$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/w83ahM4WgDtra9nZyLElQ0Xq6iw.roa File: w83ahM4WgDtra9nZyLElQ0Xq6iw.roa (raw, json) Hash identifier: qylqlruBVCHyu+ZE9WbZbTleG+hxvA/QBt8jSSgbEIM= Subject key identifier: C3:CD:DA:84:CE:16:80:3B:6B:6B:D9:D9:C8:B1:25:43:45:EA:EA:2C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EF4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w83ahM4WgDtra9nZyLElQ0Xq6iw.roa Signing time: Tue 10 Jun 2025 11:12:41 +0000 ROA not before: Tue 10 Jun 2025 11:12:41 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3828 (0xef4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:12:41 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=C3CDDA84CE16803B6B6BD9D9C8B1254345EAEA2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:29:b8:27:97:01:42:17:81:f5:8b:03:bb: 4c:36:d2:a4:49:a4:13:43:14:38:70:b8:64:53:00: 01:c7:21:59:8f:c0:6c:ee:9f:26:1a:bd:7c:18:ec: a9:e6:3f:b9:39:db:c5:73:1d:ab:29:2b:86:3d:b2: bf:fe:d6:f3:85:b0:65:2a:ed:c1:fc:5c:d7:19:47: 88:2a:89:4d:97:a4:50:a6:4e:b0:f7:d0:1e:2b:9d: bb:f2:2e:50:f0:3b:87:1c:5e:de:08:f0:4b:28:85: 65:bd:6d:62:14:a5:80:be:11:1d:bd:f5:3b:df:8d: de:d6:c4:ae:24:17:34:75:72:83:a4:eb:bd:ca:cb: 5d:6f:52:3d:1e:39:f7:19:1b:00:f5:ae:28:f3:ed: a0:88:ae:0c:95:4a:22:76:6b:64:09:d7:f1:ba:4c: 51:94:92:05:ce:22:7d:30:c8:d4:c8:56:99:0e:22: 8b:b5:a8:c2:8c:82:22:ad:99:65:77:a4:5c:59:2e: 22:bc:81:72:22:89:3c:e0:d3:e2:f7:6e:e7:3d:e5: c3:4f:bf:38:2c:de:61:e3:a5:1d:30:27:76:ca:ca: d7:c3:c8:5b:35:a5:d1:e1:f8:32:30:a3:7b:0e:8e: 66:1b:c8:4a:82:ba:e4:e7:a7:0d:30:60:42:60:8e: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CD:DA:84:CE:16:80:3B:6B:6B:D9:D9:C8:B1:25:43:45:EA:EA:2C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w83ahM4WgDtra9nZyLElQ0Xq6iw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.92.0/22 Signature Algorithm: sha256WithRSAEncryption 79:ab:d1:1a:36:2d:32:0a:bb:82:74:ed:e0:1f:3b:63:2d:c5: 13:16:3d:53:71:d9:46:16:f5:fc:8e:9e:3b:84:8c:13:5a:1f: 52:ca:21:42:99:b8:36:34:2e:88:c5:88:19:ed:ff:66:97:b4: 34:75:e8:ff:4c:91:9e:df:fb:9b:98:bb:63:e6:2f:6a:cc:a0: 3f:02:c3:be:11:ab:34:a4:29:3b:32:58:58:38:17:99:85:31: df:6d:29:3a:cd:41:9a:98:24:ca:94:76:0e:d3:e8:8d:83:09: 85:46:ae:95:38:c7:2e:f8:94:43:30:c8:ec:50:93:25:ef:ff: 98:63:f8:eb:61:18:f4:63:2d:d0:03:06:6a:1f:e8:c9:5c:04: 42:93:93:36:e9:66:52:37:fb:c1:cf:ba:00:3c:ca:c7:c4:ab: d7:3f:7d:a7:6b:b2:85:a4:04:21:a2:d6:aa:b9:dd:9a:ad:8c: 0e:5a:fc:8c:3a:e1:78:f5:14:7e:6a:52:df:eb:09:15:3f:eb: 61:ec:4a:dc:3f:35:b6:a7:f5:ef:64:c9:15:8e:b0:63:7e:88: 25:f4:8b:61:ef:99:15:5e:49:b0:09:df:03:d0:f9:f7:d6:43: be:db:f5:e9:2d:e1:88:ef:c7:ce:86:1f:18:10:41:d9:33:3e: 8b:95:f9:74 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDvQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTEyNDFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEMzQ0REQTg0Q0UxNjgw M0I2QjZCRDlEOUM4QjEyNTQzNDVFQUVBMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKbym4J5cBQheB9YsDu0w20qRJpBNDFDhwuGRTAAHHIVmPwGzu nyYavXwY7KnmP7k528VzHaspK4Y9sr/+1vOFsGUq7cH8XNcZR4gqiU2XpFCmTrD3 0B4rnbvyLlDwO4ccXt4I8EsohWW9bWIUpYC+ER299Tvfjd7WxK4kFzR1coOk673K y11vUj0eOfcZGwD1rijz7aCIrgyVSiJ2a2QJ1/G6TFGUkgXOIn0wyNTIVpkOIou1 qMKMgiKtmWV3pFxZLiK8gXIiiTzg0+L3buc95cNPvzgs3mHjpR0wJ3bKytfDyFs1 pdHh+DIwo3sOjmYbyEqCuuTnpw0wYEJgjszrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUw83ahM4WgDtra9nZyLElQ0Xq6iwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3c4M2FoTTRXZ0R0cmE5blp5TEVsUTBYcTZpdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc0lwwDQYJKoZIhvcNAQELBQADggEBAHmr0Ro2LTIKu4J07eAfO2MtxRMW PVNx2UYW9fyOnjuEjBNaH1LKIUKZuDY0LojFiBnt/2aXtDR16P9MkZ7f+5uYu2Pm L2rMoD8Cw74RqzSkKTsyWFg4F5mFMd9tKTrNQZqYJMqUdg7T6I2DCYVGrpU4xy74 lEMwyOxQkyXv/5hj+OthGPRjLdADBmof6MlcBEKTkzbpZlI3+8HPugA8ysfEq9c/ fadrsoWkBCGi1qq53ZqtjA5a/Iw64Xj1FH5qUt/rCRU/62HsStw/Nban9e9kyRWO sGN+iCX0i2HvmRVeSbAJ3wPQ+ffWQ77b9ekt4Yjvx86GHxgQQdkzPouV+XQ= -----END CERTIFICATE-----Generated at Sun Jun 22 01:03:55 2025 by rpki-client