$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mLswaqtA1-48UppfJSvGFNiSF44.roa File: mLswaqtA1-48UppfJSvGFNiSF44.roa (raw, json) Hash identifier: iVTxnTSwh93aAX7LUInT/N/hULBOKYEaxtIuLgv2OTM= Subject key identifier: 98:BB:30:6A:AB:40:D7:EE:3C:52:9A:5F:25:2B:C6:14:D8:92:17:8E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F4B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mLswaqtA1-48UppfJSvGFNiSF44.roa Signing time: Tue 10 Jun 2025 11:28:23 +0000 ROA not before: Tue 10 Jun 2025 11:28:23 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.77.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 05:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3915 (0xf4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:28:23 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=98BB306AAB40D7EE3C529A5F252BC614D892178E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:45:dc:c4:7b:64:09:c0:8e:bf:bd:f3:3a: 2b:8f:74:db:44:73:d6:34:68:7b:af:a0:81:81:f8: d4:29:f7:93:7a:62:9f:08:7e:3a:5d:f7:88:d4:7c: 67:c7:51:2b:64:f9:cb:f1:e8:3a:b8:b5:c2:7c:4c: 2e:16:df:11:5a:e1:ac:a5:7a:48:0d:a9:29:7f:b1: 1d:bd:af:11:9d:ba:be:08:ec:31:fb:33:d6:57:0f: e8:b6:43:f3:4a:23:f8:e7:50:23:d3:d7:dc:de:a3: e8:b5:89:4d:64:34:ec:c2:9a:04:56:d5:41:69:47: 35:82:3d:4a:77:7b:50:0c:a8:4c:58:a3:07:7e:f1: 20:5e:cc:90:2c:81:81:17:81:23:07:5a:3b:b0:0c: 52:3d:49:85:bf:d1:03:03:93:43:08:02:6e:a5:71: b0:e2:16:df:cf:44:ef:39:dd:d2:9d:2a:8c:1a:80: 09:3a:ee:85:bf:31:95:18:1e:a5:ce:2f:de:b5:7e: d1:51:3f:92:cb:e8:07:20:8a:93:8a:60:77:82:45: dd:bd:42:c3:46:cb:60:7a:73:3f:d1:2f:24:19:79: 0d:05:8f:cd:a5:e2:4e:02:04:f7:2e:e6:01:d2:c3: 89:20:a4:ec:d0:c1:c7:7b:f8:8e:b2:21:25:02:d8: b2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BB:30:6A:AB:40:D7:EE:3C:52:9A:5F:25:2B:C6:14:D8:92:17:8E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mLswaqtA1-48UppfJSvGFNiSF44.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.77.0.0/17 Signature Algorithm: sha256WithRSAEncryption df:9e:9a:bd:38:14:61:34:6f:09:1c:7c:81:58:3d:e7:f7:e0: ef:d6:ea:5f:1f:a0:77:1d:a3:e5:af:af:df:ad:b2:a2:44:5c: 8e:7d:ed:56:f2:63:15:97:41:fa:63:42:85:41:ef:65:f7:7c: 84:45:18:6b:42:e6:87:90:71:f6:24:50:da:46:f5:db:c6:c6: 75:c3:8d:c5:a6:d9:cc:74:c7:f3:ba:88:b8:86:b3:fb:2f:7c: 96:ed:5a:2c:f1:97:7f:eb:80:3f:2f:cf:00:35:6e:49:66:76: 19:b3:71:3e:09:c7:3e:a0:a2:07:99:b5:0b:e5:66:2d:c2:39: 6d:b6:ee:d3:1e:2b:71:a8:21:56:a0:bd:bf:9e:4f:4d:75:74: 3b:fd:70:8b:0f:a8:31:71:a3:70:9d:b1:3c:b2:8e:ce:9e:37: 87:53:a7:06:b1:c1:09:17:f0:5d:1b:ec:eb:49:71:70:76:83: fd:f5:33:26:af:df:9d:dd:bc:f7:d2:3c:cf:05:00:0c:31:6b: 94:1c:75:41:98:63:3c:3f:b5:48:a0:50:39:9c:61:a7:62:55: aa:fc:0f:45:a2:e7:ac:a3:1a:1c:d7:3c:31:82:83:a7:e7:70: 24:4b:bb:81:c6:69:34:ed:47:63:b9:e0:e7:c8:1c:5b:ea:1e: 25:7a:c1:18 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD0swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI4MjNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDk4QkIzMDZBQUI0MEQ3 RUUzQzUyOUE1RjI1MkJDNjE0RDg5MjE3OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCi8UXcxHtkCcCOv73zOiuPdNtEc9Y0aHuvoIGB+NQp95N6Yp8I fjpd94jUfGfHUStk+cvx6Dq4tcJ8TC4W3xFa4aylekgNqSl/sR29rxGdur4I7DH7 M9ZXD+i2Q/NKI/jnUCPT19zeo+i1iU1kNOzCmgRW1UFpRzWCPUp3e1AMqExYowd+ 8SBezJAsgYEXgSMHWjuwDFI9SYW/0QMDk0MIAm6lcbDiFt/PRO853dKdKowagAk6 7oW/MZUYHqXOL961ftFRP5LL6AcgipOKYHeCRd29QsNGy2B6cz/RLyQZeQ0Fj82l 4k4CBPcu5gHSw4kgpOzQwcd7+I6yISUC2LLlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmLswaqtA1+48UppfJSvGFNiSF44wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L21Mc3dhcXRBMS00OFVwcGZKU3ZHRk5pU0Y0NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcBTQAwDQYJKoZIhvcNAQELBQADggEBAN+emr04FGE0bwkcfIFYPef34O/W 6l8foHcdo+Wvr9+tsqJEXI597VbyYxWXQfpjQoVB72X3fIRFGGtC5oeQcfYkUNpG 9dvGxnXDjcWm2cx0x/O6iLiGs/svfJbtWizxl3/rgD8vzwA1bklmdhmzcT4Jxz6g ogeZtQvlZi3COW227tMeK3GoIVagvb+eT011dDv9cIsPqDFxo3CdsTyyjs6eN4dT pwaxwQkX8F0b7OtJcXB2g/31Myav353dvPfSPM8FAAwxa5QcdUGYYzw/tUigUDmc YadiVar8D0Wi56yjGhzXPDGCg6fncCRLu4HGaTTtR2O54OfIHFvqHiV6wRg= -----END CERTIFICATE-----Generated at Fri Jun 20 10:17:55 2025 by rpki-client