$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgyCHjBtiIKZGk6jAUToaD7-D5k.roa File: NgyCHjBtiIKZGk6jAUToaD7-D5k.roa (raw, json) Hash identifier: 3pTPZYpKAZra67d5inQV7vm/dJpzxnl1sme69YQWfAA= Subject key identifier: 36:0C:82:1E:30:6D:88:82:99:1A:4E:A3:01:44:E8:68:3E:FE:0F:99 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F5D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgyCHjBtiIKZGk6jAUToaD7-D5k.roa Signing time: Tue 10 Jun 2025 11:28:33 +0000 ROA not before: Tue 10 Jun 2025 11:28:33 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.102.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3933 (0xf5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:28:33 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=360C821E306D8882991A4EA30144E8683EFE0F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:c1:31:08:8a:2f:6f:f3:24:62:92:35:e6: de:b2:3a:e2:a1:c5:6a:d7:c2:64:c6:fe:f9:e0:0c: 0e:7e:89:65:6b:ff:f1:5c:1b:9f:47:97:a4:df:31: ca:2a:54:be:69:1b:12:f7:28:77:b3:e4:1f:eb:65: 0b:48:78:7a:05:e6:79:13:d4:18:5b:6d:10:dd:60: bf:06:49:36:d1:6c:6a:cb:aa:6a:f9:de:45:71:e4: bb:da:58:33:c2:32:10:1d:0b:03:8a:ec:79:b4:2a: ba:44:16:3c:52:fe:b4:2a:e2:b8:47:03:0e:fc:a2: 0b:0f:e3:04:85:0d:fa:2c:9a:99:a6:ef:1e:b0:5c: 5a:c0:9f:44:4c:6f:33:65:02:85:ff:12:6e:0f:be: 98:14:6d:a7:f1:96:fe:96:52:1f:be:18:09:17:c1: 46:8f:33:22:43:3a:a1:cc:bc:a7:9c:73:cc:be:76: 21:ac:dc:f2:3a:99:3f:c7:51:91:3f:e4:b9:fd:ee: 4c:8a:43:e6:cc:b6:28:5e:df:db:75:d0:a2:7b:d0: bf:ae:8f:80:36:f9:40:6f:89:6b:46:26:03:58:ec: 5e:8a:1e:1c:bd:87:d7:ef:bc:fe:3a:13:5f:5d:67: e5:1a:10:28:8a:59:55:d8:48:22:69:96:ac:4f:1c: 09:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0C:82:1E:30:6D:88:82:99:1A:4E:A3:01:44:E8:68:3E:FE:0F:99 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgyCHjBtiIKZGk6jAUToaD7-D5k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.152.0/24 Signature Algorithm: sha256WithRSAEncryption 08:18:b1:2d:ca:f2:51:8b:d0:48:85:92:45:9b:49:1c:38:8b: 6d:0e:c9:a5:14:ac:26:7d:fd:8b:0f:bf:d8:36:80:9b:eb:39: 9e:96:f6:64:b3:9b:61:57:c6:65:ad:30:dc:c6:22:ec:53:e6: f0:9b:d2:5b:e9:8e:03:b4:a1:b1:2c:a7:89:83:a1:dc:fa:9f: 74:64:2a:0f:ee:6d:e0:76:77:cb:51:3d:7b:b2:8c:60:3f:7f: 51:aa:72:6a:0d:9f:5b:5a:d1:80:74:ac:b4:e6:31:92:ca:a0: 64:73:3a:31:02:d7:e5:25:6b:55:92:c5:25:3a:02:6e:e3:b8: 37:82:43:c7:d6:50:4e:cb:f2:67:f1:a9:9c:88:4f:aa:ab:2d: d7:32:f0:76:0b:4a:01:10:b7:56:d8:de:f4:00:18:c6:60:ef: a8:82:66:53:91:dc:c4:5f:e1:02:28:ae:b3:e5:0c:1d:5a:1b: b6:12:06:2b:58:03:25:98:c6:b3:47:fc:e1:7a:28:13:15:fe: ce:46:49:8f:5f:7c:73:ff:84:76:14:09:6a:a6:5d:d0:df:17: 63:3d:21:70:ed:70:7f:7e:09:c3:78:77:8a:8b:aa:1b:1c:64: 20:eb:94:72:6f:9a:17:d7:22:f5:5a:70:af:be:0a:01:ba:ce: 0b:24:00:6e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD10wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI4MzNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDM2MEM4MjFFMzA2RDg4 ODI5OTFBNEVBMzAxNDRFODY4M0VGRTBGOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzj8ExCIovb/MkYpI15t6yOuKhxWrXwmTG/vngDA5+iWVr//Fc G59Hl6TfMcoqVL5pGxL3KHez5B/rZQtIeHoF5nkT1BhbbRDdYL8GSTbRbGrLqmr5 3kVx5LvaWDPCMhAdCwOK7Hm0KrpEFjxS/rQq4rhHAw78ogsP4wSFDfosmpmm7x6w XFrAn0RMbzNlAoX/Em4PvpgUbafxlv6WUh++GAkXwUaPMyJDOqHMvKecc8y+diGs 3PI6mT/HUZE/5Ln97kyKQ+bMtihe39t10KJ70L+uj4A2+UBviWtGJgNY7F6KHhy9 h9fvvP46E19dZ+UaECiKWVXYSCJplqxPHAl/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNgyCHjBtiIKZGk6jAUToaD7+D5kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L05neUNIakJ0aUlLWkdrNmpBVVRvYUQ3LUQ1ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxZpgwDQYJKoZIhvcNAQELBQADggEBAAgYsS3K8lGL0EiFkkWbSRw4i20O yaUUrCZ9/YsPv9g2gJvrOZ6W9mSzm2FXxmWtMNzGIuxT5vCb0lvpjgO0obEsp4mD odz6n3RkKg/ubeB2d8tRPXuyjGA/f1GqcmoNn1ta0YB0rLTmMZLKoGRzOjEC1+Ul a1WSxSU6Am7juDeCQ8fWUE7L8mfxqZyIT6qrLdcy8HYLSgEQt1bY3vQAGMZg76iC ZlOR3MRf4QIorrPlDB1aG7YSBitYAyWYxrNH/OF6KBMV/s5GSY9ffHP/hHYUCWqm XdDfF2M9IXDtcH9+CcN4d4qLqhscZCDrlHJvmhfXIvVacK++CgG6zgskAG4= -----END CERTIFICATE-----Generated at Sat Jun 21 23:29:02 2025 by rpki-client