$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2H61p8sfIFOzrl-cUJDbGiz6Yfw.roa File: 2H61p8sfIFOzrl-cUJDbGiz6Yfw.roa (raw, json) Hash identifier: km6aN0ilCX7PMf03u9WlmlpJuTUQYQtl4Wb/flmldQ0= Subject key identifier: D8:7E:B5:A7:CB:1F:20:53:B3:AE:5F:9C:50:90:DB:1A:2C:FA:61:FC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F12 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2H61p8sfIFOzrl-cUJDbGiz6Yfw.roa Signing time: Tue 10 Jun 2025 11:20:14 +0000 ROA not before: Tue 10 Jun 2025 11:20:14 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.110.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3858 (0xf12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:20:14 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=D87EB5A7CB1F2053B3AE5F9C5090DB1A2CFA61FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:cb:1d:d8:9e:7b:79:a1:08:28:ef:d3:00: 78:46:12:7f:86:25:f0:42:17:45:69:10:3f:dc:c5: b9:78:dc:d7:67:9b:3e:0a:a6:f8:fa:56:d2:8f:96: 7b:bf:b0:40:4e:c4:6c:99:64:1a:cc:35:a1:27:fe: a8:c2:32:4a:ca:a3:78:b9:ea:ad:23:54:24:d2:1e: 9f:32:e6:2f:39:fa:58:30:d8:97:6a:ec:a8:52:e1: 84:96:2f:05:cf:fb:ee:2c:10:4e:f8:c1:20:c9:f3: 4c:91:ef:61:2d:42:f7:80:21:47:a6:71:c8:fb:d5: 20:51:96:c8:42:24:20:23:46:e2:6a:6e:f0:ef:92: 25:c3:2c:43:b5:9f:c2:5a:80:55:b1:ee:e8:97:cf: dd:a8:1b:65:52:2e:4b:96:bf:68:6b:f2:b6:4f:f8: 3f:70:b5:2e:99:17:93:7d:ff:a7:10:58:bf:a7:81: a9:6a:27:63:df:59:7f:d0:61:56:e8:78:e0:04:80: 7a:d0:fb:d2:d4:11:7d:18:6c:5b:fc:17:35:a9:28: 88:c0:e2:5b:cd:8e:0a:e2:50:17:39:96:13:11:fa: 80:d2:c2:06:b6:85:7e:61:b6:40:59:6d:74:77:f8: 78:13:4c:ec:5d:43:50:e7:69:15:76:87:3c:72:6b: 65:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7E:B5:A7:CB:1F:20:53:B3:AE:5F:9C:50:90:DB:1A:2C:FA:61:FC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2H61p8sfIFOzrl-cUJDbGiz6Yfw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.110.32.0/19 Signature Algorithm: sha256WithRSAEncryption 1e:5e:a3:d9:2e:a8:7a:3b:88:ad:bb:4c:35:2d:c6:52:4f:5d: 39:ab:ac:df:ad:db:f4:d7:7b:f3:3a:12:6e:27:ce:f3:38:9a: a0:26:cc:15:84:a4:b4:04:dc:4d:5d:4e:4b:93:98:ac:e3:ba: 03:0c:90:14:d9:99:93:99:2e:aa:66:1c:2d:c7:31:c0:21:a3: 8e:69:80:80:90:dd:84:d1:20:b9:b2:42:ee:6a:ee:dc:77:7b: a4:ec:8f:08:70:1d:36:34:5a:5c:c9:2c:ba:de:74:ca:8d:91: 22:ea:ac:40:86:3d:9b:19:75:1a:b8:6c:95:45:39:7c:b4:5f: 93:11:26:b9:e5:84:72:68:cb:5c:7f:86:3f:06:fb:3d:37:87: 0a:70:5f:86:9b:2f:60:0f:47:d8:0b:55:5b:f7:a5:13:fe:7c: 5b:80:f8:4d:8d:14:d0:1b:09:40:37:ef:82:e9:fe:06:0a:e9: 09:66:a5:ff:e7:c1:9e:a7:90:32:08:db:31:d1:2a:a7:0b:ff: dd:d8:79:c7:0c:0e:45:de:f1:a2:b6:4b:ca:9e:e3:ad:b2:10: bc:8a:91:3e:99:7e:d4:af:4b:dc:c9:ca:4f:b6:a0:e8:a4:8b: 64:68:79:00:6d:ec:72:6f:e3:05:5f:fb:14:2f:3b:aa:71:f4: 69:df:a9:25 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTIwMTRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEQ4N0VCNUE3Q0IxRjIw NTNCM0FFNUY5QzUwOTBEQjFBMkNGQTYxRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCud8sd2J57eaEIKO/TAHhGEn+GJfBCF0VpED/cxbl43Ndnmz4K pvj6VtKPlnu/sEBOxGyZZBrMNaEn/qjCMkrKo3i56q0jVCTSHp8y5i85+lgw2Jdq 7KhS4YSWLwXP++4sEE74wSDJ80yR72EtQveAIUemccj71SBRlshCJCAjRuJqbvDv kiXDLEO1n8JagFWx7uiXz92oG2VSLkuWv2hr8rZP+D9wtS6ZF5N9/6cQWL+ngalq J2PfWX/QYVboeOAEgHrQ+9LUEX0YbFv8FzWpKIjA4lvNjgriUBc5lhMR+oDSwga2 hX5htkBZbXR3+HgTTOxdQ1DnaRV2hzxya2UpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2H61p8sfIFOzrl+cUJDbGiz6YfwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJINjFwOHNmSUZPenJsLWNVSkRiR2l6Nllmdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUxbiAwDQYJKoZIhvcNAQELBQADggEBAB5eo9kuqHo7iK27TDUtxlJPXTmr rN+t2/TXe/M6Em4nzvM4mqAmzBWEpLQE3E1dTkuTmKzjugMMkBTZmZOZLqpmHC3H McAho45pgICQ3YTRILmyQu5q7tx3e6TsjwhwHTY0WlzJLLredMqNkSLqrECGPZsZ dRq4bJVFOXy0X5MRJrnlhHJoy1x/hj8G+z03hwpwX4abL2APR9gLVVv3pRP+fFuA +E2NFNAbCUA374Lp/gYK6Qlmpf/nwZ6nkDII2zHRKqcL/93YeccMDkXe8aK2S8qe 462yELyKkT6ZftSvS9zJyk+2oOiki2RoeQBt7HJv4wVf+xQvO6px9GnfqSU= -----END CERTIFICATE-----Generated at Sun Jun 22 06:47:08 2025 by rpki-client