$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LdXestJoWh_-dIbF0JQzPxO2gzU.roa File: LdXestJoWh_-dIbF0JQzPxO2gzU.roa (raw, json) Hash identifier: ApLCHfwzsU3Dn5MtvJowf1ZFWjZz+YwIP7RAeSvF8R4= Subject key identifier: 2D:D5:DE:B2:D2:68:5A:1F:FE:74:86:C5:D0:94:33:3F:13:B6:83:35 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F59 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LdXestJoWh_-dIbF0JQzPxO2gzU.roa Signing time: Tue 10 Jun 2025 11:28:31 +0000 ROA not before: Tue 10 Jun 2025 11:28:31 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.105.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3929 (0xf59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:28:31 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=2DD5DEB2D2685A1FFE7486C5D094333F13B68335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:16:66:29:3a:4d:56:2a:7c:f8:ef:64:b4: 51:5b:76:c0:c9:4d:18:a5:95:b9:d1:dd:76:c4:c1: ad:84:a9:f6:2a:50:e2:1f:94:01:71:21:c0:40:60: 58:ec:23:ac:9b:24:9c:55:0f:80:bd:22:98:cf:dd: 72:65:4b:36:b1:20:a1:b9:f5:ad:01:dd:37:5e:d4: 65:4c:2e:1d:67:2a:04:7f:1b:2a:26:21:9c:92:81: ae:3a:eb:c8:a2:c5:bc:c5:61:41:13:fe:4e:91:6a: 6a:80:71:b8:b9:51:cf:0d:11:9d:42:7d:e7:fb:5f: ee:2c:ba:31:b8:02:07:f6:1b:54:94:da:2c:99:7e: 80:b4:6e:c9:f3:88:ff:c2:17:4b:7a:6d:65:9e:de: 44:dd:c8:be:cb:4b:17:7d:86:e1:6e:26:0d:b5:c2: d2:21:0c:fc:08:32:95:5b:ed:5a:8b:4b:7f:b1:1a: 28:17:8a:c0:e6:a3:bd:0c:1d:2c:26:85:b5:9e:72: a3:f5:18:f3:11:93:c7:01:d3:a0:b0:ca:69:e5:39: 38:a0:88:b0:94:1e:38:fd:51:6f:cf:51:3d:34:00: 3f:17:c7:64:57:64:3c:ae:de:63:d4:d6:1a:6d:9c: cc:6c:01:59:04:ba:89:d3:12:d7:97:33:7d:74:29: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D5:DE:B2:D2:68:5A:1F:FE:74:86:C5:D0:94:33:3F:13:B6:83:35 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LdXestJoWh_-dIbF0JQzPxO2gzU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.81.0/24 Signature Algorithm: sha256WithRSAEncryption 06:1a:59:0b:e9:f0:c8:ec:23:c0:f5:52:63:b6:76:b7:f6:1c: ea:f1:ed:e8:76:35:74:38:7d:7e:7d:e4:16:9a:b8:30:7b:dc: 22:33:19:36:f2:c7:fd:c9:31:18:8d:20:7d:8b:18:44:77:46: a3:9d:be:5c:2b:7c:dc:7f:0d:94:47:44:57:97:07:80:ab:77: 33:f9:ff:9d:bc:09:96:cc:e2:b4:56:a3:29:74:bd:c5:a1:a6: 0d:a5:96:05:c3:43:bf:5f:86:82:d4:7f:34:15:04:c3:47:ea: d5:2f:d3:95:de:c5:3a:95:09:92:2f:8a:bd:45:76:5f:ee:eb: 0e:b7:f4:9f:1d:57:00:96:2c:ec:38:28:49:22:9c:f0:73:10: 17:b5:9c:06:63:78:8a:1b:3a:ec:8a:eb:d0:01:16:1d:f9:a6: fa:38:14:b1:ba:a1:cd:b3:59:d3:66:a1:f7:88:d9:2d:6a:16: e7:7d:be:5d:31:0b:d2:18:9e:65:bb:86:4f:eb:06:7f:2a:13: 67:4a:62:1f:81:21:f9:ed:af:ba:09:9e:9f:72:91:f5:37:48: 83:6d:e2:2d:67:48:b2:6f:5f:60:ca:f1:0c:a2:e3:da:a8:73: 35:5e:0c:96:ef:d7:ff:bf:62:54:cd:30:6f:bd:66:ab:14:6f: 46:12:bb:50 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI4MzFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDJERDVERUIyRDI2ODVB MUZGRTc0ODZDNUQwOTQzMzNGMTNCNjgzMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1sxZmKTpNVip8+O9ktFFbdsDJTRillbnR3XbEwa2EqfYqUOIf lAFxIcBAYFjsI6ybJJxVD4C9IpjP3XJlSzaxIKG59a0B3Tde1GVMLh1nKgR/Gyom IZySga4668iixbzFYUET/k6RamqAcbi5Uc8NEZ1Cfef7X+4sujG4Agf2G1SU2iyZ foC0bsnziP/CF0t6bWWe3kTdyL7LSxd9huFuJg21wtIhDPwIMpVb7VqLS3+xGigX isDmo70MHSwmhbWecqP1GPMRk8cB06CwymnlOTigiLCUHjj9UW/PUT00AD8Xx2RX ZDyu3mPU1hptnMxsAVkEuonTEteXM310KfQvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULdXestJoWh/+dIbF0JQzPxO2gzUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xkWGVzdEpvV2hfLWRJYkYwSlF6UHhPMmd6VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaVEwDQYJKoZIhvcNAQELBQADggEBAAYaWQvp8MjsI8D1UmO2drf2HOrx 7eh2NXQ4fX595BaauDB73CIzGTbyx/3JMRiNIH2LGER3RqOdvlwrfNx/DZRHRFeX B4CrdzP5/528CZbM4rRWoyl0vcWhpg2llgXDQ79fhoLUfzQVBMNH6tUv05XexTqV CZIvir1Fdl/u6w639J8dVwCWLOw4KEkinPBzEBe1nAZjeIobOuyK69ABFh35pvo4 FLG6oc2zWdNmofeI2S1qFud9vl0xC9IYnmW7hk/rBn8qE2dKYh+BIfntr7oJnp9y kfU3SINt4i1nSLJvX2DK8Qyi49qoczVeDJbv1/+/YlTNMG+9ZqsUb0YSu1A= -----END CERTIFICATE-----Generated at Sun Jun 22 03:56:24 2025 by rpki-client