$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nv9Nx5LOMqZXzeE6nv84a8EFoLk.roa File: nv9Nx5LOMqZXzeE6nv84a8EFoLk.roa (raw, json) Hash identifier: +1U2cLsnOHmD6/OcSLZpO1OjmQoJcG4JaaSg1D/nnLA= Subject key identifier: 9E:FF:4D:C7:92:CE:32:A6:57:CD:E1:3A:9E:FF:38:6B:C1:05:A0:B9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F1B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nv9Nx5LOMqZXzeE6nv84a8EFoLk.roa Signing time: Tue 10 Jun 2025 11:20:20 +0000 ROA not before: Tue 10 Jun 2025 11:20:20 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 183.73.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3867 (0xf1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:20:20 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=9EFF4DC792CE32A657CDE13A9EFF386BC105A0B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:c5:f9:95:c6:09:35:2d:82:45:e6:d7:e6: 67:a6:7b:ca:d5:ab:13:7a:12:4c:4d:58:f4:7b:a3: 45:3f:81:38:c2:83:3b:79:b2:d1:2f:49:75:b1:09: fd:7c:9a:6f:6f:10:a2:5a:69:5b:9a:5b:c5:cd:44: ce:20:78:54:a0:8d:7e:c7:63:2c:70:aa:4d:45:d9: fd:b0:64:d7:6c:8b:03:98:96:25:bb:1f:91:18:28: 34:45:d7:99:c5:1b:66:9a:3e:07:3c:bc:06:eb:2e: 8a:b4:fa:0d:22:e5:17:ad:fd:7e:60:02:23:ec:25: 8e:22:4e:0d:b5:b7:be:50:b6:8e:01:df:71:7e:8f: cf:a8:3d:cd:d6:de:75:e5:27:85:fd:e1:28:54:42: 01:7d:ad:ac:40:2c:03:37:13:76:14:e0:38:c1:9c: 0d:99:34:d8:d9:02:21:1a:ee:6c:a4:5e:d8:16:3a: e0:46:df:48:43:42:f0:e3:3d:f5:00:60:7e:93:64: bd:e4:d3:2c:21:02:f0:cb:76:96:70:a0:6d:0c:9e: 8f:13:fb:87:ea:5c:77:23:ca:47:89:85:62:e7:06: 05:b9:4f:06:9d:06:cd:ef:18:8b:07:61:13:ad:d1: 74:61:ab:88:8d:d1:62:a1:e1:66:93:a0:27:dc:81: 32:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FF:4D:C7:92:CE:32:A6:57:CD:E1:3A:9E:FF:38:6B:C1:05:A0:B9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nv9Nx5LOMqZXzeE6nv84a8EFoLk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.73.8.0/21 Signature Algorithm: sha256WithRSAEncryption 1f:74:10:14:32:e2:49:1e:a6:4b:c5:30:17:7f:21:97:d5:57: 8e:97:d2:1d:69:64:0f:e6:24:01:13:02:96:58:48:2b:2c:ac: 8e:6f:08:b6:00:9b:51:93:55:3a:86:5d:74:c3:55:f6:3e:25: 6f:d1:d0:59:ec:dc:e0:7e:07:d9:3c:51:61:52:2a:b0:2a:55: 39:54:ad:d1:06:a2:cf:80:b4:e3:a1:c3:75:08:f3:41:f3:fb: 70:9e:ce:1a:7b:80:31:cc:d7:56:cf:3d:59:71:3d:fe:7d:6b: ff:90:e7:f7:f6:2e:31:13:c0:3f:5b:5d:ac:c1:d9:88:c7:54: 87:bb:a6:1b:30:5d:43:72:b8:93:81:7a:2e:34:43:1c:cc:e2: 9e:f8:b2:2e:41:a3:0b:1e:43:0b:82:fb:00:49:c2:4d:75:b7: a6:37:7e:6e:cc:ab:66:d6:22:73:cc:40:f9:16:83:9a:8b:95: d9:21:99:53:c4:10:2c:d9:fd:9b:16:a8:bd:fc:74:c0:b7:f0: c4:e5:26:ff:0f:41:62:4b:16:fb:cc:87:b4:29:0f:86:9a:8d: 72:0c:ce:05:b7:20:b0:4e:43:f4:17:e9:d3:ae:3c:32:65:54: df:1a:ef:f7:6e:63:99:97:03:85:91:a7:5c:9f:36:4d:71:0a: d6:06:e1:59 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDxswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTIwMjBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDlFRkY0REM3OTJDRTMy QTY1N0NERTEzQTlFRkYzODZCQzEwNUEwQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/r8X5lcYJNS2CRebX5meme8rVqxN6EkxNWPR7o0U/gTjCgzt5 stEvSXWxCf18mm9vEKJaaVuaW8XNRM4geFSgjX7HYyxwqk1F2f2wZNdsiwOYliW7 H5EYKDRF15nFG2aaPgc8vAbrLoq0+g0i5Ret/X5gAiPsJY4iTg21t75Qto4B33F+ j8+oPc3W3nXlJ4X94ShUQgF9raxALAM3E3YU4DjBnA2ZNNjZAiEa7mykXtgWOuBG 30hDQvDjPfUAYH6TZL3k0ywhAvDLdpZwoG0Mno8T+4fqXHcjykeJhWLnBgW5Twad Bs3vGIsHYROt0XRhq4iN0WKh4WaToCfcgTIJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnv9Nx5LOMqZXzeE6nv84a8EFoLkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L252OU54NUxPTXFaWHplRTZudjg0YThFRm9May5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO3SQgwDQYJKoZIhvcNAQELBQADggEBAB90EBQy4kkepkvFMBd/IZfVV46X 0h1pZA/mJAETApZYSCssrI5vCLYAm1GTVTqGXXTDVfY+JW/R0Fns3OB+B9k8UWFS KrAqVTlUrdEGos+AtOOhw3UI80Hz+3Cezhp7gDHM11bPPVlxPf59a/+Q5/f2LjET wD9bXazB2YjHVIe7phswXUNyuJOBei40QxzM4p74si5BowseQwuC+wBJwk11t6Y3 fm7Mq2bWInPMQPkWg5qLldkhmVPEECzZ/ZsWqL38dMC38MTlJv8PQWJLFvvMh7Qp D4aajXIMzgW3ILBOQ/QX6dOuPDJlVN8a7/duY5mXA4WRp1yfNk1xCtYG4Vk= -----END CERTIFICATE-----Generated at Sun Jun 22 17:56:27 2025 by rpki-client