$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0CJvGoRSQaNK_p3Trt6jU6ypY8o.roa File: 0CJvGoRSQaNK_p3Trt6jU6ypY8o.roa (raw, json) Hash identifier: 7zzd1uDcQKRuLSaMJTAil2aRnNnGXK8mqFYgNSzQ5ww= Subject key identifier: D0:22:6F:1A:84:52:41:A3:4A:FE:9D:D3:AE:DE:A3:53:AC:A9:63:CA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F0C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0CJvGoRSQaNK_p3Trt6jU6ypY8o.roa Signing time: Tue 10 Jun 2025 11:16:54 +0000 ROA not before: Tue 10 Jun 2025 11:16:54 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.106.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 15:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3852 (0xf0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:54 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=D0226F1A845241A34AFE9DD3AEDEA353ACA963CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fd:b9:bf:a0:12:a6:d9:99:0c:a8:34:d5:6f: 3f:8c:72:74:04:68:02:19:b6:d7:36:5b:78:c1:de: 26:99:14:e9:5a:a7:01:50:0e:12:a0:ca:34:1d:f1: fe:60:21:a7:91:99:6d:19:77:d2:52:72:75:d1:76: 68:59:9d:da:91:a0:44:9f:04:fc:21:55:f3:b9:ce: 9e:76:a5:5d:bc:09:4a:4a:13:c8:d9:57:54:91:9e: e1:4c:07:40:b4:f0:01:ec:58:b9:9e:49:b0:41:be: 3e:d7:72:d4:2f:97:94:74:8f:79:b5:a7:85:8c:12: 76:6d:90:76:ce:ca:61:6e:79:a8:03:66:41:72:8c: cf:60:2a:77:4d:fa:c4:1c:ab:03:79:d8:dd:ae:bc: 69:c3:8d:b6:7a:aa:00:44:ec:10:df:5b:8c:d9:0c: d9:86:bc:e2:d0:ec:1d:d0:5d:be:ca:0b:9e:5e:2f: 78:b4:72:5a:64:75:e7:36:2f:e5:ec:e8:34:fb:f1: 52:14:1f:9d:f5:63:74:3d:11:36:41:2c:c5:c1:dd: d2:1b:45:36:9e:27:39:02:a7:3f:c6:46:8c:6e:84: 35:2e:4b:82:f0:cb:1c:5b:78:7b:44:bc:7d:d6:7c: d7:3d:ce:90:64:4d:4a:62:3b:bf:db:74:3e:c3:69: 9b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:22:6F:1A:84:52:41:A3:4A:FE:9D:D3:AE:DE:A3:53:AC:A9:63:CA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0CJvGoRSQaNK_p3Trt6jU6ypY8o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.92.0/23 Signature Algorithm: sha256WithRSAEncryption d2:3e:27:28:e0:94:e7:33:d5:77:4c:34:35:0b:7f:cc:61:c6: c3:4b:55:93:59:30:da:f2:8f:94:86:bb:3d:01:48:75:62:b8: d4:59:19:43:e6:68:c5:6c:f9:4d:56:c5:42:3b:57:fc:9f:65: 05:bd:0a:0d:29:f7:b2:03:93:0f:79:f7:04:c4:4e:68:cc:48: 4e:0d:52:31:2c:61:b8:b7:6f:fb:ca:eb:41:92:31:c6:4e:1d: 23:5a:4b:36:ac:ce:9d:2f:cb:5f:d5:9d:e7:f2:a7:4b:dd:ce: 4c:d8:9d:2f:d1:bb:63:8c:76:25:47:d1:dc:2b:ba:70:e7:13: ff:b6:c5:d6:94:48:cf:37:87:fe:26:40:e9:2c:b5:23:49:46: 92:e4:a9:7e:5a:a0:41:35:be:0a:30:9b:f0:b4:74:da:71:75: 3f:57:4a:3f:74:63:15:ae:3b:9b:2b:49:46:df:5c:d5:b1:58: 91:b3:95:62:bf:71:bc:d0:80:8a:16:ff:87:4a:5c:9c:7d:7e: 87:fa:9c:32:b0:65:2c:c7:52:3a:6f:5d:96:a2:a9:d8:62:19: 24:a7:5b:ec:e3:7b:7b:06:5a:41:0a:40:ef:cd:7e:32:32:e0: 6b:87:8f:db:66:cf:fe:68:50:dc:71:96:85:08:f3:08:e3:c7: 24:41:83:3a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDwwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NTRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEQwMjI2RjFBODQ1MjQx QTM0QUZFOUREM0FFREVBMzUzQUNBOTYzQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX/bm/oBKm2ZkMqDTVbz+McnQEaAIZttc2W3jB3iaZFOlapwFQ DhKgyjQd8f5gIaeRmW0Zd9JScnXRdmhZndqRoESfBPwhVfO5zp52pV28CUpKE8jZ V1SRnuFMB0C08AHsWLmeSbBBvj7XctQvl5R0j3m1p4WMEnZtkHbOymFueagDZkFy jM9gKndN+sQcqwN52N2uvGnDjbZ6qgBE7BDfW4zZDNmGvOLQ7B3QXb7KC55eL3i0 clpkdec2L+Xs6DT78VIUH531Y3Q9ETZBLMXB3dIbRTaeJzkCpz/GRoxuhDUuS4Lw yxxbeHtEvH3WfNc9zpBkTUpiO7/bdD7DaZsDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0CJvGoRSQaNK/p3Trt6jU6ypY8owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzBDSnZHb1JTUWFOS19wM1RydDZqVTZ5cFk4by5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExalwwDQYJKoZIhvcNAQELBQADggEBANI+JyjglOcz1XdMNDULf8xhxsNL VZNZMNryj5SGuz0BSHViuNRZGUPmaMVs+U1WxUI7V/yfZQW9Cg0p97IDkw959wTE TmjMSE4NUjEsYbi3b/vK60GSMcZOHSNaSzaszp0vy1/Vnefyp0vdzkzYnS/Ru2OM diVH0dwrunDnE/+2xdaUSM83h/4mQOkstSNJRpLkqX5aoEE1vgowm/C0dNpxdT9X Sj90YxWuO5srSUbfXNWxWJGzlWK/cbzQgIoW/4dKXJx9fof6nDKwZSzHUjpvXZai qdhiGSSnW+zje3sGWkEKQO/NfjIy4GuHj9tmz/5oUNxxloUI8wjjxyRBgzo= -----END CERTIFICATE-----Generated at Sat Jun 21 17:33:24 2025 by rpki-client