$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y_8YEO6vHMDK0uZZmRUvLcqQaYo.roa File: y_8YEO6vHMDK0uZZmRUvLcqQaYo.roa (raw, json) Hash identifier: KCNT1gOTdTk7/HlCryc9nxO33MpeOSpGy+3KoOi2VA0= Subject key identifier: CB:FF:18:10:EE:AF:1C:C0:CA:D2:E6:59:99:15:2F:2D:CA:90:69:8A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EE2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y_8YEO6vHMDK0uZZmRUvLcqQaYo.roa Signing time: Tue 10 Jun 2025 11:12:31 +0000 ROA not before: Tue 10 Jun 2025 11:12:31 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3810 (0xee2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:12:31 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=CBFF1810EEAF1CC0CAD2E65999152F2DCA90698A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:a3:54:e8:57:7c:10:ed:88:22:c1:57:7d: 85:c5:27:ed:77:d6:e3:bf:c4:2a:fe:68:eb:a0:94: 03:72:af:55:b2:56:fb:bd:5d:1c:ef:fc:fa:8c:07: bb:ce:89:86:ce:0d:07:c2:c2:b6:71:a2:e9:33:95: 42:75:b6:70:fc:4e:39:71:b1:ae:18:a8:21:80:8b: 06:d6:e3:4a:b7:be:68:45:68:47:47:a7:77:f8:f4: 4c:c6:eb:30:c5:f4:ca:b9:47:c2:be:56:83:8a:7e: 7a:45:ff:0a:73:cd:2e:cc:ef:c9:1a:bf:f3:54:7b: aa:f2:00:cc:d6:d9:5d:31:dc:69:68:ba:c7:9b:10: 5b:6e:7e:65:89:19:63:38:ca:66:86:6e:e1:a2:3c: d7:e2:97:8f:40:94:52:19:35:72:db:82:6e:74:65: 5b:de:28:7c:20:dd:67:f7:5c:7a:b7:ae:c1:b4:d1: f3:2d:30:ae:83:9b:3c:e8:cd:15:85:c4:1b:33:e7: 76:49:eb:e9:f6:e1:f0:57:5f:bd:6f:e0:78:29:0f: 10:f3:23:74:75:75:bb:f2:f2:bf:ec:2c:1a:48:e9: d8:de:fa:f4:3c:0e:1e:ba:4f:81:45:e7:27:00:cd: fa:50:b8:5f:de:8c:91:ab:b7:7b:fe:bb:6e:ad:2e: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FF:18:10:EE:AF:1C:C0:CA:D2:E6:59:99:15:2F:2D:CA:90:69:8A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y_8YEO6vHMDK0uZZmRUvLcqQaYo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.66.0/23 Signature Algorithm: sha256WithRSAEncryption 30:e9:e6:6d:6c:70:d2:5c:7a:4c:b2:be:03:79:30:4c:e8:83: 38:ef:04:b9:49:2f:d8:83:63:42:8f:f9:a3:5e:27:97:1b:2c: 39:0e:db:3f:a0:e3:0d:21:e4:de:c6:97:b3:18:b5:cc:af:7a: 3d:33:97:c2:1b:b6:ae:c1:b3:46:c4:7b:2b:b2:99:81:41:30: 51:74:75:63:fa:81:5a:9d:81:98:38:66:ca:b5:b2:15:3c:23: 49:79:7e:c9:50:a1:12:b3:db:69:6f:b6:2a:45:b8:e7:b9:e6: 28:d4:31:fd:9d:c4:f4:79:1c:89:ed:1f:08:e7:11:66:63:c9: 0d:ad:08:a9:09:df:c5:9c:e7:53:df:e4:0e:78:56:ca:bc:d4: 4b:13:7d:0d:0e:ba:b7:37:33:cb:de:af:bd:e0:2b:9b:3b:a5: b8:74:55:48:63:96:cc:06:cc:eb:47:4b:7b:bf:c7:d6:9e:34: 36:ca:aa:59:1f:2d:ba:4e:f3:65:76:f4:9e:dc:ae:c5:84:d6: 51:32:d0:bd:06:46:6c:12:b3:a3:31:11:6d:0b:10:02:35:3e: 6f:f3:c8:81:b0:00:bc:1e:96:f4:06:01:4d:68:12:c9:7f:e3: 98:4c:21:db:dd:47:d4:e7:84:84:1f:d8:a3:6a:02:10:de:d8: b9:92:27:2d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDuIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTEyMzFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKENCRkYxODEwRUVBRjFD QzBDQUQyRTY1OTk5MTUyRjJEQ0E5MDY5OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMWKNU6Fd8EO2IIsFXfYXFJ+131uO/xCr+aOuglANyr1WyVvu9 XRzv/PqMB7vOiYbODQfCwrZxoukzlUJ1tnD8Tjlxsa4YqCGAiwbW40q3vmhFaEdH p3f49EzG6zDF9Mq5R8K+VoOKfnpF/wpzzS7M78kav/NUe6ryAMzW2V0x3Glouseb EFtufmWJGWM4ymaGbuGiPNfil49AlFIZNXLbgm50ZVveKHwg3Wf3XHq3rsG00fMt MK6DmzzozRWFxBsz53ZJ6+n24fBXX71v4HgpDxDzI3R1dbvy8r/sLBpI6dje+vQ8 Dh66T4FF5ycAzfpQuF/ejJGrt3v+u26tLgZ/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUy/8YEO6vHMDK0uZZmRUvLcqQaYowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3lfOFlFTzZ2SE1ESzB1WlptUlV2TGNxUWFZby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0kIwDQYJKoZIhvcNAQELBQADggEBADDp5m1scNJcekyyvgN5MEzogzjv BLlJL9iDY0KP+aNeJ5cbLDkO2z+g4w0h5N7Gl7MYtcyvej0zl8Ibtq7Bs0bEeyuy mYFBMFF0dWP6gVqdgZg4Zsq1shU8I0l5fslQoRKz22lvtipFuOe55ijUMf2dxPR5 HIntHwjnEWZjyQ2tCKkJ38Wc51Pf5A54Vsq81EsTfQ0Ourc3M8ver73gK5s7pbh0 VUhjlswGzOtHS3u/x9aeNDbKqlkfLbpO82V29J7crsWE1lEy0L0GRmwSs6MxEW0L EAI1Pm/zyIGwALwelvQGAU1oEsl/45hMIdvdR9TnhIQf2KNqAhDe2LmSJy0= -----END CERTIFICATE-----Generated at Sun Jun 22 00:47:20 2025 by rpki-client