$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UMbGa2S4KxU26DUyB__ly1vGzhA.roa File: UMbGa2S4KxU26DUyB__ly1vGzhA.roa (raw, json) Hash identifier: GL2jxNyvoPucMrGGCYvmP/Wc2kyd/GsSAOK3zSyy/44= Subject key identifier: 50:C6:C6:6B:64:B8:2B:15:36:E8:35:32:07:FF:E5:CB:5B:C6:CE:10 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E85 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UMbGa2S4KxU26DUyB__ly1vGzhA.roa Signing time: Tue 10 Jun 2025 10:56:47 +0000 ROA not before: Tue 10 Jun 2025 10:56:47 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.102.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 18:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3717 (0xe85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:56:47 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=50C6C66B64B82B1536E8353207FFE5CB5BC6CE10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:12:8d:f6:d7:0e:27:3e:dd:4f:f4:73:f8:c9: 3a:bc:58:63:34:8a:75:8e:16:ec:43:7a:bc:c3:71: 09:6e:67:9d:04:39:ad:3b:34:85:a1:db:ad:6e:36: 2a:40:f0:d1:96:5b:e8:8d:0a:a2:35:71:ef:5d:fc: e4:39:a3:02:2a:a8:f1:c0:e4:98:7d:33:15:fb:3f: f9:09:02:c1:17:c0:0b:de:8d:c6:33:36:80:63:b0: ae:23:87:4f:18:3c:b3:5b:17:af:43:60:d7:98:a3: 0e:08:77:0c:db:8e:ce:40:a4:5e:b5:d2:7f:30:15: a1:67:15:b9:0c:a0:52:3b:0c:87:46:ad:e4:d1:0c: 04:f7:64:b5:d2:31:0a:c5:45:5c:11:4d:4d:d4:9b: fb:e2:04:bc:fc:27:a1:dd:55:c9:30:f3:e6:18:18: 93:50:b9:17:1a:fa:cf:58:d0:0e:bd:62:bd:c3:00: b2:7e:be:c1:e6:98:22:ff:39:ce:fd:13:b7:c4:ed: fb:37:52:83:2f:66:c0:3e:90:f0:eb:76:0a:77:b5: ec:35:0d:9a:db:12:cf:28:e0:86:8f:71:fe:0d:f4: c5:a9:4d:fc:48:55:3e:47:1e:04:b7:a8:fe:76:4e: 84:ff:e3:57:af:ff:03:f3:d8:57:21:69:4b:9e:88: 84:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C6:C6:6B:64:B8:2B:15:36:E8:35:32:07:FF:E5:CB:5B:C6:CE:10 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UMbGa2S4KxU26DUyB__ly1vGzhA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.153.0/24 Signature Algorithm: sha256WithRSAEncryption ad:9b:b5:ca:99:6e:6f:69:f5:66:2e:d0:41:35:d0:95:ff:be: c9:47:87:db:be:5f:d9:6f:95:dd:50:4e:59:1e:d1:2f:56:c4: 7c:c0:d3:5f:cb:76:56:46:51:c6:be:9f:06:cd:f6:9c:c3:80: 31:ed:f0:5f:6c:41:0c:af:20:8e:0e:ce:c9:24:7e:26:87:c5: 02:4c:34:6a:89:91:dd:3e:35:81:2d:fb:23:6b:4f:93:7d:3a: a0:f3:2d:9e:d1:b9:24:59:8e:19:b8:1b:88:7e:db:00:04:df: 65:8c:c8:2b:48:af:06:a4:7f:00:25:9f:43:3a:c3:eb:58:72: b4:f9:6a:a4:24:fa:54:fb:54:58:17:4d:df:1a:e1:9d:31:62: b9:2c:45:c5:20:98:f3:28:de:3d:20:13:c2:fb:3b:88:9c:1b: e1:82:1c:ed:e3:ea:5d:24:78:76:9c:9c:76:f1:7e:a6:3c:b9: 30:32:74:85:e0:e9:c8:4b:ed:00:ca:d9:72:4a:d4:af:5a:0e: 2e:da:8f:6f:d6:55:59:60:37:fd:2c:f5:02:14:54:19:ad:c0: d7:53:75:c2:c5:d8:9e:0d:9a:35:88:df:95:87:02:0d:b8:cd: e7:11:58:44:bb:97:4f:c5:50:01:28:1b:1a:d4:0b:0a:dc:71: 55:94:a4:39 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDoUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDU2NDdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDUwQzZDNjZCNjRCODJC MTUzNkU4MzUzMjA3RkZFNUNCNUJDNkNFMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnEo321w4nPt1P9HP4yTq8WGM0inWOFuxDerzDcQluZ50EOa07 NIWh261uNipA8NGWW+iNCqI1ce9d/OQ5owIqqPHA5Jh9MxX7P/kJAsEXwAvejcYz NoBjsK4jh08YPLNbF69DYNeYow4Idwzbjs5ApF610n8wFaFnFbkMoFI7DIdGreTR DAT3ZLXSMQrFRVwRTU3Um/viBLz8J6HdVckw8+YYGJNQuRca+s9Y0A69Yr3DALJ+ vsHmmCL/Oc79E7fE7fs3UoMvZsA+kPDrdgp3tew1DZrbEs8o4IaPcf4N9MWpTfxI VT5HHgS3qP52ToT/41ev/wPz2FchaUueiIRlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUMbGa2S4KxU26DUyB//ly1vGzhAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1VNYkdhMlM0S3hVMjZEVXlCX19seTF2R3poQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxZpkwDQYJKoZIhvcNAQELBQADggEBAK2btcqZbm9p9WYu0EE10JX/vslH h9u+X9lvld1QTlke0S9WxHzA01/LdlZGUca+nwbN9pzDgDHt8F9sQQyvII4Ozskk fiaHxQJMNGqJkd0+NYEt+yNrT5N9OqDzLZ7RuSRZjhm4G4h+2wAE32WMyCtIrwak fwAln0M6w+tYcrT5aqQk+lT7VFgXTd8a4Z0xYrksRcUgmPMo3j0gE8L7O4icG+GC HO3j6l0keHacnHbxfqY8uTAydIXg6chL7QDK2XJK1K9aDi7aj2/WVVlgN/0s9QIU VBmtwNdTdcLF2J4NmjWI35WHAg24zecRWES7l0/FUAEoGxrUCwrccVWUpDk= -----END CERTIFICATE-----Generated at Sat Jun 21 20:07:06 2025 by rpki-client