$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Fq-58d4vEkUt24gjM4HB2BpQXmI.roa File: Fq-58d4vEkUt24gjM4HB2BpQXmI.roa (raw, json) Hash identifier: KOMETpFE5/JWO+QqbAmlWqlZjEm8hKt5kWPjTSpeISM= Subject key identifier: 16:AF:B9:F1:DE:2F:12:45:2D:DB:88:23:33:81:C1:D8:1A:50:5E:62 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C5F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Fq-58d4vEkUt24gjM4HB2BpQXmI.roa Signing time: Tue 01 Apr 2025 02:00:27 +0000 ROA not before: Tue 01 Apr 2025 02:00:27 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:00:27 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=16AFB9F1DE2F12452DDB88233381C1D81A505E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cd:89:19:c9:ce:e0:57:03:6e:2f:9c:5d:12: 01:b4:d1:b3:f9:de:a7:88:ad:0b:e7:1d:c4:28:59: f7:8e:44:89:a5:3d:36:7d:c2:24:6a:d6:76:eb:04: 4e:b4:da:d2:23:36:41:d1:8e:c6:84:c6:1e:b9:2b: e6:f0:27:d6:55:79:8a:22:af:55:ac:b2:b0:e8:c0: 2a:c3:b2:51:56:4f:eb:bb:e7:06:d2:48:44:f7:18: 7b:c4:92:2b:8c:b2:0e:59:cd:7a:c2:e2:9d:59:04: a4:6b:87:52:b3:77:43:05:27:02:e3:b8:76:d8:e0: e1:6b:c0:43:d4:ba:d6:2e:5c:0f:92:c2:a1:13:ac: 9c:cc:32:86:91:f4:d4:28:94:7a:d7:67:e2:9c:81: 3e:57:2b:14:fe:87:1f:48:83:be:90:d7:e7:f2:9f: d4:c1:54:8d:2a:6c:64:c8:40:87:21:e2:0c:d3:a4: 8b:d7:4d:42:38:f7:c1:2d:b4:90:2f:02:60:89:fd: 6b:26:52:56:22:d6:4a:15:d9:c5:4f:40:c1:76:6e: fa:81:71:4f:b9:70:90:43:f0:8b:8c:94:4f:29:47: 00:33:27:52:d4:7c:e7:78:70:fa:c0:3c:c5:01:f5: d8:70:0e:5e:8f:2c:13:7c:82:e3:67:a3:c1:66:4f: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AF:B9:F1:DE:2F:12:45:2D:DB:88:23:33:81:C1:D8:1A:50:5E:62 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Fq-58d4vEkUt24gjM4HB2BpQXmI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.44.0/24 Signature Algorithm: sha256WithRSAEncryption a5:65:fd:17:7d:30:c9:28:f3:b8:93:23:c1:e2:ec:01:58:85: 7a:71:ae:ec:9a:56:51:98:9f:ad:fc:3e:0e:67:cd:9b:25:39: 24:4c:e6:f7:e5:7c:27:f2:38:2c:8b:ee:d5:f7:d9:d8:d4:bd: 3d:d8:8b:d7:73:06:c0:94:2c:8e:0d:de:64:fe:04:21:b2:64: fc:29:c5:5c:2a:9d:48:23:14:8a:19:e6:0c:22:d5:ea:91:af: 2b:94:b5:88:aa:0d:16:7c:8c:a8:39:06:ab:d9:4d:e5:e8:8c: 6c:d6:0f:35:7d:bc:53:f3:fe:d0:6d:cf:90:50:2b:26:f0:71: 8b:18:9f:ad:24:d9:7f:06:d9:c2:15:63:68:b3:62:0d:b7:db: a1:41:f6:cd:61:dc:c1:dd:95:f5:67:69:6a:a0:cb:e9:f1:96: ab:0f:87:68:0e:89:f8:50:94:03:8b:69:c5:2d:b7:b4:6c:da: f4:80:90:d1:f1:27:b0:ec:3b:37:8c:66:b5:47:86:f4:a2:06: 18:d1:71:89:8f:f2:b5:92:be:08:6a:bd:0c:a6:14:e7:cd:df: d5:2a:6a:db:5f:46:a6:5f:aa:23:4e:4e:5d:c0:23:ab:2a:81: b8:95:6b:84:f7:44:e0:89:3a:76:c2:a7:d1:5c:62:e6:f7:3d: 12:fe:b4:93 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAwMjdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE2QUZCOUYxREUyRjEy NDUyRERCODgyMzMzODFDMUQ4MUE1MDVFNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYzYkZyc7gVwNuL5xdEgG00bP53qeIrQvnHcQoWfeORImlPTZ9 wiRq1nbrBE602tIjNkHRjsaExh65K+bwJ9ZVeYoir1WssrDowCrDslFWT+u75wbS SET3GHvEkiuMsg5ZzXrC4p1ZBKRrh1Kzd0MFJwLjuHbY4OFrwEPUutYuXA+SwqET rJzMMoaR9NQolHrXZ+KcgT5XKxT+hx9Ig76Q1+fyn9TBVI0qbGTIQIch4gzTpIvX TUI498EttJAvAmCJ/WsmUlYi1koV2cVPQMF2bvqBcU+5cJBD8IuMlE8pRwAzJ1LU fOd4cPrAPMUB9dhwDl6PLBN8guNno8FmT/CvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFq+58d4vEkUt24gjM4HB2BpQXmIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0ZxLTU4ZDR2RWtVdDI0Z2pNNEhCMkJwUVhtSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaCwwDQYJKoZIhvcNAQELBQADggEBAKVl/Rd9MMko87iTI8Hi7AFYhXpx ruyaVlGYn638Pg5nzZslOSRM5vflfCfyOCyL7tX32djUvT3Yi9dzBsCULI4N3mT+ BCGyZPwpxVwqnUgjFIoZ5gwi1eqRryuUtYiqDRZ8jKg5BqvZTeXojGzWDzV9vFPz /tBtz5BQKybwcYsYn60k2X8G2cIVY2izYg2326FB9s1h3MHdlfVnaWqgy+nxlqsP h2gOifhQlAOLacUtt7Rs2vSAkNHxJ7DsOzeMZrVHhvSiBhjRcYmP8rWSvghqvQym FOfN39UqattfRqZfqiNOTl3AI6sqgbiVa4T3ROCJOnbCp9FcYub3PRL+tJM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:22:45 2025 by rpki-client