$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sf167i5Q2lBzsMZgmoEGlmK4Av8.roa File: Sf167i5Q2lBzsMZgmoEGlmK4Av8.roa (raw, json) Hash identifier: 7Zx9ReAalZY9Fj8sp+BuX891qwdicwg0vSrOfibXOv0= Subject key identifier: 49:FD:7A:EE:2E:50:DA:50:73:B0:C6:60:9A:81:06:96:62:B8:02:FF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F3D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sf167i5Q2lBzsMZgmoEGlmK4Av8.roa Signing time: Tue 10 Jun 2025 11:24:39 +0000 ROA not before: Tue 10 Jun 2025 11:24:39 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 183.73.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3901 (0xf3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:39 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=49FD7AEE2E50DA5073B0C6609A81069662B802FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:73:67:09:fc:7b:d2:65:8a:8e:c7:d6:9c: 7c:7a:c6:87:ae:83:f4:12:fb:a7:68:65:64:94:bc: 04:09:a4:7a:88:83:32:6a:41:fc:09:75:35:d6:1f: 04:9e:3e:e0:f0:ed:42:99:07:a7:a4:28:34:ca:5c: 99:55:e4:ba:d6:af:4b:6b:5e:ea:65:2a:39:a7:db: eb:0a:1d:59:e7:6f:d0:1b:7a:e1:ee:9d:aa:a9:b5: c5:ce:36:bc:1d:01:c5:91:f6:c3:7e:00:61:41:f4: 4b:d8:41:66:8b:df:e8:18:d6:55:04:11:b3:52:a7: f2:34:7b:1b:94:bb:73:99:b3:ae:d6:f5:58:35:30: 09:24:8a:09:f0:f9:43:80:b6:0d:d9:64:01:fa:93: 4c:58:88:f5:85:f4:09:40:c4:08:61:c3:2d:23:aa: 60:40:15:19:f9:83:d2:18:f9:3d:63:b8:82:b3:72: 25:1a:12:7e:bc:3e:b2:e1:6a:0e:35:e0:69:1d:e9: 78:04:a4:21:68:96:5c:70:8d:8a:6f:7b:6d:75:cf: 1c:07:b9:ab:12:70:0d:81:85:e9:4a:e7:2b:d3:aa: e0:9f:55:fe:7f:d0:f8:2d:ac:fa:fd:bd:34:a0:00: fd:63:fe:83:91:5e:b4:3d:91:5a:01:a7:60:36:58: c1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FD:7A:EE:2E:50:DA:50:73:B0:C6:60:9A:81:06:96:62:B8:02:FF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Sf167i5Q2lBzsMZgmoEGlmK4Av8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.73.28.0/24 Signature Algorithm: sha256WithRSAEncryption df:53:9d:71:54:7d:3e:c4:e4:03:4d:c4:47:b9:e6:65:15:5c: 83:af:05:44:37:c7:85:30:da:df:a0:72:9e:8d:93:df:ba:58: 2e:74:fe:44:6f:dc:ae:93:ae:27:1a:c4:ec:90:21:93:be:d2: d4:9e:a3:6a:48:46:87:fa:a4:12:67:3e:9b:89:2c:9b:d2:33: c0:e4:e6:28:f0:5f:56:01:af:5a:a6:9b:e4:54:75:91:0f:54: 84:eb:3e:09:e4:b6:7e:e6:86:2f:ec:ce:de:d5:e2:86:26:12: 63:fb:e6:39:b3:e4:c0:68:63:70:35:58:87:5e:f9:6f:47:a6: 80:67:51:90:fa:88:da:5e:53:b7:4b:dc:d5:ab:1e:99:71:0e: 0f:0c:bf:d6:35:85:90:8c:4d:b2:cd:fe:36:18:95:ee:14:36: 96:32:c4:bc:7f:c8:3c:28:01:cf:5f:39:fc:1a:1c:4c:75:ff: 59:a5:4c:a9:ff:65:d8:ba:ca:cd:1a:a0:bd:3d:96:f1:d2:f0: c7:bf:f4:61:c2:62:92:93:a2:a8:7b:c7:39:b2:84:64:d9:87: 09:e9:71:dc:36:95:b2:1e:22:6d:1c:45:9f:ee:a7:aa:76:0b: 8f:b6:02:d9:df:6a:c3:75:1f:30:02:8a:09:b5:d7:82:f0:2c: 04:99:bd:6b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDz0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MzlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDQ5RkQ3QUVFMkU1MERB NTA3M0IwQzY2MDlBODEwNjk2NjJCODAyRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFaXNnCfx70mWKjsfWnHx6xoeug/QS+6doZWSUvAQJpHqIgzJq QfwJdTXWHwSePuDw7UKZB6ekKDTKXJlV5LrWr0trXuplKjmn2+sKHVnnb9AbeuHu naqptcXONrwdAcWR9sN+AGFB9EvYQWaL3+gY1lUEEbNSp/I0exuUu3OZs67W9Vg1 MAkkignw+UOAtg3ZZAH6k0xYiPWF9AlAxAhhwy0jqmBAFRn5g9IY+T1juIKzciUa En68PrLhag414Gkd6XgEpCFollxwjYpve211zxwHuasScA2BhelK5yvTquCfVf5/ 0PgtrPr9vTSgAP1j/oORXrQ9kVoBp2A2WMGRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSf167i5Q2lBzsMZgmoEGlmK4Av8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1NmMTY3aTVRMmxCenNNWmdtb0VHbG1LNEF2OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC3SRwwDQYJKoZIhvcNAQELBQADggEBAN9TnXFUfT7E5ANNxEe55mUVXIOv BUQ3x4Uw2t+gcp6Nk9+6WC50/kRv3K6TricaxOyQIZO+0tSeo2pIRof6pBJnPpuJ LJvSM8Dk5ijwX1YBr1qmm+RUdZEPVITrPgnktn7mhi/szt7V4oYmEmP75jmz5MBo Y3A1WIde+W9HpoBnUZD6iNpeU7dL3NWrHplxDg8Mv9Y1hZCMTbLN/jYYle4UNpYy xLx/yDwoAc9fOfwaHEx1/1mlTKn/Zdi6ys0aoL09lvHS8Me/9GHCYpKToqh7xzmy hGTZhwnpcdw2lbIeIm0cRZ/up6p2C4+2AtnfasN1HzACigm114LwLASZvWs= -----END CERTIFICATE-----Generated at Sun Jun 22 06:46:36 2025 by rpki-client