1:d9:03:4c:a7:01: 35:7a:ef:b3:a4:5f:45:78:4d:af:19:65:24:77:4d: 1f:86:d9:3b:ce:1b:3d:2a:e8:26:d9:2c:6b:11:2f: 19:bd:26:db:d3:88:ac:32:52:24:05:b3:19:48:4a: 15:cb:f1:2d:80:e0:61:70:db:4e:13:07:f5:02:64: c7:a1:b7:99:22:aa:5a:ab:55:56:39:e3:07:db:a6: 7e:72:29:b3:1e:d9:5f:43:39:24:1f:98:5a:4d:2e: 19:68:2f:39:cc:24:cf:0a:14:65:ee:1a:a8:c7:2c: c6:86:3a:19:01:52:fd:e2:9e:04:bf:5a:0a:2c:12: ff:fd:83:a4:3a:0e:38:01:b3:89:de:2c:4e:33:64: 4c:f2:ec:5b:47:9b:de:c6:aa:19:86:38:29:f3:c0: 92:8d:d0:bd:63:1b:d9:8c:bc:f4:7a:ab:88:aa:4e: 8f:29:91:64:4d:22:14:d8:b3:ce:ba:69:c6:c7:b7: 89:6d:d6:69:5d:12:5d:c9:b8:e9:2f:71:21:85:b0: 9a:9b:4d:4d:aa:69:85:0b:ea:e1:f2:9b:a5:85:94: 29:06:d6:c4:f2:22:47:22:3f:38:d2:58:64:58:55: 66:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:11:45:B7:3B:50:F1:74:4D:0F:ED:DB:DE:6F:EC:77:CF:87:84:CF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kBFFtztQ8XRND-3b3m_sd8-HhM8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.104.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:29:04:59:5d:d2:41:46:66:59:7b:f8:81:73:20:a5:62:f7: 87:e4:4c:29:b5:27:da:e0:50:52:38:cb:74:ba:46:aa:e0:6f: e4:a0:cf:21:67:7a:52:52:4e:23:6c:c7:cf:ed:25:a7:32:0a: df:52:06:ba:a2:67:28:0e:8f:4b:4c:c5:11:60:98:9d:3c:f5: 98:48:cf:83:f3:e3:68:86:51:9c:bf:c2:c3:77:45:e0:d1:4d: bd:9b:4d:e0:33:e2:ca:f5:92:d4:a3:05:7f:71:2b:b3:1f:95: 96:f9:b5:7b:92:1f:b3:05:a4:6b:ca:8f:07:a6:10:40:8d:4e: 2c:92:19:ab:0a:19:3e:a6:cd:88:af:5e:76:25:b8:56:9a:fd: 00:02:f0:08:43:cb:a8:73:8d:04:19:33:ae:b7:33:61:ce:d5: a7:c9:bf:9d:19:e0:86:6c:f1:af:ba:c8:60:a3:ec:ef:88:db: 0e:a2:2f:11:de:9b:b7:2f:1f:7d:72:93:25:b6:17:92:e8:e1: 79:d7:e3:3c:19:d4:14:c3:f4:3b:6e:15:78:4f:4c:8b:cd:20: 3e:41:6a:b7:f7:d7:c6:fa:79:38:93:d5:94:eb:6b:be:85:30: 04:31:18:f4:92:fb:3d:ad:aa:a6:9e:f6:05:ae:4e:28:fc:1e: bc:2b:93:a1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDrUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA0NTJaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDkwMTE0NUI3M0I1MEYx NzQ0RDBGRUREQkRFNkZFQzc3Q0Y4Nzg0Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqhuCSRyyUj6CxcZEvyOy94PKGHtWS8KHZA0ynATV677OkX0V4 Ta8ZZSR3TR+G2TvOGz0q6CbZLGsRLxm9JtvTiKwyUiQFsxlIShXL8S2A4GFw204T B/UCZMeht5kiqlqrVVY54wfbpn5yKbMe2V9DOSQfmFpNLhloLznMJM8KFGXuGqjH LMaGOhkBUv3ingS/WgosEv/9g6Q6DjgBs4neLE4zZEzy7FtHm97GqhmGOCnzwJKN 0L1jG9mMvPR6q4iqTo8pkWRNIhTYs866acbHt4lt1mldEl3JuOkvcSGFsJqbTU2q aYUL6uHym6WFlCkG1sTyIkciPzjSWGRYVWYVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkBFFtztQ8XRND+3b3m/sd8+HhM8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2tCRkZ0enRROFhSTkQtM2IzbV9zZDgtSGhNOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT2gwDQYJKoZIhvcNAQELBQADggEBAB4pBFld0kFGZll7+IFzIKVi94fk TCm1J9rgUFI4y3S6Rqrgb+SgzyFnelJSTiNsx8/tJacyCt9SBrqiZygOj0tMxRFg mJ089ZhIz4Pz42iGUZy/wsN3ReDRTb2bTeAz4sr1ktSjBX9xK7MflZb5tXuSH7MF pGvKjwemEECNTiySGasKGT6mzYivXnYluFaa/QAC8AhDy6hzjQQZM663M2HO1afJ v50Z4IZs8a+6yGCj7O+I2w6iLxHem7cvH31ykyW2F5Lo4XnX4zwZ1BTD9DtuFXhP TIvNID5Barf318b6eTiT1ZTra76FMAQxGPSS+z2tqqae9gWuTij8Hrwrk6E= -----END CERTIFICATE-----Generated at Sat Jun 21 05:37:27 2025 by rpki-client