$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oMbslyhBB__6ZOk9csOY37cGE4w.roa File: oMbslyhBB__6ZOk9csOY37cGE4w.roa (raw, json) Hash identifier: HLr4E5AU90wS7h3L4GU49z77oV399jA5oJlRt08TVgk= Subject key identifier: A0:C6:EC:97:28:41:07:FF:FA:64:E9:3D:72:C3:98:DF:B7:06:13:8C Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 80 Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oMbslyhBB__6ZOk9csOY37cGE4w.roa Signing time: Tue 10 Jun 2025 11:40:41 +0000 ROA not before: Tue 10 Jun 2025 11:40:41 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 146.160.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 18:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Jun 10 11:40:41 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=A0C6EC97284107FFFA64E93D72C398DFB706138C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:b5:2f:4f:a4:bd:d1:6e:d9:c1:03:cf:f7: c6:d9:bc:9c:77:81:ff:21:f3:ab:8c:78:cb:9d:8c: 05:1d:20:e7:ec:5d:65:9c:6f:c1:7d:5f:89:76:94: 13:77:99:8d:c9:e3:05:54:26:2f:d5:ba:29:06:84: 84:f3:c8:40:a6:e1:bf:ed:29:eb:0b:bc:7d:6e:9e: 01:ba:eb:59:08:bb:ad:a8:9c:dd:69:a8:ee:40:21: 5a:9f:22:2b:46:1e:4e:48:82:ea:1a:2a:32:e1:19: 26:b9:68:43:9c:e5:06:0b:b1:dd:a9:f3:5c:e2:df: 8c:c4:7d:cc:f0:03:5d:67:9d:7f:d3:8b:2c:ab:f7: 3e:91:77:70:b2:fb:47:48:4b:00:4e:d0:8e:6a:d3: 39:c5:c3:c2:f4:c2:26:39:2b:51:f3:71:0d:1a:27: 58:e4:e7:c5:01:bc:fa:4b:ee:c9:04:56:25:c1:84: 61:bf:1c:09:e2:bd:f9:a2:60:a0:72:88:9a:bc:44: d9:e1:c9:07:de:a5:b6:c6:4f:9f:86:bd:ce:d4:05: 9d:3f:0b:88:64:05:f0:dd:22:17:ac:c6:18:c9:cc: dc:ee:5e:47:84:33:a8:2d:21:4e:05:41:58:d6:24: dc:f6:f2:6d:91:03:b6:c7:c1:9f:62:76:eb:36:a2: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C6:EC:97:28:41:07:FF:FA:64:E9:3D:72:C3:98:DF:B7:06:13:8C X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oMbslyhBB__6ZOk9csOY37cGE4w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.160.0.0/17 Signature Algorithm: sha256WithRSAEncryption 94:0d:d6:4a:04:8f:00:fb:dc:4e:1f:8d:64:9e:44:39:b5:f6: cb:22:3f:c7:0b:84:42:db:61:eb:2d:90:6e:df:90:87:5c:ad: 2f:da:af:16:4e:1d:e4:24:2c:b4:a0:56:7f:96:32:7a:fb:83: 2f:8c:84:40:f6:71:db:38:04:be:94:a2:9e:11:2f:38:5c:ee: c0:b7:65:c0:6c:8a:05:4a:64:dc:b8:b8:a9:d4:a4:df:b7:c6: a5:43:57:c7:cf:84:4b:09:27:0e:da:5c:d7:8d:d2:8f:2b:d1: b4:19:8a:97:bc:66:fa:03:0b:75:1a:7f:26:82:28:da:9c:1f: 72:75:8c:5c:fe:22:d0:d8:a9:bb:09:73:48:cc:52:22:55:a8: bf:a9:a7:6c:ce:96:09:79:0f:49:57:48:56:91:31:da:2b:32: f8:c8:d4:14:4d:08:e2:73:b7:1b:3a:2c:91:7c:48:68:8d:9e: 00:cd:d2:5e:9b:a9:58:7c:5e:ae:93:7c:18:81:15:83:85:b0: 3b:94:ac:ec:45:d4:dc:1b:73:d5:e0:cc:74:4e:d4:ff:94:75: a1:0c:ff:31:e2:4e:7b:71:69:22:46:cc:ac:3e:3f:bd:af:23: 94:56:fb:d1:74:57:53:95:ca:38:4a:9d:83:01:8a:f8:78:78: f2:91:40:eb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5 RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNTA2MTAx MTQwNDFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEEwQzZFQzk3Mjg0MTA3 RkZGQTY0RTkzRDcyQzM5OERGQjcwNjEzOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/NbUvT6S90W7ZwQPP98bZvJx3gf8h86uMeMudjAUdIOfsXWWc b8F9X4l2lBN3mY3J4wVUJi/VuikGhITzyECm4b/tKesLvH1ungG661kIu62onN1p qO5AIVqfIitGHk5IguoaKjLhGSa5aEOc5QYLsd2p81zi34zEfczwA11nnX/Tiyyr 9z6Rd3Cy+0dISwBO0I5q0znFw8L0wiY5K1HzcQ0aJ1jk58UBvPpL7skEViXBhGG/ HAnivfmiYKByiJq8RNnhyQfepbbGT5+Gvc7UBZ0/C4hkBfDdIhesxhjJzNzuXkeE M6gtIU4FQVjWJNz28m2RA7bHwZ9idus2ovKPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoMbslyhBB//6ZOk9csOY37cGE4wwHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193 R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L29NYnNseWhCQl9fNlpPazljc09ZMzdjR0U0dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeSoAAwDQYJKoZIhvcNAQELBQADggEBAJQN1koEjwD73E4fjWSeRDm19ssi P8cLhELbYestkG7fkIdcrS/arxZOHeQkLLSgVn+WMnr7gy+MhED2cds4BL6Uop4R Lzhc7sC3ZcBsigVKZNy4uKnUpN+3xqVDV8fPhEsJJw7aXNeN0o8r0bQZipe8ZvoD C3UafyaCKNqcH3J1jFz+ItDYqbsJc0jMUiJVqL+pp2zOlgl5D0lXSFaRMdorMvjI 1BRNCOJztxs6LJF8SGiNngDN0l6bqVh8Xq6TfBiBFYOFsDuUrOxF1Nwbc9XgzHRO 1P+UdaEM/zHiTntxaSJGzKw+P72vI5RW+9F0V1OVyjhKnYMBivh4ePKRQOs= -----END CERTIFICATE-----Generated at Sun Jun 22 22:37:46 2025 by rpki-client