$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QPa-x3ZYBxgdcVuYtpC1vJWYKMg.roa File: QPa-x3ZYBxgdcVuYtpC1vJWYKMg.roa (raw, json) Hash identifier: wZGZ7EqMvwTJMF8bDwm8Qy0sd1QCq3XGY8fA97zbFbY= Subject key identifier: 40:F6:BE:C7:76:58:07:18:1D:71:5B:98:B6:90:B5:BC:95:98:28:C8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EFF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QPa-x3ZYBxgdcVuYtpC1vJWYKMg.roa Signing time: Tue 10 Jun 2025 11:16:45 +0000 ROA not before: Tue 10 Jun 2025 11:16:45 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.108.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3839 (0xeff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:45 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=40F6BEC7765807181D715B98B690B5BC959828C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b0:1b:f2:d7:8b:8e:e5:fe:ac:3e:38:63:ca: d2:1c:fb:df:64:fc:cc:3b:b4:ae:6c:80:f8:af:54: bf:bf:95:8f:04:c3:93:18:1d:8d:c1:00:c9:18:80: 16:82:8a:dc:cd:8d:cb:3d:ef:76:54:78:9e:89:20: ae:9a:20:51:fd:c8:e8:2e:5c:ee:bb:e0:d8:69:5c: d4:4d:40:12:15:b7:c6:21:66:d9:6d:14:0a:39:69: 0c:59:14:2e:d1:23:13:0c:22:ee:f2:ea:bd:34:6f: 0e:33:26:ae:1b:c2:f7:0c:4f:f3:94:1f:16:2c:2d: c1:62:cb:c5:11:39:dc:b5:59:08:cc:d9:4b:cf:9c: ff:85:3d:9a:c7:27:73:34:c8:23:89:d7:fb:27:61: dd:a6:46:6c:4a:4f:b5:1d:7b:42:4a:42:9c:d2:8d: 5f:99:64:1b:28:ec:b9:de:ad:7c:19:11:3d:c4:a6: 93:32:3f:d9:b6:0b:a6:0f:eb:a9:c1:5b:37:f8:4f: c9:87:39:99:35:4c:af:8d:b3:8f:65:51:76:00:bf: 53:36:20:f8:e4:e9:7a:66:ba:9a:b4:0e:e4:25:ff: cd:4c:38:c9:d9:ce:31:bf:c3:8c:a7:c9:e7:07:a1: 31:8c:88:49:e9:ea:3b:2c:8d:80:8f:27:bf:52:e4: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F6:BE:C7:76:58:07:18:1D:71:5B:98:B6:90:B5:BC:95:98:28:C8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QPa-x3ZYBxgdcVuYtpC1vJWYKMg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.108.64.0/18 Signature Algorithm: sha256WithRSAEncryption ae:ad:a2:75:fb:8a:1e:b0:eb:09:bc:c0:ce:f6:af:03:31:c9: 10:69:62:33:fe:52:a6:c5:6e:b4:42:42:60:85:a7:c9:15:ff: 6a:ce:89:17:d4:55:dd:08:52:46:90:4c:44:f2:7d:e7:80:32: 91:80:8d:5f:b3:e3:6b:6a:9e:8e:58:08:0e:ca:94:27:8e:04: 2d:b4:da:f2:c1:17:95:81:52:02:aa:73:38:bc:15:da:9d:b8: 61:0e:49:c0:90:62:cb:21:9a:e1:1e:0f:9a:6a:24:e0:c0:d2: 23:d9:32:77:df:c1:6c:39:29:b1:e6:00:0d:dc:c5:5b:43:4f: 6a:4a:b7:f8:c8:73:34:a4:a6:84:3e:e0:44:f7:bb:41:02:0f: 85:92:29:df:a5:48:93:e7:ba:3c:2e:69:8e:43:9b:8d:45:7e: 91:c6:5e:7d:9d:bd:cf:c7:ee:ab:cb:35:c6:43:9e:dc:02:98: 53:e3:47:c1:bd:5a:2f:33:64:94:56:66:44:2b:26:9f:8c:bf: 25:28:1a:66:a6:2e:98:cd:a1:57:65:2b:bc:6f:35:cc:8e:24: 57:7f:ef:e3:3d:de:60:f7:d3:a5:c5:75:0b:ea:5d:47:f0:71: ba:54:25:60:82:30:b8:58:f3:f8:1a:52:81:71:6d:08:12:b0: 9c:50:fc:31 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NDVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDQwRjZCRUM3NzY1ODA3 MTgxRDcxNUI5OEI2OTBCNUJDOTU5ODI4QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVsBvy14uO5f6sPjhjytIc+99k/Mw7tK5sgPivVL+/lY8Ew5MY HY3BAMkYgBaCitzNjcs973ZUeJ6JIK6aIFH9yOguXO674NhpXNRNQBIVt8YhZtlt FAo5aQxZFC7RIxMMIu7y6r00bw4zJq4bwvcMT/OUHxYsLcFiy8UROdy1WQjM2UvP nP+FPZrHJ3M0yCOJ1/snYd2mRmxKT7Ude0JKQpzSjV+ZZBso7LnerXwZET3EppMy P9m2C6YP66nBWzf4T8mHOZk1TK+Ns49lUXYAv1M2IPjk6Xpmupq0DuQl/81MOMnZ zjG/w4ynyecHoTGMiEnp6jssjYCPJ79S5LILAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQPa+x3ZYBxgdcVuYtpC1vJWYKMgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1FQYS14M1pZQnhnZGNWdVl0cEMxdkpXWUtNZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYxbEAwDQYJKoZIhvcNAQELBQADggEBAK6tonX7ih6w6wm8wM72rwMxyRBp YjP+UqbFbrRCQmCFp8kV/2rOiRfUVd0IUkaQTETyfeeAMpGAjV+z42tqno5YCA7K lCeOBC202vLBF5WBUgKqczi8FdqduGEOScCQYsshmuEeD5pqJODA0iPZMnffwWw5 KbHmAA3cxVtDT2pKt/jIczSkpoQ+4ET3u0ECD4WSKd+lSJPnujwuaY5Dm41FfpHG Xn2dvc/H7qvLNcZDntwCmFPjR8G9Wi8zZJRWZkQrJp+MvyUoGmamLpjNoVdlK7xv NcyOJFd/7+M93mD306XFdQvqXUfwcbpUJWCCMLhY8/gaUoFxbQgSsJxQ/DE= -----END CERTIFICATE-----Generated at Sat Jun 21 05:37:37 2025 by rpki-client