$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9hRjO91e7VqpIL484e0O_N4cPEU.roa File: 9hRjO91e7VqpIL484e0O_N4cPEU.roa (raw, json) Hash identifier: rWhrpzPTOq5YQUVTFpDZMlhHoinVri/MBs67lWs0SjM= Subject key identifier: F6:14:63:3B:DD:5E:ED:5A:A9:20:BE:3C:E1:ED:0E:FC:DE:1C:3C:45 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EFE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9hRjO91e7VqpIL484e0O_N4cPEU.roa Signing time: Tue 10 Jun 2025 11:16:45 +0000 ROA not before: Tue 10 Jun 2025 11:16:45 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.106.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3838 (0xefe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:45 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=F614633BDD5EED5AA920BE3CE1ED0EFCDE1C3C45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:88:d1:ec:c2:b2:90:59:3e:d7:7c:bf:3c: 05:17:5f:28:79:69:a0:ea:8e:a5:d3:cb:1d:93:b7: f9:b0:5b:09:7c:b3:c2:0d:38:9e:d3:6a:a7:82:63: ce:c9:ca:06:9f:99:82:fa:af:27:e3:f7:6c:5e:ef: 7c:aa:9a:b9:de:fc:20:e7:0c:6b:7e:e7:2f:3a:c7: 7e:1e:6f:f1:65:23:5c:6d:42:aa:46:f4:fe:7f:37: e6:a6:cc:2b:01:a2:7a:1b:d6:85:52:6c:ab:56:45: 67:d1:39:a5:78:d6:47:a2:bc:03:81:ff:20:7e:7d: e0:13:c0:03:a9:2e:31:c8:1f:85:1f:bf:d3:e3:11: be:58:19:1c:c0:e4:c1:9d:d4:4f:e5:21:c3:b5:f8: 2a:38:15:14:7f:37:c4:25:fb:33:e1:ad:0b:2a:fb: 08:1e:8c:99:09:11:83:3c:bf:fa:de:c6:40:f5:9a: db:b9:1e:56:3c:71:fc:58:8c:e1:e9:98:f0:b6:e8: 33:0f:9f:0d:7b:12:da:e9:b1:a5:62:23:56:68:79: 04:b4:d6:ac:a0:5e:a4:bf:7a:3f:9b:4a:4a:5b:1b: 28:ad:7a:de:fd:19:ff:50:0d:86:f7:03:7d:0e:68: 4e:6a:3e:bc:7e:c5:b6:14:0c:7b:ed:96:6c:22:fa: 5a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:14:63:3B:DD:5E:ED:5A:A9:20:BE:3C:E1:ED:0E:FC:DE:1C:3C:45 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9hRjO91e7VqpIL484e0O_N4cPEU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.192.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:47:0a:7a:bc:7a:cd:76:12:57:2f:91:12:fd:ab:dd:bd:14: 64:32:17:20:01:e7:75:33:69:88:96:16:0a:fa:00:f7:f3:53: 88:fc:0c:93:9d:5a:d2:f1:09:15:7a:0f:7b:8e:9e:15:43:74: 9a:71:1b:7d:87:c4:34:f1:af:c8:b8:5e:32:3b:c7:cc:75:54: 8a:b4:2a:63:f2:10:fc:c1:6e:d2:9c:b7:8e:fc:c6:6c:1d:86: ac:00:0a:71:fd:69:88:28:e9:f4:2f:05:58:b1:e4:67:1f:96: 35:61:dd:e5:b0:5f:cf:5a:ca:de:91:99:fb:11:4e:13:0d:82: 13:21:2e:82:e8:43:cf:e3:a3:0e:d2:b2:22:4d:9d:b5:4e:d1: b6:25:37:63:44:c3:01:9d:4c:b8:44:68:98:b9:65:98:35:a9: 3b:48:e9:5f:54:ec:85:ab:a3:49:56:af:52:95:39:cf:7f:70: a1:43:58:de:b3:3c:db:ee:ae:6c:ee:1a:d3:e0:39:06:99:93: 74:4d:45:b1:8f:45:e0:c6:8f:41:c6:e9:c7:75:2c:26:3a:f7: 93:58:8d:95:cb:e6:ee:15:1c:f1:ff:46:cb:8a:80:97:9f:3f: 9f:97:6b:f4:bf:c3:2a:9e:15:2c:ef:54:4d:f2:25:ab:bc:9d: 20:08:d0:75 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDv4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NDVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEY2MTQ2MzNCREQ1RUVE NUFBOTIwQkUzQ0UxRUQwRUZDREUxQzNDNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0+IjR7MKykFk+13y/PAUXXyh5aaDqjqXTyx2Tt/mwWwl8s8IN OJ7TaqeCY87JygafmYL6ryfj92xe73yqmrne/CDnDGt+5y86x34eb/FlI1xtQqpG 9P5/N+amzCsBonob1oVSbKtWRWfROaV41keivAOB/yB+feATwAOpLjHIH4Ufv9Pj Eb5YGRzA5MGd1E/lIcO1+Co4FRR/N8Ql+zPhrQsq+wgejJkJEYM8v/rexkD1mtu5 HlY8cfxYjOHpmPC26DMPnw17EtrpsaViI1ZoeQS01qygXqS/ej+bSkpbGyitet79 Gf9QDYb3A30OaE5qPrx+xbYUDHvtlmwi+loRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU9hRjO91e7VqpIL484e0O/N4cPEUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzloUmpPOTFlN1ZxcElMNDg0ZTBPX040Y1BFVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExasAwDQYJKoZIhvcNAQELBQADggEBAJxHCnq8es12ElcvkRL9q929FGQy FyAB53UzaYiWFgr6APfzU4j8DJOdWtLxCRV6D3uOnhVDdJpxG32HxDTxr8i4XjI7 x8x1VIq0KmPyEPzBbtKct478xmwdhqwACnH9aYgo6fQvBVix5GcfljVh3eWwX89a yt6RmfsRThMNghMhLoLoQ8/jow7SsiJNnbVO0bYlN2NEwwGdTLhEaJi5ZZg1qTtI 6V9U7IWro0lWr1KVOc9/cKFDWN6zPNvurmzuGtPgOQaZk3RNRbGPReDGj0HG6cd1 LCY695NYjZXL5u4VHPH/RsuKgJefP5+Xa/S/wyqeFSzvVE3yJau8nSAI0HU= -----END CERTIFICATE-----Generated at Sun Jun 22 06:36:31 2025 by rpki-client