$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vyNuzQEBLqkbMO3l1b30mczA9Gw.roa File: vyNuzQEBLqkbMO3l1b30mczA9Gw.roa (raw, json) Hash identifier: h/LWqgdIp/WstkIubtj1UFX0TKb6QqM7YC0THDO5T18= Subject key identifier: BF:23:6E:CD:01:01:2E:A9:1B:30:ED:E5:D5:BD:F4:99:CC:C0:F4:6C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E4C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vyNuzQEBLqkbMO3l1b30mczA9Gw.roa Signing time: Tue 10 Jun 2025 10:47:45 +0000 ROA not before: Tue 10 Jun 2025 10:47:45 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.76.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3660 (0xe4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:47:45 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=BF236ECD01012EA91B30EDE5D5BDF499CCC0F46C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:1a:a9:49:cb:ab:a3:ce:e8:be:45:f5:68: c3:e1:1c:ef:c6:83:76:e8:ee:54:0d:1b:8c:a5:33: c0:5a:2a:4f:dd:fa:9d:95:61:e2:8e:eb:a0:b0:d5: 4c:69:4e:64:7b:39:1a:aa:2a:7c:74:10:5d:51:fb: 36:23:a5:59:c5:e0:64:0f:c1:5a:4a:b9:90:91:ae: d1:23:43:2a:3e:e7:ec:0b:eb:41:5d:2b:24:f6:83: b2:32:ef:f8:8c:f7:d7:60:1d:80:1c:dd:f3:31:4a: e3:42:8a:fc:65:85:df:20:3b:c5:98:1b:23:d2:84: ff:69:7c:72:b1:33:e2:24:8e:1a:fe:5c:2f:bb:54: 81:d2:c8:2d:5a:65:76:95:19:f2:e3:65:90:74:56: 16:1b:0b:31:43:9c:24:d3:0a:96:b4:b3:a6:bf:1e: 2c:15:c0:4d:a2:74:00:9a:be:ba:66:b5:66:08:d9: b2:37:25:81:80:a3:1f:71:fe:59:bb:ad:4b:97:9a: 91:6b:a7:84:10:e0:74:1a:73:75:80:ad:fa:c3:d9: 96:89:91:65:21:47:b6:86:a5:3e:26:ac:88:c7:b2: 43:04:fb:c6:5b:73:1a:c9:d7:f8:6b:32:f5:dc:10: db:bd:39:c7:00:27:8a:d4:38:75:64:26:2d:ed:11: de:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:23:6E:CD:01:01:2E:A9:1B:30:ED:E5:D5:BD:F4:99:CC:C0:F4:6C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vyNuzQEBLqkbMO3l1b30mczA9Gw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.4.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:33:ce:7a:6f:a4:4c:55:39:31:30:70:7f:e4:1a:e4:b4:1d: 27:27:79:78:74:4a:4f:48:c1:7c:68:d6:81:f5:e8:05:86:92: 11:a9:e5:ca:fe:91:c1:17:63:6f:67:4d:a9:e0:e3:cd:e2:0e: ee:22:ae:48:dd:56:5e:07:7f:3f:f2:8d:12:17:3c:26:5f:7f: c4:02:6a:cb:0c:cf:8e:94:50:13:c5:08:fc:1d:59:ea:6f:f0: 95:c3:ed:99:43:56:a2:76:64:9d:3f:67:d9:e7:f5:d0:bc:e5: 2a:87:c9:ee:a5:59:e5:5d:1f:0b:ff:88:06:2d:ae:8e:3e:2d: 2a:2b:f4:9b:4c:9c:6e:86:4b:34:55:47:4b:df:54:2c:48:44: eb:ac:bc:18:85:02:f8:df:14:f9:57:d6:4f:0f:55:2a:86:cb: 26:21:3d:a0:36:91:96:cc:31:7c:4e:53:8d:a1:25:72:76:a5: 6b:68:5b:a8:24:ee:a5:9b:1e:d1:25:89:59:a5:ff:69:41:eb: 6a:e6:6b:3e:ad:79:ea:1f:c7:7f:34:78:23:81:2a:7a:ed:62: 60:c1:72:1d:05:b4:97:a8:14:86:71:a6:60:b8:21:58:a7:fe: ce:26:a9:a2:da:ca:ac:28:b4:46:11:b0:e8:fb:78:30:54:c0: f0:30:3d:10 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDQ3NDVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEJGMjM2RUNEMDEwMTJF QTkxQjMwRURFNUQ1QkRGNDk5Q0NDMEY0NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDoRqpScuro87ovkX1aMPhHO/Gg3bo7lQNG4ylM8BaKk/d+p2V YeKO66Cw1UxpTmR7ORqqKnx0EF1R+zYjpVnF4GQPwVpKuZCRrtEjQyo+5+wL60Fd KyT2g7Iy7/iM99dgHYAc3fMxSuNCivxlhd8gO8WYGyPShP9pfHKxM+Ikjhr+XC+7 VIHSyC1aZXaVGfLjZZB0VhYbCzFDnCTTCpa0s6a/HiwVwE2idACavrpmtWYI2bI3 JYGAox9x/lm7rUuXmpFrp4QQ4HQac3WArfrD2ZaJkWUhR7aGpT4mrIjHskME+8Zb cxrJ1/hrMvXcENu9OccAJ4rUOHVkJi3tEd6dAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUvyNuzQEBLqkbMO3l1b30mczA9GwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3Z5TnV6UUVCTHFrYk1PM2wxYjMwbWN6QTlHdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTAQwDQYJKoZIhvcNAQELBQADggEBAGszznpvpExVOTEwcH/kGuS0HScn eXh0Sk9IwXxo1oH16AWGkhGp5cr+kcEXY29nTang483iDu4irkjdVl4Hfz/yjRIX PCZff8QCassMz46UUBPFCPwdWepv8JXD7ZlDVqJ2ZJ0/Z9nn9dC85SqHye6lWeVd Hwv/iAYtro4+LSor9JtMnG6GSzRVR0vfVCxIROusvBiFAvjfFPlX1k8PVSqGyyYh PaA2kZbMMXxOU42hJXJ2pWtoW6gk7qWbHtEliVml/2lB62rmaz6teeofx380eCOB KnrtYmDBch0FtJeoFIZxpmC4IVin/s4mqaLayqwotEYRsOj7eDBUwPAwPRA= -----END CERTIFICATE-----Generated at Sun Jun 22 05:26:33 2025 by rpki-client