$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QWjMh5znWYF1c1vjpx8GCOzzb4I.roa File: QWjMh5znWYF1c1vjpx8GCOzzb4I.roa (raw, json) Hash identifier: fqdSpPkPJLrkf5ED919z5MAQyrBX5x6uAk+mgsJrUMs= Subject key identifier: 41:68:CC:87:9C:E7:59:81:75:73:5B:E3:A7:1F:06:08:EC:F3:6F:82 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F81 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QWjMh5znWYF1c1vjpx8GCOzzb4I.roa Signing time: Tue 10 Jun 2025 11:36:11 +0000 ROA not before: Tue 10 Jun 2025 11:36:11 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.105.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 18:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3969 (0xf81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:36:11 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=4168CC879CE7598175735BE3A71F0608ECF36F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:45:54:f1:18:9d:ac:21:12:85:78:e9:35:98: dc:0a:65:aa:89:93:b3:52:98:e3:d5:08:39:95:b1: b0:f6:78:be:cb:b4:c2:5c:48:9a:f6:ad:dd:ec:1b: 7f:a2:74:f4:87:1f:8b:0a:c8:90:54:28:c4:c9:26: 0b:e1:b1:55:ee:8c:9c:fe:3b:c6:a7:17:4e:6e:1a: e1:9d:13:3f:74:2a:cb:0c:d0:b2:29:99:fc:f2:e9: a2:08:ec:a7:bb:ae:9e:09:c7:ce:f7:0c:f9:a1:84: 52:54:5a:12:30:ca:16:8b:16:13:3d:c5:3d:18:c1: 41:8d:85:f3:1c:0c:65:fd:05:e8:cc:7d:8f:53:48: d7:e7:e3:da:c5:ce:dc:ec:66:f8:83:29:24:31:23: 55:15:59:a1:ba:81:9f:f5:7f:28:13:6a:8b:68:12: 98:00:83:dd:97:4d:65:c5:0b:96:09:f2:fb:d6:64: ac:13:ff:d1:91:6e:61:97:68:57:16:c8:a0:5a:bb: b6:2e:fb:36:ff:c2:78:a1:4a:60:c0:77:2c:3d:c2: 72:b1:88:14:b0:0e:00:47:c3:28:c8:2a:7b:5f:ba: 1c:21:ca:bd:dc:c0:66:03:b0:1c:00:09:a4:ad:5e: 3e:55:bf:94:55:30:94:1d:e9:5e:4d:46:bf:8d:99: e3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:68:CC:87:9C:E7:59:81:75:73:5B:E3:A7:1F:06:08:EC:F3:6F:82 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QWjMh5znWYF1c1vjpx8GCOzzb4I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.87.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:09:6f:1e:4c:78:82:be:a9:1c:c6:95:01:ec:2e:02:65:8a: 9d:9c:40:59:0b:9e:be:a9:d2:0e:67:86:63:a4:9f:5f:26:b8: 92:7a:8f:56:c0:50:ad:21:27:1b:35:01:65:92:64:02:7c:38: 9a:8e:40:18:7d:cc:24:1c:86:42:cc:5a:de:2e:e4:c9:37:31: e9:f7:77:5a:82:68:91:0c:b0:10:81:bf:f0:d3:6b:1c:64:20: 3b:dd:e3:c6:a2:4b:32:0f:27:80:e8:98:02:d0:ca:65:3f:48: c0:91:ee:8a:3f:82:eb:73:84:16:bf:7e:f3:cf:2e:61:6d:07: 41:bb:04:45:7a:ab:c7:be:81:c9:4a:1e:27:b7:aa:bc:e2:fd: 78:83:d4:68:c9:be:f9:9e:89:ce:c8:d5:f2:3a:ee:ef:da:3a: fb:74:e9:79:46:77:dc:56:dd:88:13:e2:58:ae:dc:cd:95:e9: 39:79:84:f5:6e:1a:ac:89:f6:d0:fa:2c:b9:d4:99:74:5d:c5: 98:8c:fe:fb:87:03:2f:2b:f7:f3:5c:2c:c8:56:b3:29:37:1e: 15:ed:d5:cc:24:ac:ad:45:f3:42:c2:9a:39:eb:81:08:fd:fc: 2b:81:27:06:d2:28:e9:97:71:cd:70:32:9c:cc:97:76:13:e0: a3:fe:a6:46 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTM2MTFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDQxNjhDQzg3OUNFNzU5 ODE3NTczNUJFM0E3MUYwNjA4RUNGMzZGODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcRVTxGJ2sIRKFeOk1mNwKZaqJk7NSmOPVCDmVsbD2eL7LtMJc SJr2rd3sG3+idPSHH4sKyJBUKMTJJgvhsVXujJz+O8anF05uGuGdEz90KssM0LIp mfzy6aII7Ke7rp4Jx873DPmhhFJUWhIwyhaLFhM9xT0YwUGNhfMcDGX9BejMfY9T SNfn49rFztzsZviDKSQxI1UVWaG6gZ/1fygTaotoEpgAg92XTWXFC5YJ8vvWZKwT /9GRbmGXaFcWyKBau7Yu+zb/wnihSmDAdyw9wnKxiBSwDgBHwyjIKntfuhwhyr3c wGYDsBwACaStXj5Vv5RVMJQd6V5NRr+NmePFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQWjMh5znWYF1c1vjpx8GCOzzb4IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1FXak1oNXpuV1lGMWMxdmpweDhHQ096emI0SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaVcwDQYJKoZIhvcNAQELBQADggEBAA4Jbx5MeIK+qRzGlQHsLgJlip2c QFkLnr6p0g5nhmOkn18muJJ6j1bAUK0hJxs1AWWSZAJ8OJqOQBh9zCQchkLMWt4u 5Mk3Men3d1qCaJEMsBCBv/DTaxxkIDvd48aiSzIPJ4DomALQymU/SMCR7oo/gutz hBa/fvPPLmFtB0G7BEV6q8e+gclKHie3qrzi/XiD1GjJvvmeic7I1fI67u/aOvt0 6XlGd9xW3YgT4liu3M2V6Tl5hPVuGqyJ9tD6LLnUmXRdxZiM/vuHAy8r9/NcLMhW syk3HhXt1cwkrK1F80LCmjnrgQj9/CuBJwbSKOmXcc1wMpzMl3YT4KP+pkY= -----END CERTIFICATE-----Generated at Sat Jun 21 20:30:38 2025 by rpki-client