$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n0D7WM2KOj9_cZ_xSdtFLLVr41c.roa File: n0D7WM2KOj9_cZ_xSdtFLLVr41c.roa (raw, json) Hash identifier: cgWnbhvTOeFqYVuq/tQ3xkb6ynuMp2B2y9hQW4nbim4= Subject key identifier: 9F:40:FB:58:CD:8A:3A:3F:7F:71:9F:F1:49:DB:45:2C:B5:6B:E3:57 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F24 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n0D7WM2KOj9_cZ_xSdtFLLVr41c.roa Signing time: Tue 10 Jun 2025 11:20:26 +0000 ROA not before: Tue 10 Jun 2025 11:20:26 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.77.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 15:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3876 (0xf24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:20:26 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=9F40FB58CD8A3A3F7F719FF149DB452CB56BE357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d8:03:60:96:12:38:f4:28:b1:a9:77:c3:eb: 6d:b0:35:da:91:29:cb:d8:0a:cd:ec:6a:e3:d7:82: 77:33:32:0e:b5:d3:2a:f6:60:d4:c0:50:6e:87:86: 7c:e9:3e:88:cc:01:31:6a:72:e4:e5:fc:ee:ed:7e: 12:fb:c0:27:40:f5:f4:9e:2c:3f:d5:d3:70:ee:88: 5f:1e:f8:09:8f:b5:ec:09:4c:ee:d8:48:1d:d1:7a: 02:25:6d:ab:69:4a:da:60:52:69:68:5c:87:65:8f: ff:7b:b5:2a:30:bc:d2:3b:20:7b:55:70:6e:57:2b: 85:09:f1:e6:00:dc:37:96:6e:70:64:99:74:36:e2: 6c:11:9a:0a:1d:89:0a:5e:d5:f0:7b:2c:2a:73:d6: 0c:53:7e:a4:0a:c1:63:d2:b8:4c:4c:73:df:ed:23: 23:cb:09:3f:98:9c:de:07:33:05:2f:04:5b:36:43: ff:2f:a3:eb:ea:32:56:b5:02:c2:21:db:6a:5f:bb: 6f:5b:9c:65:9f:8e:98:37:aa:4f:7a:aa:d3:e8:53: 72:4f:93:24:5e:f2:9c:28:66:0a:90:e0:97:07:a9: 4f:d0:7e:3d:ad:dc:68:a0:ea:c6:3a:fe:8b:4a:e6: cc:61:a9:e1:f8:bd:9c:4f:f6:86:1b:79:bb:2d:5d: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:40:FB:58:CD:8A:3A:3F:7F:71:9F:F1:49:DB:45:2C:B5:6B:E3:57 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n0D7WM2KOj9_cZ_xSdtFLLVr41c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.77.128.0/17 Signature Algorithm: sha256WithRSAEncryption 31:78:63:64:38:53:1a:51:58:31:2b:0d:7b:82:9a:cf:f1:78: 06:d8:da:87:56:67:61:14:59:6c:e6:d0:6b:2a:cd:6f:43:f1: 19:e2:43:55:48:3e:7c:5e:e0:2b:40:f3:18:90:29:ab:7a:07: a5:9b:aa:de:11:45:88:67:fb:c3:16:6f:af:a5:51:05:d5:fc: 75:63:ee:97:86:fc:07:fa:5a:41:02:13:94:e0:dd:8b:a7:a2: b3:2b:67:47:e6:32:86:e7:b4:58:c8:bf:1f:2f:dc:4c:36:69: ab:eb:06:64:5a:9a:14:c5:10:fa:70:bc:6b:e8:65:9d:00:ea: b7:35:c6:74:9c:c5:76:f7:8f:31:75:e9:24:9b:40:aa:bd:7d: 15:a7:4f:ea:14:7a:c3:59:81:52:f2:e2:ad:c1:01:b1:fa:48: fa:68:d8:12:e1:6e:a1:33:d3:88:59:4a:cf:d8:06:5a:ec:91: 20:8e:c5:ab:ab:66:ea:45:7b:8b:2b:2d:e8:dc:c1:6f:cd:0d: 7c:d2:80:b5:7a:d8:19:21:08:a8:81:63:93:13:56:50:39:02: 01:55:df:c6:0c:e0:eb:2c:64:10:87:c1:79:5d:e3:96:86:ea: 59:d3:50:55:a6:a0:ef:5c:2b:70:92:07:be:ec:30:0d:ff:a9: 01:e6:e6:1d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDyQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTIwMjZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDlGNDBGQjU4Q0Q4QTNB M0Y3RjcxOUZGMTQ5REI0NTJDQjU2QkUzNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp2ANglhI49CixqXfD622wNdqRKcvYCs3sauPXgnczMg610yr2 YNTAUG6HhnzpPojMATFqcuTl/O7tfhL7wCdA9fSeLD/V03DuiF8e+AmPtewJTO7Y SB3RegIlbatpStpgUmloXIdlj/97tSowvNI7IHtVcG5XK4UJ8eYA3DeWbnBkmXQ2 4mwRmgodiQpe1fB7LCpz1gxTfqQKwWPSuExMc9/tIyPLCT+YnN4HMwUvBFs2Q/8v o+vqMla1AsIh22pfu29bnGWfjpg3qk96qtPoU3JPkyRe8pwoZgqQ4JcHqU/Qfj2t 3Gig6sY6/otK5sxhqeH4vZxP9oYbebstXd0lAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUn0D7WM2KOj9/cZ/xSdtFLLVr41cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L24wRDdXTTJLT2o5X2NaX3hTZHRGTExWcjQxYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcBTYAwDQYJKoZIhvcNAQELBQADggEBADF4Y2Q4UxpRWDErDXuCms/xeAbY 2odWZ2EUWWzm0GsqzW9D8RniQ1VIPnxe4CtA8xiQKat6B6Wbqt4RRYhn+8MWb6+l UQXV/HVj7peG/Af6WkECE5Tg3YunorMrZ0fmMobntFjIvx8v3Ew2aavrBmRamhTF EPpwvGvoZZ0A6rc1xnScxXb3jzF16SSbQKq9fRWnT+oUesNZgVLy4q3BAbH6SPpo 2BLhbqEz04hZSs/YBlrskSCOxaurZupFe4srLejcwW/NDXzSgLV62BkhCKiBY5MT VlA5AgFV38YM4OssZBCHwXld45aG6lnTUFWmoO9cK3CSB77sMA3/qQHm5h0= -----END CERTIFICATE-----Generated at Sat Jun 21 17:58:16 2025 by rpki-client