$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sZOgh6PSQYkR42T-eKSVQQu7bPA.roa File: sZOgh6PSQYkR42T-eKSVQQu7bPA.roa (raw, json) Hash identifier: 105//DfVPBsd0RfOX8VVbG4gTGOSnwnORV40dTS0CZQ= Subject key identifier: B1:93:A0:87:A3:D2:41:89:11:E3:64:FE:78:A4:95:41:0B:BB:6C:F0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F70 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sZOgh6PSQYkR42T-eKSVQQu7bPA.roa Signing time: Tue 10 Jun 2025 11:32:34 +0000 ROA not before: Tue 10 Jun 2025 11:32:34 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.108.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3952 (0xf70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:34 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=B193A087A3D2418911E364FE78A495410BBB6CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fe:6f:32:a5:40:c6:94:c0:f5:c5:cd:57:90: 2e:e7:e4:89:5f:33:b1:f3:f4:02:32:8a:8b:dc:98: 8f:94:3e:0b:0d:4b:df:41:f7:6f:c8:bb:d1:02:69: ef:8e:0e:38:7c:f7:6a:a1:26:cd:b7:fb:47:f4:4a: 05:cc:93:24:ff:8a:92:50:c0:31:6d:77:e0:06:50: b6:32:7e:70:29:7b:6d:b0:fd:19:ec:77:ab:f5:5e: f8:a1:d9:42:99:36:3d:df:da:e0:5b:5f:55:4f:2f: 01:9f:7f:47:7a:9f:7b:f9:da:12:fd:a0:96:62:0e: e2:0c:01:a0:4f:1e:43:83:fa:84:fa:53:aa:65:57: a2:e1:e7:6e:a9:95:6e:05:2d:af:b3:ef:f1:19:e7: f6:19:2e:43:11:4a:6a:a1:77:38:f9:ca:7e:6c:6b: 2c:b2:55:b3:6b:2e:d8:ab:f0:c0:0a:cf:a3:86:db: 14:10:a4:9c:1f:fb:28:0c:52:73:20:80:e5:b6:b4: 77:4b:39:c6:4b:ec:bb:cd:3d:8b:27:b9:6e:bd:03: bc:18:03:9e:bf:cb:d2:a3:9c:ec:2a:9d:a1:64:a1: 37:27:d2:f5:eb:81:58:5a:1a:ea:0d:9e:7e:d2:7e: c0:0d:ab:a3:a1:1c:33:0f:93:db:3b:9b:5c:bd:c2: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:93:A0:87:A3:D2:41:89:11:E3:64:FE:78:A4:95:41:0B:BB:6C:F0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sZOgh6PSQYkR42T-eKSVQQu7bPA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.108.208.0/20 Signature Algorithm: sha256WithRSAEncryption 00:e1:4b:b7:9e:41:04:a5:cb:22:f2:51:cf:9f:0a:7b:1c:91: a6:28:c8:3c:8f:5a:f4:8a:f0:a6:eb:88:c9:db:cb:5e:3e:4e: 7f:0c:7a:c7:62:c9:53:d3:ad:3f:eb:23:54:a9:f7:ec:97:50: 1a:1c:21:ef:37:59:35:63:2d:39:69:97:46:d6:84:4d:cf:89: 60:e6:32:2c:3f:6f:ea:90:67:cd:64:91:e2:db:64:6f:2a:66: cf:7b:7a:9e:88:02:c3:b0:71:76:81:04:ef:80:0a:41:62:ba: 13:41:38:05:37:db:3c:cd:a3:5a:a8:dc:87:4c:f1:e3:af:2e: 3d:fb:64:d1:68:15:70:3b:34:c3:a1:21:5c:b4:fe:ce:2e:6d: d4:86:cc:17:18:7c:0d:b6:39:a6:b8:59:16:71:57:e0:9b:c0: da:13:66:da:53:44:ff:f7:a3:25:ae:1e:68:c5:a8:c0:35:7e: a0:6f:c3:02:8c:4e:ec:42:7f:d9:d0:74:b4:d3:9a:93:f1:b9: 14:64:dd:ac:a3:34:83:ab:58:b0:c9:88:50:e3:eb:82:97:e2: fb:23:bb:77:a0:2e:f4:5a:bd:64:e9:1c:7a:f7:5c:a7:eb:3e: a1:4e:8c:c0:74:d0:32:1d:39:f9:cc:d5:59:73:9f:e4:74:89: 85:72:6f:53 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMzRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEIxOTNBMDg3QTNEMjQx ODkxMUUzNjRGRTc4QTQ5NTQxMEJCQjZDRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCe/m8ypUDGlMD1xc1XkC7n5IlfM7Hz9AIyiovcmI+UPgsNS99B 92/Iu9ECae+ODjh892qhJs23+0f0SgXMkyT/ipJQwDFtd+AGULYyfnApe22w/Rns d6v1Xvih2UKZNj3f2uBbX1VPLwGff0d6n3v52hL9oJZiDuIMAaBPHkOD+oT6U6pl V6Lh526plW4FLa+z7/EZ5/YZLkMRSmqhdzj5yn5sayyyVbNrLtir8MAKz6OG2xQQ pJwf+ygMUnMggOW2tHdLOcZL7LvNPYsnuW69A7wYA56/y9KjnOwqnaFkoTcn0vXr gVhaGuoNnn7SfsANq6OhHDMPk9s7m1y9wuItAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsZOgh6PSQYkR42T+eKSVQQu7bPAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NaT2doNlBTUVlrUjQyVC1lS1NWUVF1N2JQQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQxbNAwDQYJKoZIhvcNAQELBQADggEBAADhS7eeQQSlyyLyUc+fCnsckaYo yDyPWvSK8KbriMnby14+Tn8MesdiyVPTrT/rI1Sp9+yXUBocIe83WTVjLTlpl0bW hE3PiWDmMiw/b+qQZ81kkeLbZG8qZs97ep6IAsOwcXaBBO+ACkFiuhNBOAU32zzN o1qo3IdM8eOvLj37ZNFoFXA7NMOhIVy0/s4ubdSGzBcYfA22Oaa4WRZxV+CbwNoT ZtpTRP/3oyWuHmjFqMA1fqBvwwKMTuxCf9nQdLTTmpPxuRRk3ayjNIOrWLDJiFDj 64KX4vsju3egLvRavWTpHHr3XKfrPqFOjMB00DIdOfnM1Vlzn+R0iYVyb1M= -----END CERTIFICATE-----Generated at Sat Jun 21 10:33:37 2025 by rpki-client