$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kRZ7yrap8SsDkpq6ElhBrVQnS3E.roa File: kRZ7yrap8SsDkpq6ElhBrVQnS3E.roa (raw, json) Hash identifier: El6fGSM9mBHXNyOi2FgK2Oxf889Opnh1eHL7bQgZm5s= Subject key identifier: 91:16:7B:CA:B6:A9:F1:2B:03:92:9A:BA:12:58:41:AD:54:27:4B:71 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F25 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kRZ7yrap8SsDkpq6ElhBrVQnS3E.roa Signing time: Tue 10 Jun 2025 11:20:27 +0000 ROA not before: Tue 10 Jun 2025 11:20:27 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.79.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 10:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3877 (0xf25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:20:27 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=91167BCAB6A9F12B03929ABA125841AD54274B71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:3b:bb:8c:62:49:b0:93:20:19:39:bb:61: 9c:c6:d3:bc:f6:8d:0b:67:20:5a:a5:eb:1f:93:0c: db:d7:39:2c:1c:75:57:cb:02:ce:f1:ae:2f:06:9c: 34:64:4f:dc:ff:cf:ef:23:86:28:ae:5d:2f:25:10: 63:27:7c:68:15:cc:97:27:49:9f:88:98:7a:1e:c0: c3:e6:0f:cc:4c:26:eb:a2:e8:04:ae:52:0f:d6:99: 7b:35:da:af:29:5b:ea:53:78:44:48:7b:77:9d:0b: fe:c3:a2:f3:ed:a0:4e:25:87:31:76:26:29:ae:70: 23:b6:1d:01:a5:89:b0:a2:55:9c:90:76:ef:1a:45: 0a:fb:e7:1c:49:f9:41:66:ac:a8:c5:e9:11:9e:4c: eb:a0:47:06:1b:b4:8b:e3:e9:fd:05:23:61:86:57: df:7d:d6:ab:2e:29:37:0c:5a:22:65:f3:e6:08:a9: 39:2a:4b:60:15:51:98:fc:f1:7a:68:8f:b6:c3:47: b5:ac:2a:bf:3a:f4:1f:a1:37:90:23:bc:16:c1:e3: 68:8c:54:0e:67:b7:57:7b:be:bb:19:64:e7:20:65: 78:32:86:e7:a3:68:66:7a:7a:86:51:82:a9:0b:41: c2:a5:e8:5c:40:58:a8:67:27:01:6d:19:a6:fa:8c: 12:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:16:7B:CA:B6:A9:F1:2B:03:92:9A:BA:12:58:41:AD:54:27:4B:71 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kRZ7yrap8SsDkpq6ElhBrVQnS3E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.160.0/22 Signature Algorithm: sha256WithRSAEncryption b1:9e:53:b6:c0:d7:5d:b6:91:35:77:11:00:e8:8f:9e:d5:e0: a4:14:94:77:78:8e:9e:de:a9:f0:44:55:d9:7d:c8:5a:85:e9: bd:42:3e:67:57:ae:a2:80:5b:cf:9d:b6:e7:ca:2d:e7:fe:3e: a6:ef:d9:0b:06:ad:36:4e:8a:5b:7b:93:f6:b2:02:17:5c:cc: 77:1a:39:d5:72:24:d5:67:cd:e0:c2:e6:5a:cd:6e:00:2f:b0: d6:dd:a4:71:1b:a7:1c:d7:43:c4:5a:69:1c:d9:f7:5a:7c:66: 74:7c:48:4d:29:7c:97:40:2e:55:72:40:dd:a5:b3:58:2a:01: f5:c5:d2:ec:95:4d:86:d1:4d:9b:fb:12:98:6a:92:2b:a0:2a: 9e:36:19:20:70:ab:55:9a:9c:fb:7e:3d:b8:f5:a4:48:10:b1: 16:5b:20:73:10:d4:75:b7:63:df:d3:71:b0:6e:32:86:3f:d7: 97:c1:43:11:a2:4e:a6:da:4e:5d:d9:f9:bd:4c:d0:60:1b:0f: 73:8d:cf:35:bb:f6:36:b3:4b:1f:8f:25:f1:87:2e:a8:b2:cc: 93:6e:82:dc:ac:40:cc:19:71:97:ef:c8:ae:a9:42:e9:9a:3d: 5b:b8:9c:51:f0:cd:e7:c2:81:92:a1:bc:07:8d:97:1b:c2:22: bd:13:ce:8d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDyUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTIwMjdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDkxMTY3QkNBQjZBOUYx MkIwMzkyOUFCQTEyNTg0MUFENTQyNzRCNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/BTu7jGJJsJMgGTm7YZzG07z2jQtnIFql6x+TDNvXOSwcdVfL As7xri8GnDRkT9z/z+8jhiiuXS8lEGMnfGgVzJcnSZ+ImHoewMPmD8xMJuui6ASu Ug/WmXs12q8pW+pTeERIe3edC/7DovPtoE4lhzF2JimucCO2HQGlibCiVZyQdu8a RQr75xxJ+UFmrKjF6RGeTOugRwYbtIvj6f0FI2GGV9991qsuKTcMWiJl8+YIqTkq S2AVUZj88Xpoj7bDR7WsKr869B+hN5AjvBbB42iMVA5nt1d7vrsZZOcgZXgyhuej aGZ6eoZRgqkLQcKl6FxAWKhnJwFtGab6jBK9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkRZ7yrap8SsDkpq6ElhBrVQnS3EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2tSWjd5cmFwOFNzRGtwcTZFbGhCclZRblMzRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT6AwDQYJKoZIhvcNAQELBQADggEBALGeU7bA1122kTV3EQDoj57V4KQU lHd4jp7eqfBEVdl9yFqF6b1CPmdXrqKAW8+dtufKLef+Pqbv2QsGrTZOilt7k/ay AhdczHcaOdVyJNVnzeDC5lrNbgAvsNbdpHEbpxzXQ8RaaRzZ91p8ZnR8SE0pfJdA LlVyQN2ls1gqAfXF0uyVTYbRTZv7EphqkiugKp42GSBwq1WanPt+Pbj1pEgQsRZb IHMQ1HW3Y9/TcbBuMoY/15fBQxGiTqbaTl3Z+b1M0GAbD3ONzzW79jazSx+PJfGH LqiyzJNugtysQMwZcZfvyK6pQumaPVu4nFHwzefCgZKhvAeNlxvCIr0Tzo0= -----END CERTIFICATE-----Generated at Sat Jun 21 13:31:22 2025 by rpki-client