$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vn3bDFbRNm01od955JSz8BH-qXA.roa File: Vn3bDFbRNm01od955JSz8BH-qXA.roa (raw, json) Hash identifier: ULkNo29ELHPmisa2qQuNQksOs0ZmxtKaq2zJ01GO+Zk= Subject key identifier: 56:7D:DB:0C:56:D1:36:6D:35:A1:DF:79:E4:94:B3:F0:11:FE:A9:70 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E7D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vn3bDFbRNm01od955JSz8BH-qXA.roa Signing time: Tue 10 Jun 2025 10:56:44 +0000 ROA not before: Tue 10 Jun 2025 10:56:44 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.102.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 21:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3709 (0xe7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:56:44 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=567DDB0C56D1366D35A1DF79E494B3F011FEA970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:f9:cb:60:e4:08:44:62:3d:f0:93:93:2a: 8b:95:26:09:ac:70:90:bb:c5:ee:fc:98:9b:00:6e: 46:87:59:60:6e:76:e6:d0:46:9d:d7:f0:ad:75:eb: 94:e6:dd:61:45:33:8f:50:ae:59:f2:50:8f:9c:da: 15:63:17:59:11:3f:2d:13:11:18:99:4d:4d:7c:78: d5:a9:8e:91:e0:5e:b9:0c:6d:ae:2d:b4:32:f8:d2: ca:8a:ad:3e:fc:09:99:ba:7a:0f:f5:4a:9d:93:dc: 3d:ee:72:de:3a:a2:c3:cf:2e:04:ae:70:7a:f9:b4: 87:9b:74:59:2a:74:d0:de:68:c1:68:30:f7:7e:63: 15:16:b6:b8:c2:91:53:b8:35:1d:e7:f7:44:8a:d3: ec:25:20:2b:81:9b:36:d1:6f:07:09:87:27:31:70: e8:ad:a8:67:cb:d8:41:9b:b3:25:ac:89:aa:ba:14: ca:94:38:7c:29:f4:cc:95:f5:39:c3:16:66:91:b8: eb:14:42:b0:84:15:70:4f:ed:53:2c:05:d6:66:06: 8c:ce:42:a1:e4:9b:4d:03:3c:84:67:b7:3a:8c:b4: f7:a8:dc:81:75:43:82:04:ad:d3:3d:b9:47:4c:94: 1b:83:46:c1:13:85:ea:28:72:92:50:e8:fe:d4:81: 01:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7D:DB:0C:56:D1:36:6D:35:A1:DF:79:E4:94:B3:F0:11:FE:A9:70 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vn3bDFbRNm01od955JSz8BH-qXA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.157.0/24 Signature Algorithm: sha256WithRSAEncryption 77:b4:8d:81:5e:79:46:be:86:15:6c:24:e9:fc:2a:d4:15:ef: 17:90:6a:bd:b4:aa:54:83:27:1c:b3:48:b7:5c:79:49:72:09: ac:97:cc:b4:61:12:b5:d4:8d:df:c4:d3:5c:05:79:5f:f2:6f: 6c:0f:21:ad:ce:ea:53:97:be:bc:3f:89:87:4f:6e:dd:28:5f: 87:e6:ca:8d:8d:9e:e8:75:6a:e9:4a:fc:e5:ee:8d:35:87:6f: 5a:99:66:3a:29:82:d7:2f:0e:7e:f4:38:be:05:86:d5:56:b9: 06:69:47:b3:8f:18:70:8d:5b:56:22:3b:b0:c8:27:21:95:1b: 0e:ae:aa:0c:81:88:74:c8:fe:65:3c:2a:41:0f:65:c4:8d:2c: c8:72:94:e1:13:78:be:a1:09:d6:34:e0:31:1f:cd:e5:2b:99: 05:f0:89:9d:65:69:63:90:f1:67:64:07:de:f0:74:cc:b8:9c: b7:bb:2f:e9:cb:3d:8e:f2:84:9b:ec:e3:cf:9a:27:e2:af:30: 78:dc:28:e9:7c:e3:1c:db:ac:2f:3c:c5:71:c7:05:fb:c5:79: 44:0e:0d:b1:fe:97:3f:9f:de:4b:54:f8:d2:21:56:f7:36:67: af:07:3a:83:21:f5:49:3d:97:33:37:9c:cf:2c:5c:5a:45:ec: 81:d8:fc:39 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDn0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDU2NDRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDU2N0REQjBDNTZEMTM2 NkQzNUExREY3OUU0OTRCM0YwMTFGRUE5NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/UvnLYOQIRGI98JOTKouVJgmscJC7xe78mJsAbkaHWWBudubQ Rp3X8K1165Tm3WFFM49QrlnyUI+c2hVjF1kRPy0TERiZTU18eNWpjpHgXrkMba4t tDL40sqKrT78CZm6eg/1Sp2T3D3uct46osPPLgSucHr5tIebdFkqdNDeaMFoMPd+ YxUWtrjCkVO4NR3n90SK0+wlICuBmzbRbwcJhycxcOitqGfL2EGbsyWsiaq6FMqU OHwp9MyV9TnDFmaRuOsUQrCEFXBP7VMsBdZmBozOQqHkm00DPIRntzqMtPeo3IF1 Q4IErdM9uUdMlBuDRsETheoocpJQ6P7UgQGDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVn3bDFbRNm01od955JSz8BH+qXAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ZuM2JERmJSTm0wMW9kOTU1SlN6OEJILXFYQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxZp0wDQYJKoZIhvcNAQELBQADggEBAHe0jYFeeUa+hhVsJOn8KtQV7xeQ ar20qlSDJxyzSLdceUlyCayXzLRhErXUjd/E01wFeV/yb2wPIa3O6lOXvrw/iYdP bt0oX4fmyo2Nnuh1aulK/OXujTWHb1qZZjopgtcvDn70OL4FhtVWuQZpR7OPGHCN W1YiO7DIJyGVGw6uqgyBiHTI/mU8KkEPZcSNLMhylOETeL6hCdY04DEfzeUrmQXw iZ1laWOQ8WdkB97wdMy4nLe7L+nLPY7yhJvs48+aJ+KvMHjcKOl84xzbrC88xXHH BfvFeUQODbH+lz+f3ktU+NIhVvc2Z68HOoMh9Uk9lzM3nM8sXFpF7IHY/Dk= -----END CERTIFICATE-----Generated at Fri Jun 20 23:44:03 2025 by rpki-client