$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NAaF6efgxV9dvy1cu706GxN90GU.roa File: NAaF6efgxV9dvy1cu706GxN90GU.roa (raw, json) Hash identifier: spFbwTjtKtkr9DJGklsPM23KvarZuVVxo66UBikCXRk= Subject key identifier: 34:06:85:E9:E7:E0:C5:5F:5D:BF:2D:5C:BB:BD:3A:1B:13:7D:D0:65 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F4A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NAaF6efgxV9dvy1cu706GxN90GU.roa Signing time: Tue 10 Jun 2025 11:28:23 +0000 ROA not before: Tue 10 Jun 2025 11:28:23 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.102.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3914 (0xf4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:28:23 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=340685E9E7E0C55F5DBF2D5CBBBD3A1B137DD065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:9e:79:a8:6a:eb:a0:f5:d4:b5:6e:96:aa: 47:1b:de:89:91:15:36:9b:11:78:e4:f3:3d:39:d8: ed:7d:96:47:9e:f0:32:75:b9:b5:29:21:8d:fa:47: 09:a1:59:5a:10:92:4e:dc:d5:33:f0:1f:f8:bc:13: 4a:8a:dc:85:67:04:a3:57:4e:6b:d1:5f:3f:ea:4e: f8:4a:e9:dd:fc:e1:9e:9c:56:11:e2:08:ad:b8:0c: 08:de:a0:25:48:53:61:a2:86:7d:7d:17:f1:38:4f: 80:75:19:42:4f:d0:55:aa:70:2f:b2:96:f4:9a:5c: f0:f3:fb:99:b8:19:d4:32:16:2d:84:a2:03:a4:04: 31:4a:18:f5:4d:30:04:22:02:1a:60:7e:ea:fe:1b: d5:eb:6f:7c:0b:82:33:ec:6a:d9:60:23:14:63:c6: 23:e4:94:4d:04:d2:79:f3:f1:c3:12:c8:4d:83:55: 46:c1:95:24:2e:94:d0:06:44:38:c5:9b:16:25:61: 31:74:47:7f:72:93:5c:68:c3:40:f6:b0:1f:68:07: 87:38:f7:02:87:e2:11:e9:2e:3d:f8:c3:b3:9e:84: 7d:39:6c:ba:51:e8:f8:a2:fc:e4:1c:60:40:56:90: 3e:09:b6:b5:cd:14:a6:86:86:cd:ef:59:be:ce:7e: 9a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:06:85:E9:E7:E0:C5:5F:5D:BF:2D:5C:BB:BD:3A:1B:13:7D:D0:65 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NAaF6efgxV9dvy1cu706GxN90GU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.160.0/24 Signature Algorithm: sha256WithRSAEncryption d9:ab:56:d2:45:e6:c9:2c:43:16:c6:fe:f4:2b:c2:ad:fe:9b: 69:77:4e:0e:22:6f:0b:8a:eb:08:01:03:66:9f:d8:f0:18:05: 44:e5:05:57:e5:ce:40:50:d0:54:4d:a5:29:a1:20:3b:96:64: 52:3f:d3:b5:a9:81:a3:29:39:cc:0e:51:82:02:f7:22:59:68: 59:a4:ab:5a:40:3b:24:bc:20:e5:15:bc:d3:d1:b3:a3:60:13: 5d:57:d7:5c:88:1b:20:f8:3a:7b:3b:0b:a7:9d:f9:4c:1e:a5: c0:ed:11:6e:61:3b:1d:94:e7:6e:6a:fe:f7:e1:ac:c1:e5:f0: 90:b0:41:19:ff:fc:5d:c9:b1:06:3c:9b:95:f1:3a:98:9d:da: d0:f0:63:3b:d4:5e:f3:40:90:46:d9:43:57:c3:58:c9:e0:ab: 63:7f:71:76:5f:ac:7d:e5:e0:47:d1:88:68:8f:21:a9:36:e3: 81:1d:8c:be:99:74:b1:88:2f:bd:25:00:d3:ca:f5:28:d7:9a: 07:dc:25:ba:9c:a6:20:f4:a4:79:9b:5e:97:83:f3:ff:bd:d0: bb:2b:c1:03:1b:63:ec:88:dd:2f:65:31:04:6a:c9:8b:3d:41: 38:0e:14:4f:f0:3c:e1:87:a2:da:a3:b1:ed:fe:4c:00:64:b0: 85:c8:e1:b8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD0owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI4MjNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDM0MDY4NUU5RTdFMEM1 NUY1REJGMkQ1Q0JCQkQzQTFCMTM3REQwNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGyp55qGrroPXUtW6Wqkcb3omRFTabEXjk8z052O19lkee8DJ1 ubUpIY36RwmhWVoQkk7c1TPwH/i8E0qK3IVnBKNXTmvRXz/qTvhK6d384Z6cVhHi CK24DAjeoCVIU2Gihn19F/E4T4B1GUJP0FWqcC+ylvSaXPDz+5m4GdQyFi2EogOk BDFKGPVNMAQiAhpgfur+G9Xrb3wLgjPsatlgIxRjxiPklE0E0nnz8cMSyE2DVUbB lSQulNAGRDjFmxYlYTF0R39yk1xow0D2sB9oB4c49wKH4hHpLj34w7OehH05bLpR 6Pii/OQcYEBWkD4JtrXNFKaGhs3vWb7OfpplAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNAaF6efgxV9dvy1cu706GxN90GUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L05BYUY2ZWZneFY5ZHZ5MWN1NzA2R3hOOTBHVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxZqAwDQYJKoZIhvcNAQELBQADggEBANmrVtJF5sksQxbG/vQrwq3+m2l3 Tg4ibwuK6wgBA2af2PAYBUTlBVflzkBQ0FRNpSmhIDuWZFI/07WpgaMpOcwOUYIC 9yJZaFmkq1pAOyS8IOUVvNPRs6NgE11X11yIGyD4Ons7C6ed+UwepcDtEW5hOx2U 525q/vfhrMHl8JCwQRn//F3JsQY8m5XxOpid2tDwYzvUXvNAkEbZQ1fDWMngq2N/ cXZfrH3l4EfRiGiPIak244EdjL6ZdLGIL70lANPK9SjXmgfcJbqcpiD0pHmbXpeD 8/+90LsrwQMbY+yI3S9lMQRqyYs9QTgOFE/wPOGHotqjse3+TABksIXI4bg= -----END CERTIFICATE-----Generated at Sun Jun 22 00:32:32 2025 by rpki-client