$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0uwWvzOXQ_g2WrATNPX2oQKojkk.roa File: 0uwWvzOXQ_g2WrATNPX2oQKojkk.roa (raw, json) Hash identifier: mMkYBDsZU6SCZe1A1VHVzplp/aI/j9qH0+wh/X0Xtvg= Subject key identifier: D2:EC:16:BF:33:97:43:F8:36:5A:B0:13:34:F5:F6:A1:02:A8:8E:49 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EC6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0uwWvzOXQ_g2WrATNPX2oQKojkk.roa Signing time: Tue 10 Jun 2025 11:05:02 +0000 ROA not before: Tue 10 Jun 2025 11:05:02 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.103.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3782 (0xec6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:05:02 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=D2EC16BF339743F8365AB01334F5F6A102A88E49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:b3:49:7a:69:c0:25:1e:a6:03:4d:80:5a: b7:f1:46:7e:26:6a:0b:5d:4d:97:d0:e2:39:4a:5c: 9c:ae:dc:ac:06:72:2a:d0:f0:3a:1d:93:d2:6e:1a: 42:cf:24:08:72:9a:06:33:ad:8e:cd:2e:de:6a:6f: 93:c4:6d:57:b8:ba:72:14:2e:28:52:c7:4e:f3:26: 5d:1d:78:90:60:f3:be:fd:61:53:45:72:e9:06:60: 01:89:fb:17:ab:ce:52:17:98:c9:e4:76:dd:3a:92: d3:7f:87:73:18:2a:a2:ac:fb:43:b0:ea:9b:a8:99: 63:c3:90:18:b4:81:a6:43:78:32:38:d6:34:1a:63: f3:54:3e:89:69:a9:e5:78:be:a4:2b:29:00:38:44: c7:cb:09:56:05:03:16:17:86:4b:e2:c1:fc:47:86: ae:9a:9c:fd:b7:97:2f:67:84:8b:80:32:b3:fc:ba: e8:d4:da:3e:4a:4c:cd:ab:d9:a5:15:7a:96:16:e5: 9c:11:2d:24:f2:de:4d:77:5a:e4:11:e0:b3:69:29: 28:62:83:65:52:e7:93:6e:02:1f:10:a5:6c:4e:b2: 0c:71:70:30:5d:d6:06:33:8e:4c:9f:f7:bd:48:62: 10:6b:d4:1c:31:46:58:9b:32:2f:54:95:f0:6c:29: 2e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EC:16:BF:33:97:43:F8:36:5A:B0:13:34:F5:F6:A1:02:A8:8E:49 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0uwWvzOXQ_g2WrATNPX2oQKojkk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.103.24.0/22 Signature Algorithm: sha256WithRSAEncryption 55:97:ea:ef:72:2b:01:05:f4:e7:19:81:97:88:63:0e:48:6e: 68:33:e9:6a:43:58:d5:eb:46:f2:02:09:ae:70:e5:5a:23:aa: 4a:a4:85:ab:41:e9:49:ae:f4:95:25:5c:d0:71:bc:89:2d:fd: b0:ae:ed:23:7c:f4:d2:c4:e6:58:8f:47:3a:ce:03:a3:fc:90: ed:5e:06:e8:43:70:2c:95:45:87:f0:39:0d:50:59:7d:1e:fd: a9:a3:58:6c:51:4a:de:35:63:85:59:47:09:36:c3:9a:75:ba: fb:d5:3b:a6:0a:d3:81:4d:0d:9a:cc:97:9b:34:72:64:f1:26: 4a:fd:0c:0f:ac:25:3a:50:da:be:43:7c:1b:0e:bd:d4:3f:26: ac:07:09:ef:48:03:b1:0c:31:d8:34:30:b5:c9:1d:48:04:2e: 97:e8:e4:df:be:cf:77:27:0c:b6:32:ec:f1:3b:49:3d:1f:ef: 9f:a8:b9:dc:d8:b3:d3:bb:40:62:be:bc:90:58:0a:94:83:d6: 2d:98:12:89:ff:a7:77:c4:d4:f3:98:16:e5:55:0d:24:0e:b4: 7b:de:20:64:ab:00:40:77:86:ea:34:a6:47:a1:6d:ce:af:df: 31:7b:ec:92:1d:1e:12:52:b5:41:a2:85:89:f3:98:03:ca:ca: f3:37:29:3c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDsYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA1MDJaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEQyRUMxNkJGMzM5NzQz RjgzNjVBQjAxMzM0RjVGNkExMDJBODhFNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyNrNJemnAJR6mA02AWrfxRn4magtdTZfQ4jlKXJyu3KwGcirQ 8Dodk9JuGkLPJAhymgYzrY7NLt5qb5PEbVe4unIULihSx07zJl0deJBg8779YVNF cukGYAGJ+xerzlIXmMnkdt06ktN/h3MYKqKs+0Ow6puomWPDkBi0gaZDeDI41jQa Y/NUPolpqeV4vqQrKQA4RMfLCVYFAxYXhkviwfxHhq6anP23ly9nhIuAMrP8uujU 2j5KTM2r2aUVepYW5ZwRLSTy3k13WuQR4LNpKShig2VS55NuAh8QpWxOsgxxcDBd 1gYzjkyf971IYhBr1BwxRlibMi9UlfBsKS5VAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0uwWvzOXQ/g2WrATNPX2oQKojkkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzB1d1d2ek9YUV9nMldyQVROUFgyb1FLb2pray5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxZxgwDQYJKoZIhvcNAQELBQADggEBAFWX6u9yKwEF9OcZgZeIYw5Ibmgz 6WpDWNXrRvICCa5w5VojqkqkhatB6Umu9JUlXNBxvIkt/bCu7SN89NLE5liPRzrO A6P8kO1eBuhDcCyVRYfwOQ1QWX0e/amjWGxRSt41Y4VZRwk2w5p1uvvVO6YK04FN DZrMl5s0cmTxJkr9DA+sJTpQ2r5DfBsOvdQ/JqwHCe9IA7EMMdg0MLXJHUgELpfo 5N++z3cnDLYy7PE7ST0f75+oudzYs9O7QGK+vJBYCpSD1i2YEon/p3fE1POYFuVV DSQOtHveIGSrAEB3huo0pkehbc6v3zF77JIdHhJStUGihYnzmAPKyvM3KTw= -----END CERTIFICATE-----Generated at Sat Jun 21 22:38:53 2025 by rpki-client