$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VJ8ntZqEPik4hQHZm1jzNGESAfU.roa File: VJ8ntZqEPik4hQHZm1jzNGESAfU.roa (raw, json) Hash identifier: 9v7dWszg9Xp5/vSgbzbkSLmH4Q1ZUSmp/JJYOyfYjpE= Subject key identifier: 54:9F:27:B5:9A:84:3E:29:38:85:01:D9:9B:58:F3:34:61:12:01:F5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EC8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VJ8ntZqEPik4hQHZm1jzNGESAfU.roa Signing time: Tue 10 Jun 2025 11:05:04 +0000 ROA not before: Tue 10 Jun 2025 11:05:04 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.107.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3784 (0xec8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:05:04 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=549F27B59A843E29388501D99B58F334611201F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:d9:25:f2:53:3c:b4:84:28:1d:2b:dd:a6: fc:b3:8b:cf:34:85:97:07:18:c8:ea:72:d2:ab:99: 88:e7:03:ab:a1:d3:ff:86:ca:15:b7:bb:94:ef:b7: 44:bd:05:7c:8c:f1:b1:b1:b9:87:88:bd:3a:b0:51: a2:28:78:86:d7:35:3d:60:ec:71:8d:0c:b8:9c:9c: a9:b2:9f:dd:80:87:f1:b2:5f:f0:9b:0d:16:d9:f6: 05:48:bd:d5:d4:56:bb:28:60:d0:87:b6:94:05:f8: 5c:ac:a5:6f:c3:26:3e:da:ed:3a:8d:31:bd:29:85: ee:c8:c9:1d:e5:c0:e4:66:c2:a2:48:fd:21:80:47: 87:e8:03:a5:a8:1d:15:2d:ac:ff:76:46:d5:68:e8: b9:21:55:ca:35:3b:63:f2:57:39:83:9e:21:83:0c: 19:b2:1c:b6:fb:45:03:14:6d:7b:1c:81:83:99:15: 01:86:40:e3:8e:0d:12:c0:16:46:f3:f3:b1:6b:33: 4d:f5:6b:1d:a6:f0:b2:8e:1b:1e:73:2c:8e:47:1c: 15:38:55:5b:23:e5:b5:f3:9d:0f:16:16:62:7a:d1: 1d:ca:7a:c6:f4:4d:79:3f:2b:2e:cd:5f:de:ce:f7: 90:15:bf:53:6d:b0:c3:44:48:9d:66:f7:aa:ce:0e: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9F:27:B5:9A:84:3E:29:38:85:01:D9:9B:58:F3:34:61:12:01:F5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VJ8ntZqEPik4hQHZm1jzNGESAfU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.107.160.0/19 Signature Algorithm: sha256WithRSAEncryption af:e5:42:4e:50:ef:2d:08:11:7c:14:43:a3:33:2e:ed:0e:08: 2d:6b:10:31:66:b1:93:e0:f8:52:f3:d9:d7:ab:8c:71:eb:a5: d0:64:57:01:99:68:73:68:78:d6:87:1c:c7:d1:84:e4:93:57: c3:1f:3e:02:62:27:72:55:72:a2:39:31:a0:e3:6f:75:d5:ca: 09:a4:7a:7c:3c:65:f2:26:8e:e0:15:d5:44:34:9b:9f:0d:7c: d2:f2:a5:a7:1c:28:ce:dc:b0:f0:cc:66:0c:8c:98:94:c0:c5: 96:7e:06:63:63:9d:1c:20:34:ae:3d:0c:15:db:4e:cd:8d:de: dd:be:ea:6f:38:2b:9e:de:84:04:d8:bc:b5:75:15:49:67:9d: 3b:a4:a3:26:f0:9b:5f:02:1f:89:8a:17:53:4e:1e:ab:4c:0f: 3b:41:bf:93:f7:52:e0:e1:02:35:97:a3:32:d5:84:d8:bc:af: 4d:85:ac:32:c2:bf:6e:37:63:1d:ea:3c:84:ba:dd:ba:41:ee: bd:5d:38:9e:9f:07:64:c1:31:7c:ed:5b:3f:1b:4d:9d:aa:ef: 86:75:00:87:c4:6b:e4:0c:ba:37:4d:1e:df:50:4b:00:8d:b6: 54:74:36:42:d7:c9:85:e0:78:cb:6d:7b:be:d6:5c:1b:48:a4: 98:65:3e:30 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDsgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA1MDRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDU0OUYyN0I1OUE4NDNF MjkzODg1MDFEOTlCNThGMzM0NjExMjAxRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC65Nkl8lM8tIQoHSvdpvyzi880hZcHGMjqctKrmYjnA6uh0/+G yhW3u5Tvt0S9BXyM8bGxuYeIvTqwUaIoeIbXNT1g7HGNDLicnKmyn92Ah/GyX/Cb DRbZ9gVIvdXUVrsoYNCHtpQF+FyspW/DJj7a7TqNMb0phe7IyR3lwORmwqJI/SGA R4foA6WoHRUtrP92RtVo6LkhVco1O2PyVzmDniGDDBmyHLb7RQMUbXscgYOZFQGG QOOODRLAFkbz87FrM031ax2m8LKOGx5zLI5HHBU4VVsj5bXznQ8WFmJ60R3Kesb0 TXk/Ky7NX97O95AVv1NtsMNESJ1m96rODkf7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVJ8ntZqEPik4hQHZm1jzNGESAfUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ZKOG50WnFFUGlrNGhRSFptMWp6TkdFU0FmVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUxa6AwDQYJKoZIhvcNAQELBQADggEBAK/lQk5Q7y0IEXwUQ6MzLu0OCC1r EDFmsZPg+FLz2derjHHrpdBkVwGZaHNoeNaHHMfRhOSTV8MfPgJiJ3JVcqI5MaDj b3XVygmkenw8ZfImjuAV1UQ0m58NfNLypaccKM7csPDMZgyMmJTAxZZ+BmNjnRwg NK49DBXbTs2N3t2+6m84K57ehATYvLV1FUlnnTukoybwm18CH4mKF1NOHqtMDztB v5P3UuDhAjWXozLVhNi8r02FrDLCv243Yx3qPIS63bpB7r1dOJ6fB2TBMXztWz8b TZ2q74Z1AIfEa+QMujdNHt9QSwCNtlR0NkLXyYXgeMtte77WXBtIpJhlPjA= -----END CERTIFICATE-----Generated at Sun Jun 22 02:19:53 2025 by rpki-client