$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WIsKoLyMCjyLT4psVZ754vQzUqQ.roa File: WIsKoLyMCjyLT4psVZ754vQzUqQ.roa (raw, json) Hash identifier: emY3mPHM7R4fW7OQJtHS3lnANE0RhnM7DyM/UVPUi+g= Subject key identifier: 58:8B:0A:A0:BC:8C:0A:3C:8B:4F:8A:6C:55:9E:F9:E2:F4:33:52:A4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F62 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WIsKoLyMCjyLT4psVZ754vQzUqQ.roa Signing time: Tue 10 Jun 2025 11:32:26 +0000 ROA not before: Tue 10 Jun 2025 11:32:26 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.106.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3938 (0xf62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:26 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=588B0AA0BC8C0A3C8B4F8A6C559EF9E2F43352A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:66:25:c3:24:7b:2d:5a:9e:2f:8c:38:8e: 8e:9b:68:95:7a:d2:ee:e2:be:43:c5:d0:88:b2:02: 65:4a:0c:95:fe:44:22:66:cc:5c:73:f2:d2:8d:30: d0:f3:21:a9:0f:e7:00:86:98:09:a0:44:0f:4c:d0: 75:18:11:61:ba:b1:ae:99:c7:cc:ac:04:fc:08:30: e4:14:82:f2:a9:75:7a:89:22:5c:ca:18:d3:80:b0: ab:ac:4d:00:36:04:b5:30:9d:b4:e0:10:ae:99:f5: 38:0b:44:79:0e:6e:23:1d:b8:a0:21:e0:21:74:1f: 5d:47:32:29:8e:73:1d:73:8a:a2:21:6e:af:b1:ef: 29:d8:f1:0b:ab:54:d8:76:4c:98:00:eb:44:97:91: 09:1d:6f:2f:1e:cb:96:15:4c:52:aa:3e:f5:62:9a: bd:14:36:91:c3:bb:af:4c:34:48:2c:3f:e5:b0:df: 55:bb:2b:d1:88:d5:d9:de:f8:30:d3:51:f4:68:ea: 94:81:3a:e6:97:55:f0:39:75:ce:b8:d3:2f:33:39: 15:4f:f4:5b:1d:25:89:2e:ae:14:f9:1b:b3:ef:2d: 6d:21:88:b1:4c:fe:1f:c6:92:bf:33:b7:da:13:55: 99:e8:98:3d:4f:1c:d7:09:4e:c5:cd:93:45:33:3e: 7b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8B:0A:A0:BC:8C:0A:3C:8B:4F:8A:6C:55:9E:F9:E2:F4:33:52:A4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WIsKoLyMCjyLT4psVZ754vQzUqQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.248.0/21 Signature Algorithm: sha256WithRSAEncryption 37:6b:a9:97:c2:92:e2:62:f2:9b:01:5c:69:5d:6f:a3:87:d1: f1:06:e2:df:f4:ec:8b:a7:5a:db:27:65:a7:fb:e2:07:07:e9: c7:92:ad:c8:ff:f2:b4:62:e0:08:25:69:fb:aa:9b:3a:9d:ff: 69:ba:6e:1c:5a:b8:15:de:5d:cf:ee:8e:a7:cc:38:7f:fe:61: 81:ae:2f:e6:b6:ff:d1:78:ee:c6:2c:23:65:9e:65:97:a4:91: e0:6e:14:c0:02:f3:45:cd:6e:7b:8d:39:c7:19:fa:22:97:f9: e3:c7:53:f8:7e:9a:c4:44:8d:f3:2c:eb:41:f2:9b:71:6c:66: e0:4c:4c:af:0a:24:c3:9b:55:2d:17:df:54:f6:ec:94:7b:d6: f5:1f:cd:7a:ec:4c:12:32:54:60:ab:28:9c:b4:5e:7e:83:ed: bf:b3:a9:dc:12:35:e8:5e:fb:7c:b8:2c:81:bd:ac:10:9d:b4: 84:d7:e2:88:16:33:36:59:f8:77:1d:0d:d1:a9:84:89:ae:42: 8e:64:b0:f5:8a:34:b1:cd:4c:7a:18:de:4b:94:77:a4:81:9a: d5:1d:48:be:dd:34:00:d0:50:6e:8e:7f:b2:17:82:6e:35:5b: b0:f0:07:5f:1b:07:a4:97:2d:79:d5:41:75:46:63:16:83:5d: dc:aa:eb:12 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD2IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMjZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDU4OEIwQUEwQkM4QzBB M0M4QjRGOEE2QzU1OUVGOUUyRjQzMzUyQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6EWYlwyR7LVqeL4w4jo6baJV60u7ivkPF0IiyAmVKDJX+RCJm zFxz8tKNMNDzIakP5wCGmAmgRA9M0HUYEWG6sa6Zx8ysBPwIMOQUgvKpdXqJIlzK GNOAsKusTQA2BLUwnbTgEK6Z9TgLRHkObiMduKAh4CF0H11HMimOcx1ziqIhbq+x 7ynY8QurVNh2TJgA60SXkQkdby8ey5YVTFKqPvVimr0UNpHDu69MNEgsP+Ww31W7 K9GI1dne+DDTUfRo6pSBOuaXVfA5dc640y8zORVP9FsdJYkurhT5G7PvLW0hiLFM /h/Gkr8zt9oTVZnomD1PHNcJTsXNk0UzPnsxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWIsKoLyMCjyLT4psVZ754vQzUqQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1dJc0tvTHlNQ2p5TFQ0cHNWWjc1NHZRelVxUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxavgwDQYJKoZIhvcNAQELBQADggEBADdrqZfCkuJi8psBXGldb6OH0fEG 4t/07IunWtsnZaf74gcH6ceSrcj/8rRi4Aglafuqmzqd/2m6bhxauBXeXc/ujqfM OH/+YYGuL+a2/9F47sYsI2WeZZekkeBuFMAC80XNbnuNOccZ+iKX+ePHU/h+msRE jfMs60Hym3FsZuBMTK8KJMObVS0X31T27JR71vUfzXrsTBIyVGCrKJy0Xn6D7b+z qdwSNehe+3y4LIG9rBCdtITX4ogWMzZZ+HcdDdGphImuQo5ksPWKNLHNTHoY3kuU d6SBmtUdSL7dNADQUG6Of7IXgm41W7DwB18bB6SXLXnVQXVGYxaDXdyq6xI= -----END CERTIFICATE-----Generated at Sun Jun 22 06:46:33 2025 by rpki-client