$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uGLE_Jtuqzh84_S6kpHgIGcnGVg.roa File: uGLE_Jtuqzh84_S6kpHgIGcnGVg.roa (raw, json) Hash identifier: g3snHMOOIxdIvDSX5xfi32fPRX1PHMw6VDOIkK31t4A= Subject key identifier: B8:62:C4:FC:9B:6E:AB:38:7C:E3:F4:BA:92:91:E0:20:67:27:19:58 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EDD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uGLE_Jtuqzh84_S6kpHgIGcnGVg.roa Signing time: Tue 10 Jun 2025 11:12:27 +0000 ROA not before: Tue 10 Jun 2025 11:12:27 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.67.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3805 (0xedd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:12:27 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=B862C4FC9B6EAB387CE3F4BA9291E02067271958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:73:1c:20:10:72:6b:c6:3d:cd:6f:08:68: af:d5:31:40:9e:f7:0c:5c:12:85:6c:4c:d2:1d:b3: 02:89:6b:37:e1:f7:09:10:cf:27:88:6c:79:7d:24: b6:ee:5e:7b:1c:70:47:33:75:9d:bb:9a:45:ad:4c: b5:cd:f1:cf:df:c0:01:e3:ee:f4:97:30:47:93:38: 9e:56:22:a7:24:b7:de:f1:81:44:ed:e3:40:b7:f2: 8c:7c:7c:a8:aa:1f:78:da:1d:48:1e:dd:f5:e7:5d: d8:4c:1b:76:78:26:31:8f:b5:f1:45:36:69:c4:3d: 8b:62:fd:21:0e:63:50:57:8e:8f:0c:15:fd:46:91: ef:77:78:a7:92:17:4c:55:a4:af:d8:5a:60:0f:2a: be:2f:32:75:67:a9:34:7d:bd:f9:50:19:c1:d0:41: 16:0e:d3:07:97:76:e9:c7:e8:9b:7a:1b:1d:0c:cf: 31:b5:dd:28:4b:5b:57:1f:89:c8:79:bc:77:10:af: 1d:45:54:28:fd:bb:e5:97:88:a3:41:33:17:ba:d1: 0f:ac:5b:14:4d:b7:cb:38:b3:bb:61:7a:42:d5:f5: f9:2b:b8:c3:da:19:1a:a7:22:ee:a0:fd:16:8d:4d: 9d:4c:e0:79:6d:cc:a8:56:fc:56:2d:91:e0:59:3f: c5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:62:C4:FC:9B:6E:AB:38:7C:E3:F4:BA:92:91:E0:20:67:27:19:58 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uGLE_Jtuqzh84_S6kpHgIGcnGVg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.234.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:0b:8e:22:59:7b:f1:a0:71:03:7f:4f:c8:bd:4c:ca:4d:8d: c1:3f:d3:35:2e:ea:59:db:35:1f:f6:a2:42:52:22:5b:81:6c: ab:b0:b8:dc:55:eb:0b:c4:45:cd:65:47:56:73:45:95:23:fb: 7e:85:0d:75:f0:27:b8:b2:e6:52:1f:28:27:8b:de:21:1f:e6: 1a:ac:18:c3:93:f8:a6:63:8c:76:fb:85:47:de:a9:cf:e6:f1: 2a:0d:68:27:32:23:5d:ab:49:f8:ec:ff:46:e7:9c:d0:b2:e7: ab:ab:95:d3:57:6a:c2:20:d9:70:a9:2e:5e:15:e5:b9:c9:8b: 08:38:8e:02:4f:3b:97:31:4c:be:31:f0:fa:58:e5:58:c0:24: 39:53:b3:54:a7:10:1e:a3:6a:88:4b:dd:86:f0:e0:c4:48:e1: 43:79:74:5e:bc:2f:3f:4b:77:4e:70:c0:8a:4a:24:fa:2e:14: 16:07:b6:1f:ae:12:96:02:a0:a2:d6:39:59:c5:3c:9d:2d:66: de:ee:61:bb:06:05:50:b8:1c:7f:09:bd:65:c1:9e:6e:e8:7a: 16:b5:97:fe:be:20:14:c7:8d:16:df:b6:1a:f3:6b:84:3d:eb: f6:71:bf:c6:d0:57:bc:be:1b:d0:89:cf:70:42:35:9d:d2:21: 19:ac:da:20 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTEyMjdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEI4NjJDNEZDOUI2RUFC Mzg3Q0UzRjRCQTkyOTFFMDIwNjcyNzE5NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAg3McIBBya8Y9zW8IaK/VMUCe9wxcEoVsTNIdswKJazfh9wkQ zyeIbHl9JLbuXnsccEczdZ27mkWtTLXN8c/fwAHj7vSXMEeTOJ5WIqckt97xgUTt 40C38ox8fKiqH3jaHUge3fXnXdhMG3Z4JjGPtfFFNmnEPYti/SEOY1BXjo8MFf1G ke93eKeSF0xVpK/YWmAPKr4vMnVnqTR9vflQGcHQQRYO0weXdunH6Jt6Gx0MzzG1 3ShLW1cfich5vHcQrx1FVCj9u+WXiKNBMxe60Q+sWxRNt8s4s7thekLV9fkruMPa GRqnIu6g/RaNTZ1M4HltzKhW/FYtkeBZP8VhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUuGLE/Jtuqzh84/S6kpHgIGcnGVgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3VHTEVfSnR1cXpoODRfUzZrcEhnSUdjbkdWZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQ+owDQYJKoZIhvcNAQELBQADggEBAIwLjiJZe/GgcQN/T8i9TMpNjcE/ 0zUu6lnbNR/2okJSIluBbKuwuNxV6wvERc1lR1ZzRZUj+36FDXXwJ7iy5lIfKCeL 3iEf5hqsGMOT+KZjjHb7hUfeqc/m8SoNaCcyI12rSfjs/0bnnNCy56urldNXasIg 2XCpLl4V5bnJiwg4jgJPO5cxTL4x8PpY5VjAJDlTs1SnEB6jaohL3Ybw4MRI4UN5 dF68Lz9Ld05wwIpKJPouFBYHth+uEpYCoKLWOVnFPJ0tZt7uYbsGBVC4HH8JvWXB nm7oeha1l/6+IBTHjRbfthrza4Q96/Zxv8bQV7y+G9CJz3BCNZ3SIRms2iA= -----END CERTIFICATE-----Generated at Sun Jun 22 03:58:35 2025 by rpki-client