$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tOY5eFKlk4TAh2_ivACjSDsQivE.roa File: tOY5eFKlk4TAh2_ivACjSDsQivE.roa (raw, json) Hash identifier: qjieXGaLkmVFNrZLY4TOvbmI7RF+Bg2IYmVKxXnb65A= Subject key identifier: B4:E6:39:78:52:A5:93:84:C0:87:6F:E2:BC:00:A3:48:3B:10:8A:F1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F86 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tOY5eFKlk4TAh2_ivACjSDsQivE.roa Signing time: Tue 10 Jun 2025 11:36:15 +0000 ROA not before: Tue 10 Jun 2025 11:36:15 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.72.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 10:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3974 (0xf86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:36:15 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=B4E6397852A59384C0876FE2BC00A3483B108AF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:53:9f:00:b7:bd:c2:4b:e6:47:79:c7:d9:d3: 8c:2b:65:1e:5d:b1:35:2d:cc:19:c0:e7:84:7a:99: 39:12:c7:07:52:bc:f2:e4:df:94:63:f0:5f:2b:21: 8d:93:88:61:f1:3d:87:d7:ee:0b:5d:55:7d:a3:12: bd:ed:0d:e3:a5:d8:4c:ff:8b:8b:a2:33:c9:7b:7b: c6:02:86:ae:00:25:c8:cc:bf:9e:de:81:43:f2:d9: 64:aa:c4:42:c7:b4:1b:a8:f2:cf:8b:05:71:62:3c: a3:94:14:b8:e3:f7:4f:16:8d:1e:14:7a:3a:70:2f: a0:36:5d:d8:54:7b:4b:6b:1c:f5:c1:ff:dc:ed:64: 6e:62:42:0c:5d:b3:f0:70:53:fa:46:21:b6:c3:28: 61:bf:0b:76:1d:79:2b:11:ef:e9:59:75:d8:56:a9: cc:f3:9d:e6:81:30:2b:2f:d2:9d:a0:86:d7:b6:d8: 94:b8:bf:3a:f9:49:73:81:4e:d3:63:75:bd:d7:93: ec:fb:81:da:2b:16:d8:b6:ae:15:c3:bd:cc:12:cb: 2e:bc:6f:40:30:a2:ee:c3:86:8e:00:f0:00:07:fa: 32:6a:94:8e:f8:b8:4b:1a:cd:3e:1c:ba:cb:9d:90: a6:7c:96:9f:75:e1:e7:14:32:f3:b2:7c:6f:55:31: 34:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E6:39:78:52:A5:93:84:C0:87:6F:E2:BC:00:A3:48:3B:10:8A:F1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tOY5eFKlk4TAh2_ivACjSDsQivE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.96.0/19 Signature Algorithm: sha256WithRSAEncryption 50:41:96:92:a7:63:be:01:75:cd:7e:61:ab:1a:cd:10:38:db: 3e:0c:8e:01:47:96:ff:7c:55:2d:77:39:9b:e6:43:91:62:3d: 37:64:cc:8e:2e:7b:17:97:b8:fb:b3:6b:03:24:e8:f1:4a:29: e3:31:8d:3a:ba:d1:20:0f:42:bb:31:34:03:88:d9:90:f8:8b: 02:6d:fa:3b:5a:a4:74:80:f2:ea:db:d2:56:da:21:e4:02:98: de:98:9a:2c:7f:13:9d:ba:04:86:7a:e4:62:30:31:97:44:5b: 95:76:3e:6b:3e:33:59:85:5e:14:0f:2b:5c:b7:94:7f:a9:5b: 1f:a1:a8:84:a1:b2:7f:ed:30:ee:d0:44:3b:21:f0:db:44:e6: 6b:a0:7f:32:c5:32:e6:34:79:68:28:d0:3d:13:81:52:98:01: 24:8d:7c:e8:58:9d:6a:35:bd:8c:be:19:5a:6f:4a:ad:e4:43: 44:7b:a1:fa:ac:d2:77:72:af:48:f9:22:0b:84:83:e7:a9:db: 94:7f:ce:48:4e:7d:f2:43:72:1f:98:0d:b0:39:2f:e0:82:3c: 41:4c:d9:0e:e7:1b:e7:2b:ed:96:ec:6e:48:ea:04:2e:83:61: 2a:6a:14:2a:54:98:0e:d8:06:06:ec:85:4a:ae:8a:73:6c:58: c0:5a:8f:e6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD4YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTM2MTVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEI0RTYzOTc4NTJBNTkz ODRDMDg3NkZFMkJDMDBBMzQ4M0IxMDhBRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1U58At73CS+ZHecfZ04wrZR5dsTUtzBnA54R6mTkSxwdSvPLk 35Rj8F8rIY2TiGHxPYfX7gtdVX2jEr3tDeOl2Ez/i4uiM8l7e8YChq4AJcjMv57e gUPy2WSqxELHtBuo8s+LBXFiPKOUFLjj908WjR4UejpwL6A2XdhUe0trHPXB/9zt ZG5iQgxds/BwU/pGIbbDKGG/C3YdeSsR7+lZddhWqczzneaBMCsv0p2ghte22JS4 vzr5SXOBTtNjdb3Xk+z7gdorFti2rhXDvcwSyy68b0Awou7Dho4A8AAH+jJqlI74 uEsazT4cusudkKZ8lp914ecUMvOyfG9VMTSBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUtOY5eFKlk4TAh2/ivACjSDsQivEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3RPWTVlRktsazRUQWgyX2l2QUNqU0RzUWl2RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBSGAwDQYJKoZIhvcNAQELBQADggEBAFBBlpKnY74Bdc1+YasazRA42z4M jgFHlv98VS13OZvmQ5FiPTdkzI4uexeXuPuzawMk6PFKKeMxjTq60SAPQrsxNAOI 2ZD4iwJt+jtapHSA8urb0lbaIeQCmN6Ymix/E526BIZ65GIwMZdEW5V2Pms+M1mF XhQPK1y3lH+pWx+hqIShsn/tMO7QRDsh8NtE5mugfzLFMuY0eWgo0D0TgVKYASSN fOhYnWo1vYy+GVpvSq3kQ0R7ofqs0ndyr0j5IguEg+ep25R/zkhOffJDch+YDbA5 L+CCPEFM2Q7nG+cr7ZbsbkjqBC6DYSpqFCpUmA7YBgbshUquinNsWMBaj+Y= -----END CERTIFICATE-----Generated at Sat Jun 21 15:01:26 2025 by rpki-client