$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n8-z96adm7YkNHL8F2Y0BFKfB24.roa File: n8-z96adm7YkNHL8F2Y0BFKfB24.roa (raw, json) Hash identifier: RDv3usFQkW88VZgVvVSOvyA5DZFWFmUYGA1NTjiS3zc= Subject key identifier: 9F:CF:B3:F7:A6:9D:9B:B6:24:34:72:FC:17:66:34:04:52:9F:07:6E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FA8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n8-z96adm7YkNHL8F2Y0BFKfB24.roa Signing time: Tue 10 Jun 2025 11:40:38 +0000 ROA not before: Tue 10 Jun 2025 11:40:38 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.75.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 14:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4008 (0xfa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:40:38 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=9FCFB3F7A69D9BB6243472FC17663404529F076E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2c:bb:ab:ea:a1:b7:b7:7c:8f:a0:ea:05:18: fe:a1:7f:df:56:68:0f:bf:19:ad:26:d5:98:2e:ec: fb:94:aa:a2:a3:2c:69:51:2f:d6:f6:16:b7:16:23: 2d:06:da:d8:29:c1:84:e1:de:3b:fd:a1:ef:9f:71: 6b:a0:ca:88:b2:d1:bf:8a:e5:42:d5:e8:3d:5c:16: 6b:a3:a6:e9:1c:f1:3b:37:ac:f6:eb:ee:1c:5a:21: aa:c8:74:a1:f5:88:94:82:14:67:2e:26:58:07:6b: 15:1b:da:36:d3:00:04:01:67:1e:cd:90:24:b5:a9: fa:dc:aa:bf:ed:40:ce:b9:e0:20:a0:49:2c:9c:89: e9:01:79:a8:48:b6:4a:4d:c4:a0:2e:20:2b:85:93: ac:43:a8:1c:66:be:48:02:5c:5d:d8:3d:72:8e:d6: a8:ae:f8:af:8e:00:cd:1d:46:d9:e7:0c:be:02:58: 76:03:1a:a2:31:09:53:15:2e:4c:72:35:1b:c6:48: ae:54:d9:35:4e:1d:4e:a8:ac:04:1b:9d:82:d3:f5: 31:fd:00:c4:c8:fb:5b:69:e4:53:d8:48:14:12:7a: 6c:00:3e:ee:af:15:54:ff:89:fa:c1:64:61:5e:ea: 61:aa:e4:cf:c8:58:8a:4d:d6:31:bb:6f:ef:f9:bc: e7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CF:B3:F7:A6:9D:9B:B6:24:34:72:FC:17:66:34:04:52:9F:07:6E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n8-z96adm7YkNHL8F2Y0BFKfB24.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.188.0/23 Signature Algorithm: sha256WithRSAEncryption 19:96:4a:a7:44:3f:38:aa:56:81:ed:5f:72:ef:7b:37:f4:2c: 16:fb:54:4b:98:99:4a:47:39:35:15:16:22:d3:f5:c3:41:1b: ef:18:f0:bc:13:8f:dd:01:df:9e:96:1b:db:ed:4e:98:bd:d4: fa:19:5f:f8:fe:ac:db:47:96:42:52:89:7f:91:3f:12:cb:80: 78:b7:49:d4:a7:51:d6:21:c0:67:cb:ac:93:9d:ae:99:40:2a: 56:b1:8b:54:ad:bf:7b:53:ea:cf:0d:5c:2d:cd:05:4c:e1:14: f9:ca:cb:e8:dd:37:8d:93:67:2c:b2:4a:ce:7e:d2:c6:66:4b: fc:73:58:ee:c8:14:46:4d:9a:d0:77:e0:c3:97:6c:80:a6:04: ef:c7:4e:62:9f:ea:ca:c4:86:72:c4:35:95:a9:8d:e4:04:d1: aa:32:bd:1d:b6:9c:b3:f5:01:c7:59:9c:2c:a7:90:76:ab:0c: f9:33:5c:19:ea:25:5b:a2:de:f2:74:4c:b0:51:43:d4:aa:37: ec:b1:f9:20:ad:20:44:f9:79:d6:8a:94:79:b7:36:52:74:ec: 57:b2:86:52:73:ab:61:fb:f3:e3:d7:19:db:6a:a8:87:43:dd: b3:99:d4:4c:5b:8c:4c:43:fb:f3:af:25:9b:2a:3d:87:b7:93: b2:65:30:4e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQwMzhaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDlGQ0ZCM0Y3QTY5RDlC QjYyNDM0NzJGQzE3NjYzNDA0NTI5RjA3NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVLLur6qG3t3yPoOoFGP6hf99WaA+/Ga0m1Zgu7PuUqqKjLGlR L9b2FrcWIy0G2tgpwYTh3jv9oe+fcWugyoiy0b+K5ULV6D1cFmujpukc8Ts3rPbr 7hxaIarIdKH1iJSCFGcuJlgHaxUb2jbTAAQBZx7NkCS1qfrcqr/tQM654CCgSSyc iekBeahItkpNxKAuICuFk6xDqBxmvkgCXF3YPXKO1qiu+K+OAM0dRtnnDL4CWHYD GqIxCVMVLkxyNRvGSK5U2TVOHU6orAQbnYLT9TH9AMTI+1tp5FPYSBQSemwAPu6v FVT/ifrBZGFe6mGq5M/IWIpN1jG7b+/5vOd3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUn8+z96adm7YkNHL8F2Y0BFKfB24wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L244LXo5NmFkbTdZa05ITDhGMlkwQkZLZkIyNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS7wwDQYJKoZIhvcNAQELBQADggEBABmWSqdEPziqVoHtX3Lvezf0LBb7 VEuYmUpHOTUVFiLT9cNBG+8Y8LwTj90B356WG9vtTpi91PoZX/j+rNtHlkJSiX+R PxLLgHi3SdSnUdYhwGfLrJOdrplAKlaxi1Stv3tT6s8NXC3NBUzhFPnKy+jdN42T ZyyySs5+0sZmS/xzWO7IFEZNmtB34MOXbICmBO/HTmKf6srEhnLENZWpjeQE0aoy vR22nLP1AcdZnCynkHarDPkzXBnqJVui3vJ0TLBRQ9SqN+yx+SCtIET5edaKlHm3 NlJ07FeyhlJzq2H78+PXGdtqqIdD3bOZ1ExbjExD+/OvJZsqPYe3k7JlME4= -----END CERTIFICATE-----Generated at Sat Jun 21 16:50:42 2025 by rpki-client