$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nGlT-8HdodRAnLJHqmSicA2ja-c.roa File: nGlT-8HdodRAnLJHqmSicA2ja-c.roa (raw, json) Hash identifier: KFK/Uzbq8gUB4Gr82xnpANnzvWZflCbC7Z6/3XqnfLM= Subject key identifier: 9C:69:53:FB:C1:DD:A1:D4:40:9C:B2:47:AA:64:A2:70:0D:A3:6B:E7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FBA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nGlT-8HdodRAnLJHqmSicA2ja-c.roa Signing time: Tue 10 Jun 2025 11:44:14 +0000 ROA not before: Tue 10 Jun 2025 11:44:14 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 183.73.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4026 (0xfba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:44:14 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=9C6953FBC1DDA1D4409CB247AA64A2700DA36BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9a:9f:10:4c:4d:8e:bd:5f:0f:9b:8d:26:4e: 62:69:df:06:c9:c4:87:e8:76:05:9b:1f:dd:70:7a: 0a:ab:bd:17:1a:7d:a5:2f:ce:63:f3:a2:bd:e5:ac: 91:9c:b6:30:fe:5d:07:69:1d:48:f0:fd:4d:6f:7e: bb:74:18:4d:b0:c9:98:b5:ad:79:fc:af:4d:18:68: ae:fb:2d:0d:78:8f:f3:ce:53:9d:e3:55:37:d9:b2: dd:46:7a:cd:ba:37:d9:59:82:ad:44:60:1d:1a:87: 9a:7b:ab:88:84:1b:74:d6:89:a6:3f:84:a2:a3:a2: ec:41:45:d6:f9:3e:56:bb:28:6e:4e:f3:47:76:fc: 5f:4b:fd:53:d4:1d:b4:da:f9:52:53:27:3d:03:8a: a5:71:e0:5c:0d:74:fa:9a:ba:6a:59:79:4f:38:78: 5f:fc:5c:f8:92:34:27:3b:02:01:30:74:f8:3c:5d: f0:e1:d2:68:8a:d3:ad:f4:6e:ca:51:8e:83:fe:48: a6:93:29:7a:7d:50:9c:da:8e:f2:6c:2a:f4:34:e3: 7f:17:c4:74:1a:32:37:ad:6b:95:30:7e:9c:96:47: f0:fe:95:89:7a:1e:f6:a8:0a:78:f1:68:d8:e9:91: cc:7b:51:29:48:ff:75:f6:5d:93:28:da:7f:84:97: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:69:53:FB:C1:DD:A1:D4:40:9C:B2:47:AA:64:A2:70:0D:A3:6B:E7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nGlT-8HdodRAnLJHqmSicA2ja-c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.73.20.0/22 Signature Algorithm: sha256WithRSAEncryption c3:c8:3b:07:bf:31:a5:bf:ec:89:4b:d4:0e:a2:64:9d:db:51: d0:34:fe:60:87:d6:83:61:9c:4b:67:17:48:2e:93:07:6a:ab: 81:2f:48:11:18:2d:4c:47:12:6d:93:42:00:2d:97:2a:d8:ba: 25:b2:c3:6c:b3:cf:8b:6c:bf:36:2d:06:37:d2:f3:2b:88:10: 1a:f6:f1:8a:a2:49:60:20:1a:1c:44:93:93:cb:0d:32:d2:fd: c4:5f:34:b3:ad:22:9c:60:fc:1d:8d:23:05:d4:32:39:88:8b: 7b:f7:36:99:25:f7:9b:91:43:d3:5d:e7:5f:3c:bf:46:8d:87: 47:35:b0:cb:25:2e:bd:15:e5:02:86:15:b2:c2:71:34:65:d8: 3b:4f:54:d5:da:5a:bd:fb:4d:c0:81:70:f8:34:40:09:de:95: a1:e4:5a:dc:20:6e:06:e2:90:08:b5:22:b4:f4:13:e9:17:3e: 2d:ba:c1:8b:ba:05:b1:30:4f:8f:9b:7b:3b:ae:0d:58:40:f3: fe:3f:ae:0e:37:af:03:81:2f:04:4b:1e:f9:3d:1c:b6:46:33: 1e:54:33:3d:d0:ca:15:f8:b5:df:1f:91:c3:65:63:6d:9a:2a: 7a:20:33:ed:ba:19:5d:10:73:e1:94:9b:dd:25:d1:a0:15:2f: cd:b5:08:52 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD7owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQ0MTRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDlDNjk1M0ZCQzFEREEx RDQ0MDlDQjI0N0FBNjRBMjcwMERBMzZCRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHmp8QTE2OvV8Pm40mTmJp3wbJxIfodgWbH91wegqrvRcafaUv zmPzor3lrJGctjD+XQdpHUjw/U1vfrt0GE2wyZi1rXn8r00YaK77LQ14j/POU53j VTfZst1Ges26N9lZgq1EYB0ah5p7q4iEG3TWiaY/hKKjouxBRdb5Pla7KG5O80d2 /F9L/VPUHbTa+VJTJz0DiqVx4FwNdPqaumpZeU84eF/8XPiSNCc7AgEwdPg8XfDh 0miK0630bspRjoP+SKaTKXp9UJzajvJsKvQ0438XxHQaMjeta5UwfpyWR/D+lYl6 HvaoCnjxaNjpkcx7USlI/3X2XZMo2n+El9ntAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnGlT+8HdodRAnLJHqmSicA2ja+cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L25HbFQtOEhkb2RSQW5MSkhxbVNpY0EyamEtYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAK3SRQwDQYJKoZIhvcNAQELBQADggEBAMPIOwe/MaW/7IlL1A6iZJ3bUdA0 /mCH1oNhnEtnF0gukwdqq4EvSBEYLUxHEm2TQgAtlyrYuiWyw2yzz4tsvzYtBjfS 8yuIEBr28YqiSWAgGhxEk5PLDTLS/cRfNLOtIpxg/B2NIwXUMjmIi3v3Npkl95uR Q9Nd5188v0aNh0c1sMslLr0V5QKGFbLCcTRl2DtPVNXaWr37TcCBcPg0QAnelaHk WtwgbgbikAi1IrT0E+kXPi26wYu6BbEwT4+bezuuDVhA8/4/rg43rwOBLwRLHvk9 HLZGMx5UMz3QyhX4td8fkcNlY22aKnogM+26GV0Qc+GUm90l0aAVL821CFI= -----END CERTIFICATE-----Generated at Sat Jun 21 10:07:01 2025 by rpki-client