$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ySsy9kDr9p1_KezM6YyHnZ5H__w.roa File: ySsy9kDr9p1_KezM6YyHnZ5H__w.roa (raw, json) Hash identifier: qM+N0kwO+EEUEjueCbPNDzmczkvxs7hfHBfjytpDY+E= Subject key identifier: C9:2B:32:F6:40:EB:F6:9D:7F:29:EC:CC:E9:8C:87:9D:9E:47:FF:FC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F2A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ySsy9kDr9p1_KezM6YyHnZ5H__w.roa Signing time: Tue 10 Jun 2025 11:24:28 +0000 ROA not before: Tue 10 Jun 2025 11:24:28 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.67.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3882 (0xf2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:28 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=C92B32F640EBF69D7F29ECCCE98C879D9E47FFFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:d8:c9:0c:e7:e4:12:e1:89:22:e9:a0:55: d9:5b:e7:ab:78:05:cd:df:ce:a6:11:d1:e1:ba:b4: 39:cc:f5:b9:00:4b:d7:bf:0f:f3:19:b1:45:75:c7: 21:4e:26:3b:65:aa:f5:0b:18:e7:69:05:67:ac:58: e3:f8:3b:98:a3:57:90:95:50:bc:38:f7:79:ab:8e: 0c:e2:35:23:45:f6:74:95:a4:c3:8c:22:7e:9a:3e: 4c:7d:1f:0f:7b:8e:68:5b:31:c3:5c:55:bd:b0:52: 52:46:17:d4:4d:ce:79:d2:12:fb:a1:51:c4:0c:ef: d0:b7:48:b7:36:0d:65:f1:bb:86:39:f8:09:f8:6a: f7:eb:2a:d3:5a:54:5f:b2:ab:bd:76:0a:98:22:b2: 0d:a5:70:ba:41:87:e3:1b:e7:f7:d7:7d:b7:7f:47: c8:b7:e3:99:0e:61:8a:37:72:a4:f6:92:a0:c1:db: f8:b4:41:9f:2b:bf:70:60:f1:e6:44:b0:9a:31:f4: 70:81:e2:57:bc:b1:10:e4:14:57:76:f6:14:ec:f9: 6b:07:4c:15:ed:50:14:e3:aa:6a:7c:86:ee:ca:a7: 35:a7:76:05:29:f8:60:ef:58:ee:53:cb:d2:b8:77: 1c:f2:25:5c:96:15:26:76:f3:b7:9b:b8:3a:a8:b3: 30:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2B:32:F6:40:EB:F6:9D:7F:29:EC:CC:E9:8C:87:9D:9E:47:FF:FC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ySsy9kDr9p1_KezM6YyHnZ5H__w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.237.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:e2:50:76:ba:11:22:01:12:d1:08:ee:d7:0c:d9:eb:e7:5e: 94:5f:ef:10:44:d8:7f:9e:e5:77:51:c6:ac:e4:2e:de:06:ce: cd:f7:81:48:2a:a0:79:7c:7e:44:fc:22:0e:4a:b7:f6:21:9b: 22:ab:39:9b:d9:a5:df:c5:f5:24:d9:c9:fd:16:a9:5c:fb:24: 33:0d:59:11:6c:c7:36:3d:17:ec:8a:40:e6:b2:cc:f1:a9:5a: 25:54:8f:90:e1:0a:4a:06:10:49:b4:94:53:5b:d5:b9:72:19: ac:78:71:3e:fc:d1:ef:94:13:50:0a:be:02:49:49:c3:d9:38: ba:99:54:6f:9b:24:67:da:6e:32:ce:0a:26:c8:0d:ba:f1:2b: 9a:42:d0:ed:89:cf:0f:6a:cf:30:ec:26:83:39:90:b7:80:a2: 2f:85:dc:c3:b2:ca:96:22:73:74:14:c8:77:8f:ca:d7:57:75: 9e:73:14:96:4b:7a:ce:f1:ed:0b:7c:d5:44:fc:7f:b0:62:e4: 64:da:aa:62:fb:de:bc:5c:6d:c8:30:46:f9:3d:0d:21:da:6d: 68:52:4b:0a:74:31:18:19:ec:05:d0:75:85:de:c5:82:b1:18: 27:cc:f0:34:f5:06:15:0e:ea:59:58:da:19:1a:c3:e1:37:33: e0:f5:29:0c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MjhaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEM5MkIzMkY2NDBFQkY2 OUQ3RjI5RUNDQ0U5OEM4NzlEOUU0N0ZGRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDABdjJDOfkEuGJIumgVdlb56t4Bc3fzqYR0eG6tDnM9bkAS9e/ D/MZsUV1xyFOJjtlqvULGOdpBWesWOP4O5ijV5CVULw493mrjgziNSNF9nSVpMOM In6aPkx9Hw97jmhbMcNcVb2wUlJGF9RNznnSEvuhUcQM79C3SLc2DWXxu4Y5+An4 avfrKtNaVF+yq712Cpgisg2lcLpBh+Mb5/fXfbd/R8i345kOYYo3cqT2kqDB2/i0 QZ8rv3Bg8eZEsJox9HCB4le8sRDkFFd29hTs+WsHTBXtUBTjqmp8hu7KpzWndgUp +GDvWO5Ty9K4dxzyJVyWFSZ287ebuDqoszAPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUySsy9kDr9p1/KezM6YyHnZ5H//wwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3lTc3k5a0RyOXAxX0tlek02WXlIblo1SF9fdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABQ+0wDQYJKoZIhvcNAQELBQADggEBAB7iUHa6ESIBEtEI7tcM2evnXpRf 7xBE2H+e5XdRxqzkLt4Gzs33gUgqoHl8fkT8Ig5Kt/YhmyKrOZvZpd/F9STZyf0W qVz7JDMNWRFsxzY9F+yKQOayzPGpWiVUj5DhCkoGEEm0lFNb1blyGax4cT780e+U E1AKvgJJScPZOLqZVG+bJGfabjLOCibIDbrxK5pC0O2Jzw9qzzDsJoM5kLeAoi+F 3MOyypYic3QUyHePytdXdZ5zFJZLes7x7Qt81UT8f7Bi5GTaqmL73rxcbcgwRvk9 DSHabWhSSwp0MRgZ7AXQdYXexYKxGCfM8DT1BhUO6llY2hkaw+E3M+D1KQw= -----END CERTIFICATE-----Generated at Sun Jun 22 03:55:39 2025 by rpki-client