$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QFm2mfHIx_WqNS-X8V2iiGd5HaU.roa File: QFm2mfHIx_WqNS-X8V2iiGd5HaU.roa (raw, json) Hash identifier: 1IrWoUloC7h4uXcfrlqWOnPU9h9sEHG5YydlgoLLYZA= Subject key identifier: 40:59:B6:99:F1:C8:C7:F5:AA:35:2F:97:F1:5D:A2:88:67:79:1D:A5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BCF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QFm2mfHIx_WqNS-X8V2iiGd5HaU.roa Signing time: Tue 01 Apr 2025 01:47:32 +0000 ROA not before: Tue 01 Apr 2025 01:47:32 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3023 (0xbcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:47:32 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=4059B699F1C8C7F5AA352F97F15DA28867791DA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:6f:b0:34:b5:88:cd:2f:4e:d7:26:4a:4a: 39:65:95:f6:a8:25:f7:12:00:ab:5a:a6:a5:d1:a7: 0d:97:23:7d:dc:d4:c4:40:07:2a:35:c8:13:fd:56: 22:93:bb:d4:4a:7f:cd:22:47:75:bd:e4:f7:d3:21: 56:50:01:ef:8a:bd:e0:c8:5b:fb:85:cf:80:e0:bd: 84:22:97:ec:a8:c8:bf:ac:d0:c9:b0:fd:3e:0f:60: 03:2d:b5:ac:92:bc:86:4b:87:16:89:b5:57:69:96: 94:07:bc:b2:d9:6c:8e:fb:60:45:5c:f2:fc:56:37: a3:52:3b:92:e8:f4:7a:30:f8:ad:bb:1c:36:29:01: 77:1e:7f:35:ca:79:fc:2a:40:cf:3f:0f:c2:b3:c6: dc:69:f5:7a:63:72:b4:56:26:74:e2:26:ce:d6:e9: 73:09:0e:90:de:47:f9:50:a1:97:cf:d9:7d:1d:15: c7:c4:0b:5f:cc:ca:02:c1:cc:10:f0:bb:0c:c5:9d: 61:2c:d1:e8:c7:79:e5:e9:88:00:43:32:84:b7:81: 6c:a0:89:81:8d:79:4b:f5:b7:ce:71:47:c4:12:da: af:ca:64:44:29:eb:ea:4f:1a:a1:af:25:61:36:ca: 2e:b9:be:2d:6e:5b:01:2b:51:03:b1:1c:78:68:cd: 86:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:59:B6:99:F1:C8:C7:F5:AA:35:2F:97:F1:5D:A2:88:67:79:1D:A5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QFm2mfHIx_WqNS-X8V2iiGd5HaU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.220.0/22 Signature Algorithm: sha256WithRSAEncryption d5:6c:9a:3b:ab:9c:a0:7d:60:92:7c:7b:d6:f8:95:22:1e:2e: f3:c6:da:a5:08:46:2f:84:64:ae:02:76:02:3b:cb:e0:9b:1c: 05:fa:cf:ed:4e:a3:ca:8c:50:93:5d:63:be:e1:f4:94:20:f8: 8e:39:d3:18:1a:64:e3:b4:32:50:f6:b5:ba:1a:d0:e0:48:c3: 1f:5d:38:5e:5b:cc:70:bc:db:28:a4:e0:54:61:ce:80:da:8d: f6:a4:fd:b4:0f:0d:ae:3c:0d:4d:70:94:fe:ea:61:c6:74:51: f6:00:30:fc:1a:49:f3:9a:4d:da:f6:aa:6b:c8:d1:2c:5d:3f: 38:cd:9e:7b:2c:d2:3c:06:c9:39:fd:f7:54:7d:4f:ec:56:ab: d2:9a:4b:44:f4:03:8f:89:a9:4a:02:49:60:6a:14:12:67:0a: 25:e5:0d:90:fa:cb:a7:1b:9d:b0:30:0a:fe:02:1a:9a:2f:ba: e5:a6:7a:e0:b0:9e:9f:cd:22:3b:6f:68:4d:d5:da:eb:c9:1f: 65:12:ac:2e:ce:a7:57:8b:20:fe:b1:44:5c:b2:45:89:31:62: 7b:18:45:31:66:6a:00:9a:2b:d9:6a:7a:af:da:98:5a:a2:79: 31:9c:e6:36:24:4f:3a:74:63:fd:c2:98:3c:90:bf:4e:65:19: 14:47:07:50 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC88wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQ3MzJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQwNTlCNjk5RjFDOEM3 RjVBQTM1MkY5N0YxNURBMjg4Njc3OTFEQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC21m+wNLWIzS9O1yZKSjlllfaoJfcSAKtapqXRpw2XI33c1MRA Byo1yBP9ViKTu9RKf80iR3W95PfTIVZQAe+KveDIW/uFz4DgvYQil+yoyL+s0Mmw /T4PYAMttaySvIZLhxaJtVdplpQHvLLZbI77YEVc8vxWN6NSO5Lo9How+K27HDYp AXcefzXKefwqQM8/D8Kzxtxp9XpjcrRWJnTiJs7W6XMJDpDeR/lQoZfP2X0dFcfE C1/MygLBzBDwuwzFnWEs0ejHeeXpiABDMoS3gWygiYGNeUv1t85xR8QS2q/KZEQp 6+pPGqGvJWE2yi65vi1uWwErUQOxHHhozYZPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQFm2mfHIx/WqNS+X8V2iiGd5HaUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1FGbTJtZkhJeF9XcU5TLVg4VjJpaUdkNUhhVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYNwwDQYJKoZIhvcNAQELBQADggEBANVsmjurnKB9YJJ8e9b4lSIeLvPG 2qUIRi+EZK4CdgI7y+CbHAX6z+1Oo8qMUJNdY77h9JQg+I450xgaZOO0MlD2tboa 0OBIwx9dOF5bzHC82yik4FRhzoDajfak/bQPDa48DU1wlP7qYcZ0UfYAMPwaSfOa Tdr2qmvI0SxdPzjNnnss0jwGyTn991R9T+xWq9KaS0T0A4+JqUoCSWBqFBJnCiXl DZD6y6cbnbAwCv4CGpovuuWmeuCwnp/NIjtvaE3V2uvJH2USrC7Op1eLIP6xRFyy RYkxYnsYRTFmagCaK9lqeq/amFqieTGc5jYkTzp0Y/3CmDyQv05lGRRHB1A= -----END CERTIFICATE-----Generated at Sat Apr 26 18:21:38 2025 by rpki-client