$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DKIaSlOtKnDumanMLwFp5wSkp9c.roa File: DKIaSlOtKnDumanMLwFp5wSkp9c.roa (raw, json) Hash identifier: ytgR82UJEo4DuZJqFgzrCLcNpoxzfwmAxEi3srThUYQ= Subject key identifier: 0C:A2:1A:4A:53:AD:2A:70:EE:99:A9:CC:2F:01:69:E7:04:A4:A7:D7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E40 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DKIaSlOtKnDumanMLwFp5wSkp9c.roa Signing time: Sun 01 Jun 2025 01:30:17 +0000 ROA not before: Sun 01 Jun 2025 01:30:17 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.79.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 23:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3648 (0xe40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 1 01:30:17 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=0CA21A4A53AD2A70EE99A9CC2F0169E704A4A7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:83:9a:de:c7:20:29:e6:76:fa:ae:e1:57:77: 3a:9e:36:62:cb:ea:31:34:35:ef:fd:c0:d6:a6:f0: 26:20:c2:d2:78:2b:55:04:59:8e:95:b1:83:60:cc: fc:c7:ed:ab:a6:9d:5e:b6:9f:66:68:5a:e3:3e:9b: 4f:d6:ca:bf:4b:c9:65:d3:e1:d5:ee:83:85:ce:36: 0b:75:1b:b3:5d:03:27:86:cb:f1:5c:f3:5e:fc:2f: be:28:ce:2b:a9:82:53:82:55:73:6f:78:82:16:2c: 4a:66:5a:19:2c:bc:28:fe:04:58:79:63:03:40:ed: 5a:f1:86:41:2e:05:09:7b:54:75:54:63:9c:99:a9: f3:63:6c:63:d1:f3:34:45:5f:d5:a9:dd:b7:93:3c: a9:c3:a1:ea:64:61:7d:c6:92:73:af:c9:22:b4:7a: 5e:41:f9:9f:0d:20:34:3d:1c:59:4f:e7:a2:27:79: 4a:b0:36:f0:02:82:1b:16:d5:a7:41:8a:ca:df:96: 84:49:fd:26:a9:84:88:a9:1b:b7:e2:48:59:b7:9b: 2b:84:6c:13:8d:78:05:14:2c:df:36:1c:1c:32:2b: 77:9b:a0:ac:37:72:6b:28:ee:4f:b5:08:9e:4c:69: a0:c9:1b:27:3b:08:b2:4e:cc:64:f5:1a:2a:08:87: 09:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A2:1A:4A:53:AD:2A:70:EE:99:A9:CC:2F:01:69:E7:04:A4:A7:D7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DKIaSlOtKnDumanMLwFp5wSkp9c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.224.0/19 Signature Algorithm: sha256WithRSAEncryption 34:b6:b2:41:d6:0e:cd:bf:bc:26:cd:52:37:71:0b:b0:57:a2: 6b:b2:95:e2:bb:39:fb:08:67:2f:5d:1f:1d:6c:9e:1b:ff:07: 9f:d2:68:74:10:ad:f6:3b:7c:65:5e:52:ad:a9:ac:c8:60:49: 69:77:5f:cf:9f:60:a0:34:5b:68:57:e5:23:a5:1b:c5:cf:ca: 2c:4f:6e:ab:58:55:54:b6:a9:0f:08:a2:e0:33:be:d4:09:8b: ed:fd:6a:c2:5c:f8:3a:98:80:09:59:28:e7:85:68:f5:34:3a: 1b:a4:ec:1b:21:79:24:1d:af:ee:cb:f2:75:52:45:f0:3b:60: 15:2a:fc:26:eb:ed:19:73:d4:df:93:59:66:13:70:54:13:2d: 42:67:01:bf:e3:7e:14:6a:b7:61:27:ab:01:38:69:12:38:e1: 96:8a:b5:53:3f:ba:e5:41:bd:38:cf:97:6c:29:f1:ec:2a:0e: 70:54:6c:cb:12:a5:5a:6e:16:41:76:53:b6:69:5d:d6:96:d6: 0f:d9:4f:e6:79:91:7d:14:eb:d6:11:a1:65:83:90:03:ab:c3: cb:06:eb:a7:30:18:aa:dc:73:f9:2c:f6:ca:74:a3:4c:a1:a1: 2f:e2:e0:aa:32:0f:6a:31:f7:54:d6:23:00:6e:2a:86:4f:3c: 7b:83:38:99 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MDEw MTMwMTdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDBDQTIxQTRBNTNBRDJB NzBFRTk5QTlDQzJGMDE2OUU3MDRBNEE3RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsg5rexyAp5nb6ruFXdzqeNmLL6jE0Ne/9wNam8CYgwtJ4K1UE WY6VsYNgzPzH7aumnV62n2ZoWuM+m0/Wyr9LyWXT4dXug4XONgt1G7NdAyeGy/Fc 8178L74oziupglOCVXNveIIWLEpmWhksvCj+BFh5YwNA7VrxhkEuBQl7VHVUY5yZ qfNjbGPR8zRFX9Wp3beTPKnDoepkYX3GknOvySK0el5B+Z8NIDQ9HFlP56IneUqw NvACghsW1adBisrfloRJ/SaphIipG7fiSFm3myuEbBONeAUULN82HBwyK3eboKw3 cmso7k+1CJ5MaaDJGyc7CLJOzGT1GioIhwmHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDKIaSlOtKnDumanMLwFp5wSkp9cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0RLSWFTbE90S25EdW1hbk1Md0ZwNXdTa3A5Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBT+AwDQYJKoZIhvcNAQELBQADggEBADS2skHWDs2/vCbNUjdxC7BXomuy leK7OfsIZy9dHx1snhv/B5/SaHQQrfY7fGVeUq2prMhgSWl3X8+fYKA0W2hX5SOl G8XPyixPbqtYVVS2qQ8IouAzvtQJi+39asJc+DqYgAlZKOeFaPU0Ohuk7BsheSQd r+7L8nVSRfA7YBUq/Cbr7Rlz1N+TWWYTcFQTLUJnAb/jfhRqt2EnqwE4aRI44ZaK tVM/uuVBvTjPl2wp8ewqDnBUbMsSpVpuFkF2U7ZpXdaW1g/ZT+Z5kX0U69YRoWWD kAOrw8sG66cwGKrcc/ks9sp0o0yhoS/i4KoyD2ox91TWIwBuKoZPPHuDOJk= -----END CERTIFICATE-----Generated at Wed Jun 4 01:19:14 2025 by rpki-client