$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lyYESuxFSnGALb5s0hOHkjBzLso.roa File: lyYESuxFSnGALb5s0hOHkjBzLso.roa (raw, json) Hash identifier: NgK4OJ+0C1Zd52/aIFCtDSgA0nQzEy+G7sdZkMJ2qJo= Subject key identifier: 97:26:04:4A:EC:45:4A:71:80:2D:BE:6C:D2:13:87:92:30:73:2E:CA Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 79 Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lyYESuxFSnGALb5s0hOHkjBzLso.roa Signing time: Tue 10 Jun 2025 11:16:53 +0000 ROA not before: Tue 10 Jun 2025 11:16:53 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 158.199.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 18:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Jun 10 11:16:53 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=9726044AEC454A71802DBE6CD213879230732ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:0f:6f:c9:c0:8b:8d:7d:e5:59:1e:20:91: e0:62:a5:c3:ff:bc:f3:47:e7:67:b5:2e:e2:a9:c0: 09:c8:3b:41:b3:0a:1d:86:ce:cc:75:a1:3a:4c:95: 76:41:92:70:3c:4e:cd:62:ba:9a:05:c7:9a:de:45: c2:0d:fe:34:4b:90:5e:95:77:8d:29:e8:17:6a:7f: 96:c7:55:6a:c2:75:49:65:28:e4:62:9f:1a:92:24: cc:8f:a1:d3:a8:96:2e:ee:87:cf:b8:3a:4b:bc:a5: 6c:ab:8b:a7:33:84:48:05:d9:1c:12:f3:ec:09:51: 78:c3:1b:b1:7b:e1:51:71:6e:f1:2a:b0:5b:a3:8a: d0:24:76:24:45:6e:55:51:a3:dd:0c:8d:4a:df:a6: aa:9e:05:6c:16:3b:b2:f0:77:37:56:c1:cb:ef:73: bd:50:3e:05:7b:7f:08:b3:0b:0f:7c:55:06:4e:ec: 16:44:23:3c:b0:f7:eb:27:2e:86:4a:cb:2e:4f:dc: 2c:44:49:52:d4:f3:90:0e:54:13:aa:10:a7:f9:8b: 67:67:0b:a6:f6:fb:8b:4a:fb:58:72:3f:b4:78:28: be:a9:95:32:79:12:b6:37:86:d3:7f:2b:e3:8c:e6: c5:2c:76:e5:4a:1c:bb:56:a7:83:b4:0e:f6:c8:f0: 04:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:26:04:4A:EC:45:4A:71:80:2D:BE:6C:D2:13:87:92:30:73:2E:CA X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lyYESuxFSnGALb5s0hOHkjBzLso.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 158.199.48.0/20 Signature Algorithm: sha256WithRSAEncryption 8a:3a:d1:0a:7a:5e:16:2c:93:1b:df:39:2d:e2:8b:c7:5c:7d: c9:8e:d9:b7:41:5f:ca:bf:fb:f2:aa:d1:71:62:fe:c0:e7:ae: 95:86:21:9f:c7:68:46:f7:28:1b:6c:01:9e:17:43:64:59:75: a5:a6:dc:42:55:44:bf:80:74:fe:6b:56:bd:53:35:09:0a:4a: b9:46:23:7e:ae:99:d2:3a:fe:07:f1:e1:2f:08:f6:08:b2:d2: be:04:19:0b:1d:e1:83:7b:d3:7a:bb:8a:f0:d7:4c:cb:5c:cd: b8:03:56:d5:ed:15:75:1c:62:61:5f:03:96:d4:b5:b2:14:05: ca:47:f2:11:f4:70:e6:e6:67:89:13:9d:09:91:15:86:35:84: 8e:c6:38:c8:42:af:25:c6:ec:33:6d:36:26:36:db:7f:72:85: 9e:41:8f:f2:fe:68:fc:ad:3e:7d:5d:c5:45:49:47:d1:ed:8d: 2a:5a:57:b9:6f:c2:43:7b:94:9b:44:58:74:2a:bc:1d:c7:71: f9:03:cb:22:c0:82:21:22:4d:1f:3d:93:81:94:42:0c:04:41: 7f:19:f9:40:69:5b:d4:e8:16:75:c4:a5:86:bd:59:ce:e5:3b: 37:9d:28:f7:c2:bf:34:fb:a8:b9:3f:f6:7c:72:5f:c7:94:61: 4c:66:27:aa -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTI1MDYxMDEx MTY1M1oXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoOTcyNjA0NEFFQzQ1NEE3 MTgwMkRCRTZDRDIxMzg3OTIzMDczMkVDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMULD2/JwIuNfeVZHiCR4GKlw/+880fnZ7Uu4qnACcg7QbMKHYbO zHWhOkyVdkGScDxOzWK6mgXHmt5Fwg3+NEuQXpV3jSnoF2p/lsdVasJ1SWUo5GKf GpIkzI+h06iWLu6Hz7g6S7ylbKuLpzOESAXZHBLz7AlReMMbsXvhUXFu8SqwW6OK 0CR2JEVuVVGj3QyNSt+mqp4FbBY7svB3N1bBy+9zvVA+BXt/CLMLD3xVBk7sFkQj PLD36ycuhkrLLk/cLERJUtTzkA5UE6oQp/mLZ2cLpvb7i0r7WHI/tHgovqmVMnkS tjeG038r44zmxSx25Uocu1ang7QO9sjwBO0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSXJgRK7EVKcYAtvmzSE4eSMHMuyjAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDkvbHlZRVN1eEZTbkdBTGI1czBoT0hrakJ6THNvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ7HMDANBgkqhkiG9w0BAQsFAAOCAQEAijrRCnpeFiyTG985LeKLx1x9yY7Z t0Ffyr/78qrRcWL+wOeulYYhn8doRvcoG2wBnhdDZFl1pabcQlVEv4B0/mtWvVM1 CQpKuUYjfq6Z0jr+B/HhLwj2CLLSvgQZCx3hg3vTeruK8NdMy1zNuANW1e0VdRxi YV8DltS1shQFykfyEfRw5uZniROdCZEVhjWEjsY4yEKvJcbsM202Jjbbf3KFnkGP 8v5o/K0+fV3FRUlH0e2NKlpXuW/CQ3uUm0RYdCq8Hcdx+QPLIsCCISJNHz2TgZRC DARBfxn5QGlb1OgWdcSlhr1ZzuU7N50o98K/NPuouT/2fHJfx5RhTGYnqg== -----END CERTIFICATE-----Generated at Sun Jun 22 01:05:59 2025 by rpki-client