$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mfHCZuHnP12pFbqz91V-zSoNOAs.roa File: mfHCZuHnP12pFbqz91V-zSoNOAs.roa (raw, json) Hash identifier: 9dkL16uUZw0TfmCuoLEX0DnahPjzaR5V/+yF4XNUpGc= Subject key identifier: 99:F1:C2:66:E1:E7:3F:5D:A9:15:BA:B3:F7:55:7E:CD:2A:0D:38:0B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EA4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mfHCZuHnP12pFbqz91V-zSoNOAs.roa Signing time: Tue 10 Jun 2025 11:00:40 +0000 ROA not before: Tue 10 Jun 2025 11:00:40 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 211.14.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3748 (0xea4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:00:40 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=99F1C266E1E73F5DA915BAB3F7557ECD2A0D380B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:59:cf:4c:29:61:28:0f:f8:fc:01:81:0f:2d: f2:ff:cf:58:73:66:14:e7:56:a9:06:ce:36:a4:2e: eb:e7:1e:ba:8f:7f:da:dc:96:43:ef:65:3b:79:cc: e3:78:fb:a3:9d:b8:47:b9:07:ba:1a:3b:b7:b6:80: 2c:ec:82:c5:75:90:cc:d6:5d:d4:a7:12:a4:be:4a: 37:43:b6:c0:75:1e:34:ab:56:17:d4:24:55:53:c1: 3d:ed:59:60:6d:ea:9d:48:24:d2:9d:f7:77:b0:6e: 6a:77:e3:a8:48:75:5f:de:9d:40:85:95:62:6f:c5: 1f:46:ab:3a:8d:e0:a8:c1:b1:01:d7:aa:42:6a:30: 45:97:62:89:8f:d7:b0:74:11:3c:36:d0:d2:dc:42: 51:0c:f8:b1:0c:c5:5c:9f:99:be:73:66:ba:e1:fb: 4d:78:e7:90:80:bf:cd:f8:92:cd:1b:02:07:4f:16: d9:46:0c:e1:31:f7:1a:8b:e9:cc:8d:bb:20:d0:28: 5f:00:10:cc:bf:2d:05:4f:a2:a3:58:5b:e2:c6:33: a0:65:95:51:43:c8:1d:4d:2a:e0:f6:77:28:ce:86: 7b:65:51:fa:41:2d:13:fc:32:b7:07:12:ee:af:39: 30:9f:71:0d:31:20:c5:2a:78:0b:dc:d1:39:de:e5: d1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F1:C2:66:E1:E7:3F:5D:A9:15:BA:B3:F7:55:7E:CD:2A:0D:38:0B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mfHCZuHnP12pFbqz91V-zSoNOAs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.90.0/23 Signature Algorithm: sha256WithRSAEncryption af:6c:8c:a7:c5:04:03:91:9a:9a:87:32:06:55:f5:04:79:23: a2:13:18:26:bb:1e:02:59:cf:13:1b:89:11:fb:07:4e:16:1a: df:1c:78:18:a3:e4:30:30:be:9f:f8:58:50:b7:d8:d0:c7:3d: 9b:d2:bb:3e:1d:43:6b:89:9d:34:ed:4a:e5:d0:7f:57:87:97: e4:c1:d8:c8:50:84:ce:0b:ff:31:cf:f9:b8:10:2e:7e:f9:89: a4:10:68:5c:81:ef:0b:f9:c9:ca:0a:52:2b:c8:d6:e7:1f:55: 97:9d:ee:52:86:1e:ca:71:56:69:ce:72:9f:00:f9:3c:7b:ad: f5:ad:47:0e:bf:d1:95:73:1c:cb:bd:3e:3d:6b:0b:aa:a9:fe: 9c:62:64:28:50:75:62:77:15:5d:14:c9:de:9d:ea:00:59:ea: a4:98:ca:28:bc:7b:82:be:10:14:67:de:7a:72:23:7d:93:ed: 86:6a:30:55:a6:0c:fe:2f:a3:a3:b4:7d:7b:cb:1b:df:f8:67: 3f:c2:a0:de:5e:0a:d7:12:86:89:8f:e5:eb:a2:60:6f:08:4a: ea:8e:d3:53:9a:5d:49:0c:c6:58:1f:9b:27:84:54:02:1b:36: 05:8b:b7:d6:56:2c:25:b3:cf:2d:da:1e:94:85:d4:bb:83:aa: 48:de:bf:33 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTAwNDBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDk5RjFDMjY2RTFFNzNG NURBOTE1QkFCM0Y3NTU3RUNEMkEwRDM4MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhWc9MKWEoD/j8AYEPLfL/z1hzZhTnVqkGzjakLuvnHrqPf9rc lkPvZTt5zON4+6OduEe5B7oaO7e2gCzsgsV1kMzWXdSnEqS+SjdDtsB1HjSrVhfU JFVTwT3tWWBt6p1IJNKd93ewbmp346hIdV/enUCFlWJvxR9GqzqN4KjBsQHXqkJq MEWXYomP17B0ETw20NLcQlEM+LEMxVyfmb5zZrrh+01455CAv834ks0bAgdPFtlG DOEx9xqL6cyNuyDQKF8AEMy/LQVPoqNYW+LGM6BllVFDyB1NKuD2dyjOhntlUfpB LRP8MrcHEu6vOTCfcQ0xIMUqeAvc0Tne5dFpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmfHCZuHnP12pFbqz91V+zSoNOAswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L21mSENadUhuUDEycEZicXo5MVYtelNvTk9Bcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTDlowDQYJKoZIhvcNAQELBQADggEBAK9sjKfFBAORmpqHMgZV9QR5I6IT GCa7HgJZzxMbiRH7B04WGt8ceBij5DAwvp/4WFC32NDHPZvSuz4dQ2uJnTTtSuXQ f1eHl+TB2MhQhM4L/zHP+bgQLn75iaQQaFyB7wv5ycoKUivI1ucfVZed7lKGHspx VmnOcp8A+Tx7rfWtRw6/0ZVzHMu9Pj1rC6qp/pxiZChQdWJ3FV0Uyd6d6gBZ6qSY yii8e4K+EBRn3npyI32T7YZqMFWmDP4vo6O0fXvLG9/4Zz/CoN5eCtcShomP5eui YG8ISuqO01OaXUkMxlgfmyeEVAIbNgWLt9ZWLCWzzy3aHpSF1LuDqkjevzM= -----END CERTIFICATE-----Generated at Sun Jun 22 03:59:37 2025 by rpki-client