$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lVwXllIzLC0kmXTeQIOk9UJHnGk.roa File: lVwXllIzLC0kmXTeQIOk9UJHnGk.roa (raw, json) Hash identifier: tX94Zw1fRgLTq0S0zMkrTgyZflwYdlS8ZfJyDRJVW2c= Subject key identifier: 95:5C:17:96:52:33:2C:2D:24:99:74:DE:40:83:A4:F5:42:47:9C:69 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E3C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lVwXllIzLC0kmXTeQIOk9UJHnGk.roa Signing time: Sun 01 Jun 2025 01:30:15 +0000 ROA not before: Sun 01 Jun 2025 01:30:15 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.75.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 22:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3644 (0xe3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 1 01:30:15 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=955C179652332C2D249974DE4083A4F542479C69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:37:ac:bd:64:3e:5e:d7:fe:5a:b9:f6:15: 53:e6:ad:87:6d:cc:4f:fd:43:1c:4c:26:af:75:ce: 9d:36:a6:ec:52:46:22:c6:b6:37:2e:41:eb:b9:17: 84:b2:2b:1b:79:54:cc:81:74:58:71:30:a1:9e:1a: 39:4c:4f:af:c3:13:ef:8f:de:76:29:ae:d2:bd:97: 87:4e:43:55:5f:91:c0:be:67:39:94:f0:c7:87:56: e6:fc:71:1e:42:39:cb:f0:b1:cf:b6:88:ad:93:c6: 59:e4:ea:e0:eb:2c:39:40:83:dd:9b:54:60:83:ec: 92:4c:f4:18:2f:f4:30:06:78:4f:8b:7a:fd:5b:49: c7:6c:3f:1c:57:15:32:cb:da:19:19:43:66:1c:f7: cd:dd:6d:60:be:a0:c8:04:b3:ca:f8:c2:5c:59:42: c5:a6:d0:eb:ad:92:9f:ed:77:dd:8e:65:2a:44:88: 78:e8:70:a7:7f:23:04:68:53:9f:85:ad:86:80:bf: 17:70:b2:05:dc:9b:b7:28:9d:68:ef:3d:c1:a1:b4: 37:51:60:40:46:54:57:53:f0:55:e5:23:74:62:8d: a0:17:c4:19:d7:b0:9e:e3:1e:2e:1a:ae:c0:19:c9: 23:38:9a:cf:a8:29:d6:9d:cd:57:1e:5f:46:5f:3a: 92:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5C:17:96:52:33:2C:2D:24:99:74:DE:40:83:A4:F5:42:47:9C:69 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lVwXllIzLC0kmXTeQIOk9UJHnGk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.64.0/19 Signature Algorithm: sha256WithRSAEncryption 87:19:41:ef:67:a0:aa:9a:d8:6e:40:12:e1:b7:5b:c2:04:ba: d3:66:a2:39:36:89:de:7e:0a:32:ed:60:b4:46:35:51:78:be: 76:03:66:98:87:0d:06:0a:16:f5:82:ab:f8:07:5f:0d:b5:56: 52:aa:0b:e6:fd:d9:87:b7:fe:da:df:5a:d9:88:51:88:ef:cb: f6:de:32:93:b0:31:a1:f4:35:1c:65:a3:a2:39:90:78:51:42: b0:e9:81:12:dd:21:a2:ee:e5:e3:cf:2e:96:5f:14:4c:08:45: 70:7a:9d:2c:99:47:1d:ad:ac:5d:19:71:db:23:c0:91:4e:1d: 2f:06:34:38:1a:7c:1f:3a:1a:f4:dd:78:84:0f:bd:0d:df:6d: 6a:ef:2d:d9:ce:2d:28:fc:ed:76:e9:49:01:5a:ca:23:61:28: 85:20:e1:16:bb:50:18:f0:6f:d0:76:60:47:95:d9:94:0e:6f: 20:c5:6d:15:7e:71:ab:5d:d4:9e:2d:fc:c0:4c:2f:c5:87:8c: 1d:9f:b1:f7:b3:c8:6e:e6:48:89:c8:16:c1:18:de:8f:f4:8b: ee:29:3d:46:2f:32:13:fc:84:34:e8:5b:72:75:0d:bd:ee:a2: a9:2d:56:5d:85:bc:74:53:fc:29:d8:6d:e3:31:a9:58:2e:41: 49:7e:a1:93 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDjwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MDEw MTMwMTVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDk1NUMxNzk2NTIzMzJD MkQyNDk5NzRERTQwODNBNEY1NDI0NzlDNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoszesvWQ+Xtf+Wrn2FVPmrYdtzE/9QxxMJq91zp02puxSRiLG tjcuQeu5F4SyKxt5VMyBdFhxMKGeGjlMT6/DE++P3nYprtK9l4dOQ1VfkcC+ZzmU 8MeHVub8cR5COcvwsc+2iK2Txlnk6uDrLDlAg92bVGCD7JJM9Bgv9DAGeE+Lev1b ScdsPxxXFTLL2hkZQ2Yc983dbWC+oMgEs8r4wlxZQsWm0Outkp/td92OZSpEiHjo cKd/IwRoU5+FrYaAvxdwsgXcm7conWjvPcGhtDdRYEBGVFdT8FXlI3RijaAXxBnX sJ7jHi4arsAZySM4ms+oKdadzVceX0ZfOpIRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlVwXllIzLC0kmXTeQIOk9UJHnGkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2xWd1hsbEl6TEMwa21YVGVRSU9rOVVKSG5Hay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBS0AwDQYJKoZIhvcNAQELBQADggEBAIcZQe9noKqa2G5AEuG3W8IEutNm ojk2id5+CjLtYLRGNVF4vnYDZpiHDQYKFvWCq/gHXw21VlKqC+b92Ye3/trfWtmI UYjvy/beMpOwMaH0NRxlo6I5kHhRQrDpgRLdIaLu5ePPLpZfFEwIRXB6nSyZRx2t rF0ZcdsjwJFOHS8GNDgafB86GvTdeIQPvQ3fbWrvLdnOLSj87XbpSQFayiNhKIUg 4Ra7UBjwb9B2YEeV2ZQObyDFbRV+catd1J4t/MBML8WHjB2fsfezyG7mSInIFsEY 3o/0i+4pPUYvMhP8hDToW3J1Db3uoqktVl2FvHRT/CnYbeMxqVguQUl+oZM= -----END CERTIFICATE-----Generated at Wed Jun 4 01:19:33 2025 by rpki-client