$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/keDBkqY-LVyiCACZISnhNOgYGss.roa File: keDBkqY-LVyiCACZISnhNOgYGss.roa (raw, json) Hash identifier: dCY7nWwaDBlMy95WlxXcWpkurKAJkZGNrIZ+eC9n9dA= Subject key identifier: 91:E0:C1:92:A6:3E:2D:5C:A2:08:00:99:21:29:E1:34:E8:18:1A:CB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EF6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/keDBkqY-LVyiCACZISnhNOgYGss.roa Signing time: Tue 10 Jun 2025 11:16:41 +0000 ROA not before: Tue 10 Jun 2025 11:16:41 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.161.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3830 (0xef6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:41 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=91E0C192A63E2D5CA20800992129E134E8181ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:dc:46:e4:20:92:6f:24:f4:bc:a3:49:6a: 41:11:0b:d7:01:bb:f5:a6:f0:02:66:54:87:f2:e2: 41:bf:73:1f:e7:30:3f:b5:df:b5:2b:5d:ba:33:11: bf:2c:43:73:61:82:cc:05:4d:5a:cd:3b:93:48:d3: c9:57:2e:6f:c0:44:5d:cc:c7:eb:d7:ba:21:8b:a5: 9e:f0:8a:e3:3d:b5:9c:11:fe:fc:fe:4d:59:47:b8: 59:b9:9a:47:cc:db:c6:d7:a0:94:5e:dc:02:0e:c1: 89:10:7e:bc:7d:20:b1:7b:5a:6e:26:b1:b8:1a:1c: 9e:53:d7:e8:14:3b:e0:e1:84:a8:ad:2e:bc:a0:f7: 32:68:d1:24:4b:4a:68:0b:b4:55:ca:41:d7:01:e6: 83:17:40:d2:9a:5a:a1:de:9f:e9:a5:9d:91:3f:37: bc:c8:ad:63:7b:4c:ff:01:e4:2a:25:71:42:e6:64: 36:24:5a:bb:fd:55:b8:f7:34:f8:7b:c2:ba:0a:43: 37:f4:22:7c:85:77:35:0d:4d:fe:4e:49:5b:b0:47: af:2e:0f:0d:7d:65:a8:08:a8:78:67:2e:01:9d:ff: c1:e3:b2:63:ca:12:72:2f:3c:f7:9e:75:40:70:23: ee:38:c9:de:fd:73:1f:32:23:b1:88:78:34:d1:61: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E0:C1:92:A6:3E:2D:5C:A2:08:00:99:21:29:E1:34:E8:18:1A:CB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/keDBkqY-LVyiCACZISnhNOgYGss.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.64.0/18 Signature Algorithm: sha256WithRSAEncryption 30:b1:18:95:60:a4:95:f1:97:3c:91:98:e1:00:37:0a:8a:e0: 69:b0:08:f2:57:37:41:1f:dc:9b:bf:c3:f0:15:ca:9e:06:93: 9e:76:37:20:bf:03:9b:46:15:b7:04:56:fb:b1:ce:cd:e6:00: 9e:84:47:73:a8:8b:eb:33:28:bd:04:75:99:bd:51:2f:ed:d2: 2c:e1:a0:6b:ea:f8:4a:79:ac:7d:ea:34:47:7e:d0:76:ac:69: 11:82:2f:51:a4:8f:77:45:6a:3c:e5:23:5b:75:8f:52:60:12: 1f:ce:6f:dd:6e:8e:0e:ee:6f:d0:50:44:c2:28:3d:fe:dc:1f: 6e:4c:15:45:46:d5:87:a6:fd:4f:2a:de:8a:bf:52:aa:2a:bf: 23:c7:22:23:7c:85:bd:1b:96:ac:85:7d:be:7e:e8:d7:db:a8: d0:f2:98:7d:1f:c8:4f:30:7f:01:2f:1e:f9:ac:86:38:24:a4: 2e:a2:49:2d:40:26:43:a8:e7:67:98:ef:ee:c3:9e:d0:95:8f: d2:89:db:35:c9:e6:c7:01:07:50:43:dd:21:a6:c4:65:f0:c6: 61:f1:3c:72:1f:f1:5b:36:a8:8b:5c:b5:82:3f:a5:33:85:bf: 19:a0:f9:42:e5:e2:26:66:e7:15:4b:39:84:01:f0:15:70:fd: 84:25:17:8a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NDFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDkxRTBDMTkyQTYzRTJE NUNBMjA4MDA5OTIxMjlFMTM0RTgxODFBQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9eNxG5CCSbyT0vKNJakERC9cBu/Wm8AJmVIfy4kG/cx/nMD+1 37UrXbozEb8sQ3NhgswFTVrNO5NI08lXLm/ARF3Mx+vXuiGLpZ7wiuM9tZwR/vz+ TVlHuFm5mkfM28bXoJRe3AIOwYkQfrx9ILF7Wm4msbgaHJ5T1+gUO+DhhKitLryg 9zJo0SRLSmgLtFXKQdcB5oMXQNKaWqHen+mlnZE/N7zIrWN7TP8B5ColcULmZDYk Wrv9Vbj3NPh7wroKQzf0InyFdzUNTf5OSVuwR68uDw19ZagIqHhnLgGd/8HjsmPK EnIvPPeedUBwI+44yd79cx8yI7GIeDTRYWXrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkeDBkqY+LVyiCACZISnhNOgYGsswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2tlREJrcVktTFZ5aUNBQ1pJU25oTk9nWUdzcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZuoUAwDQYJKoZIhvcNAQELBQADggEBADCxGJVgpJXxlzyRmOEANwqK4Gmw CPJXN0Ef3Ju/w/AVyp4Gk552NyC/A5tGFbcEVvuxzs3mAJ6ER3Ooi+szKL0EdZm9 US/t0izhoGvq+Ep5rH3qNEd+0HasaRGCL1Gkj3dFajzlI1t1j1JgEh/Ob91ujg7u b9BQRMIoPf7cH25MFUVG1Yem/U8q3oq/UqoqvyPHIiN8hb0blqyFfb5+6NfbqNDy mH0fyE8wfwEvHvmshjgkpC6iSS1AJkOo52eY7+7DntCVj9KJ2zXJ5scBB1BD3SGm xGXwxmHxPHIf8Vs2qItctYI/pTOFvxmg+ULl4iZm5xVLOYQB8BVw/YQlF4o= -----END CERTIFICATE-----Generated at Fri Jun 20 05:08:18 2025 by rpki-client