$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/o_eVMqtfzCb7nU4Itpu7AVSFGwU.roa File: o_eVMqtfzCb7nU4Itpu7AVSFGwU.roa (raw, json) Hash identifier: sjuLlYMjP+XXoT/aHDWlDhEgtdxJYsBUphmgcVQbyp0= Subject key identifier: A3:F7:95:32:AB:5F:CC:26:FB:9D:4E:08:B6:9B:BB:01:54:85:1B:05 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EF0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o_eVMqtfzCb7nU4Itpu7AVSFGwU.roa Signing time: Tue 10 Jun 2025 11:12:39 +0000 ROA not before: Tue 10 Jun 2025 11:12:39 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 211.14.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3824 (0xef0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:12:39 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=A3F79532AB5FCC26FB9D4E08B69BBB0154851B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:1b:6f:db:26:df:02:d1:1b:c0:b1:bb:01: 3e:71:4f:25:a0:eb:97:7e:dd:96:de:32:e4:8b:03: 47:d1:c8:50:2a:b9:51:fd:f4:77:40:0c:97:0b:77: d5:46:98:e8:e0:e4:90:7e:30:52:7e:32:4a:e1:04: a0:04:19:80:12:71:7d:44:c5:21:a9:b1:27:67:4f: 52:12:de:9a:d8:55:7e:4f:7d:5e:4c:de:6b:01:3c: b1:de:d9:7a:05:db:c6:c7:82:d7:e9:ec:3c:39:80: 95:e0:53:3f:9e:97:72:be:07:55:82:da:73:5f:7d: b3:c2:d5:73:4d:e3:e4:bd:9c:97:af:81:08:c4:3e: 94:63:13:00:df:34:43:c9:ea:5b:29:bf:26:06:44: 0c:f0:5f:d8:17:40:c4:0e:94:c8:e7:da:9b:eb:18: 10:84:c7:3b:c2:8e:f7:56:81:ef:76:da:4b:c2:81: b5:d0:4a:f2:cc:35:01:d4:e9:ce:cf:a0:22:05:47: e8:ef:ee:70:c7:3c:6e:99:59:11:db:ad:bb:a4:92: f6:16:a4:d7:fc:94:c0:df:d5:0c:ac:86:25:c1:ad: e2:27:72:ee:dd:d5:71:3b:36:d6:86:e1:08:9c:1e: 29:8d:ce:da:fc:95:09:e1:2d:a4:90:e7:81:25:d5: a8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F7:95:32:AB:5F:CC:26:FB:9D:4E:08:B6:9B:BB:01:54:85:1B:05 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o_eVMqtfzCb7nU4Itpu7AVSFGwU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.120.0/22 Signature Algorithm: sha256WithRSAEncryption a0:4f:31:5d:fa:79:15:b0:42:7c:de:18:6e:cf:9c:87:26:82: 67:7a:14:59:5d:ef:cb:52:7b:f9:92:24:30:6c:7b:68:dd:72: b1:05:8c:ca:72:cf:2b:59:13:e1:c1:18:e4:24:b2:04:91:14: 20:0f:18:4d:73:ff:27:b7:e6:5d:65:53:38:f7:d8:96:51:b4: a5:b4:c5:6b:fe:d6:5c:05:74:31:1e:34:20:cf:88:57:7e:34: ea:60:96:da:f2:5d:82:dd:f8:08:d2:44:3f:91:dc:3d:b2:e9: 43:a6:e4:59:5d:f5:73:da:d2:18:3c:76:7a:de:23:55:11:62: 25:10:a2:3a:15:3c:30:30:d9:1b:7c:b9:3a:39:83:e0:21:49: 5e:32:af:4a:e7:70:39:74:5b:a4:18:c9:50:fc:56:e1:b6:10: f4:13:f7:26:51:60:60:b5:e2:a9:b1:24:1c:fb:26:91:48:e5: bb:a1:00:99:5b:02:8d:91:e8:3b:4a:8e:13:ac:56:b2:c1:3f: b0:a5:b3:45:85:92:d2:94:e2:7e:16:d7:d2:85:72:55:83:04: aa:4f:2b:e3:74:79:7a:30:3b:a6:aa:7c:09:16:20:e0:69:4e: bf:ce:28:9c:d2:28:44:73:2e:c6:96:eb:25:de:12:00:e0:9a: 23:d7:62:a1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDvAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTEyMzlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEEzRjc5NTMyQUI1RkND MjZGQjlENEUwOEI2OUJCQjAxNTQ4NTFCMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1Nxtv2ybfAtEbwLG7AT5xTyWg65d+3ZbeMuSLA0fRyFAquVH9 9HdADJcLd9VGmOjg5JB+MFJ+MkrhBKAEGYAScX1ExSGpsSdnT1IS3prYVX5PfV5M 3msBPLHe2XoF28bHgtfp7Dw5gJXgUz+el3K+B1WC2nNffbPC1XNN4+S9nJevgQjE PpRjEwDfNEPJ6lspvyYGRAzwX9gXQMQOlMjn2pvrGBCExzvCjvdWge922kvCgbXQ SvLMNQHU6c7PoCIFR+jv7nDHPG6ZWRHbrbukkvYWpNf8lMDf1QyshiXBreIncu7d 1XE7NtaG4QicHimNztr8lQnhLaSQ54El1ahlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUo/eVMqtfzCb7nU4Itpu7AVSFGwUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L29fZVZNcXRmekNiN25VNEl0cHU3QVZTRkd3VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALTDngwDQYJKoZIhvcNAQELBQADggEBAKBPMV36eRWwQnzeGG7PnIcmgmd6 FFld78tSe/mSJDBse2jdcrEFjMpyzytZE+HBGOQksgSRFCAPGE1z/ye35l1lUzj3 2JZRtKW0xWv+1lwFdDEeNCDPiFd+NOpgltryXYLd+AjSRD+R3D2y6UOm5Fld9XPa 0hg8dnreI1URYiUQojoVPDAw2Rt8uTo5g+AhSV4yr0rncDl0W6QYyVD8VuG2EPQT 9yZRYGC14qmxJBz7JpFI5buhAJlbAo2R6DtKjhOsVrLBP7Cls0WFktKU4n4W19KF clWDBKpPK+N0eXowO6aqfAkWIOBpTr/OKJzSKERzLsaW6yXeEgDgmiPXYqE= -----END CERTIFICATE-----Generated at Sun Jun 22 07:50:37 2025 by rpki-client