$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vwk0-JoaK81J_C_5efB-LA-W8Z4.roa File: vwk0-JoaK81J_C_5efB-LA-W8Z4.roa (raw, json) Hash identifier: xZMrTohexb8iQwRVn8z9SWhCiqfm6UE9p4cZPX/fE74= Subject key identifier: BF:09:34:F8:9A:1A:2B:CD:49:FC:2F:F9:79:F0:7E:2C:0F:96:F1:9E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F6D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vwk0-JoaK81J_C_5efB-LA-W8Z4.roa Signing time: Tue 10 Jun 2025 11:32:32 +0000 ROA not before: Tue 10 Jun 2025 11:32:32 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.76.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 12:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3949 (0xf6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:32 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=BF0934F89A1A2BCD49FC2FF979F07E2C0F96F19E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:6b:43:d1:80:4c:29:9a:68:51:3b:dc:34: fb:38:27:9f:f9:b4:84:22:56:5b:ef:48:35:9e:69: 4c:aa:72:9f:80:c6:c7:30:44:43:34:a5:5a:05:6d: f2:91:20:c6:32:34:4d:ac:89:4e:ef:0d:47:79:be: 97:77:15:67:44:c4:69:69:8c:35:12:99:5b:92:0c: 39:fc:3a:05:a7:0c:ab:26:38:c5:38:e5:2d:ec:e0: 77:c2:7b:49:20:b8:bc:dc:79:f3:9d:2b:55:9e:59: e4:c1:0f:71:ed:96:d7:31:d4:87:db:c3:e7:aa:6d: 24:68:76:16:08:ab:4e:f9:40:f6:f1:bc:87:50:81: f9:c0:ab:c7:cb:ad:58:b9:8a:d3:41:d9:f8:9a:1b: ea:3d:eb:9e:5a:bd:1c:51:9a:1a:e1:cf:13:7f:e4: 76:8c:c8:1a:42:6f:4b:98:7e:27:0a:c7:bc:b0:fc: 90:eb:af:c7:b1:67:22:e8:fe:42:e5:3c:2c:19:34: 14:54:5a:72:6a:ed:53:2d:70:84:5b:6a:94:bd:b6: 8b:9c:93:31:73:83:33:93:bb:e6:54:97:d3:d1:d2: b7:8e:ee:02:ec:ee:fa:b0:1a:1b:3d:58:c4:f1:ee: 2b:0d:ca:40:a9:5e:64:49:a7:22:8f:d5:a5:86:d8: 69:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:09:34:F8:9A:1A:2B:CD:49:FC:2F:F9:79:F0:7E:2C:0F:96:F1:9E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vwk0-JoaK81J_C_5efB-LA-W8Z4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.16.0/21 Signature Algorithm: sha256WithRSAEncryption 01:e7:6e:d1:38:09:ef:94:11:c4:6c:ff:dc:88:4e:7f:3a:5b: b1:63:50:8d:f2:f3:1b:27:90:f8:0d:ab:43:45:37:88:86:ba: cc:76:f6:01:e1:94:a7:51:5f:80:8c:59:7a:b1:b7:27:a1:42: 74:0c:eb:92:1a:32:eb:61:f5:5e:c6:cc:2a:a8:52:0c:e4:2d: d5:c9:09:2e:7c:c7:ff:b0:09:3c:77:f1:63:15:c0:4e:43:8f: 1b:aa:30:db:49:49:88:35:b6:d9:1f:c4:ca:49:69:a4:18:f6: d9:00:df:24:5d:83:2b:4b:c6:3e:df:84:6c:4c:7b:51:39:a9: 4e:3a:00:40:ab:5e:92:71:82:27:92:78:36:93:21:1a:b1:b0: 81:9e:db:52:3a:be:f6:30:c4:a5:d3:d0:ac:93:1c:60:4c:72: b0:7e:fa:ca:ef:28:2f:95:03:4c:5a:12:12:dd:88:b0:1d:28: bd:44:b5:4a:ea:67:32:89:bb:24:00:1e:a1:2c:9f:f6:5c:ae: 64:de:14:b3:d4:3a:56:be:f9:18:d1:2b:6a:3c:17:45:06:50: d1:63:fb:5d:83:c5:0a:98:39:05:91:c5:dc:f0:74:bf:80:2e: b9:5e:54:ff:3e:ae:cc:f6:23:bf:c4:a2:41:40:4f:b9:b8:82: 9d:a7:01:b9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMzJaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEJGMDkzNEY4OUExQTJC Q0Q0OUZDMkZGOTc5RjA3RTJDMEY5NkYxOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDImGtD0YBMKZpoUTvcNPs4J5/5tIQiVlvvSDWeaUyqcp+Axscw REM0pVoFbfKRIMYyNE2siU7vDUd5vpd3FWdExGlpjDUSmVuSDDn8OgWnDKsmOMU4 5S3s4HfCe0kguLzcefOdK1WeWeTBD3Htltcx1Ifbw+eqbSRodhYIq075QPbxvIdQ gfnAq8fLrVi5itNB2fiaG+o9655avRxRmhrhzxN/5HaMyBpCb0uYficKx7yw/JDr r8exZyLo/kLlPCwZNBRUWnJq7VMtcIRbapS9touckzFzgzOTu+ZUl9PR0reO7gLs 7vqwGhs9WMTx7isNykCpXmRJpyKP1aWG2GkbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUvwk0+JoaK81J/C/5efB+LA+W8Z4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3Z3azAtSm9hSzgxSl9DXzVlZkItTEEtVzhaNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBTBAwDQYJKoZIhvcNAQELBQADggEBAAHnbtE4Ce+UEcRs/9yITn86W7Fj UI3y8xsnkPgNq0NFN4iGusx29gHhlKdRX4CMWXqxtyehQnQM65IaMuth9V7GzCqo UgzkLdXJCS58x/+wCTx38WMVwE5DjxuqMNtJSYg1ttkfxMpJaaQY9tkA3yRdgytL xj7fhGxMe1E5qU46AECrXpJxgieSeDaTIRqxsIGe21I6vvYwxKXT0KyTHGBMcrB+ +srvKC+VA0xaEhLdiLAdKL1EtUrqZzKJuyQAHqEsn/ZcrmTeFLPUOla++RjRK2o8 F0UGUNFj+12DxQqYOQWRxdzwdL+ALrleVP8+rsz2I7/EokFAT7m4gp2nAbk= -----END CERTIFICATE-----Generated at Sun Jun 22 15:12:23 2025 by rpki-client