$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WJUq_Br6glDI88kfnyFBIoVIk8A.roa File: WJUq_Br6glDI88kfnyFBIoVIk8A.roa (raw, json) Hash identifier: UjzPgzIkLySJyxVmMsLc78ZD/xl+OeVepB3tFSG9VAQ= Subject key identifier: 58:95:2A:FC:1A:FA:82:50:C8:F3:C9:1F:9F:21:41:22:85:48:93:C0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BAB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WJUq_Br6glDI88kfnyFBIoVIk8A.roa Signing time: Tue 01 Apr 2025 01:39:58 +0000 ROA not before: Tue 01 Apr 2025 01:39:58 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2987 (0xbab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:39:58 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=58952AFC1AFA8250C8F3C91F9F214122854893C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:dc:45:90:5e:7f:5b:08:e8:fb:4a:83:d4: 13:fd:37:7b:4a:64:09:07:3f:c8:43:29:af:00:7d: 06:cf:1c:07:57:1f:a1:36:84:cc:67:dd:0c:f7:97: e6:f2:1f:99:b7:a4:79:bf:93:b5:b1:48:df:bd:54: 42:c7:0e:4b:f8:bc:f6:90:f2:09:e9:35:f5:d6:67: 98:70:08:4e:cd:f0:0d:8c:44:bb:4b:cb:5c:eb:d4: 60:f9:81:9c:4e:c4:1b:bb:cd:18:94:42:ad:e1:0b: db:c5:e8:29:a4:d7:64:4a:ef:61:a5:16:d4:e2:f6: 32:24:fa:fa:a2:89:a5:02:f6:c9:37:89:02:79:b7: bb:b9:aa:1c:63:2e:5a:79:32:c8:4d:4c:25:39:74: da:34:c7:6e:b9:22:d3:8a:a0:0d:19:60:d1:4c:17: 5d:b9:44:bf:4d:19:a3:2d:27:08:8b:16:63:92:0e: 0e:c9:f6:47:02:b6:3e:61:3e:bf:85:f3:fc:df:73: a9:1a:0a:80:b1:15:6c:3e:a8:a2:65:dd:b2:40:fa: d4:f4:b3:f5:67:53:e5:a9:8d:37:8b:3f:2a:5d:04: 3b:6c:75:a1:e5:59:d7:9c:05:0d:81:6e:dd:06:77: 8c:88:99:6e:5f:c9:ee:07:55:b9:83:19:c4:66:dd: 6e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:95:2A:FC:1A:FA:82:50:C8:F3:C9:1F:9F:21:41:22:85:48:93:C0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WJUq_Br6glDI88kfnyFBIoVIk8A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.168.0/23 Signature Algorithm: sha256WithRSAEncryption 38:6c:38:5d:e5:21:af:74:1d:9f:43:e6:11:28:92:53:18:f4: 43:02:66:8c:4f:a2:77:77:e7:ac:ae:ec:b8:63:ef:8b:b6:b0: 6c:3e:42:4c:12:c1:33:28:08:d0:45:ae:b0:c0:44:b3:76:54: 20:de:89:22:cc:ea:ba:dd:e2:d2:f7:96:b4:ca:41:d0:6c:a1: 39:14:93:85:e8:32:45:ee:fe:37:ac:f8:59:15:9b:0b:aa:b0: 2d:04:46:e2:bf:05:67:ea:16:94:a7:f6:bc:37:b3:b3:6a:14: 88:f4:f4:ab:d9:e2:0c:71:12:79:9e:a4:9d:03:18:dc:2a:27: 76:94:7a:c4:38:d4:02:a7:0d:67:29:1c:50:32:64:ab:02:26: 40:92:9f:2a:73:7f:63:da:03:b9:29:69:3f:3e:5b:60:f9:01: 97:0a:a1:27:24:18:96:e0:10:05:69:3b:dc:2b:97:1b:a1:e5: c1:39:41:4d:67:fb:32:55:27:e8:78:c1:e9:90:bb:8b:56:89: 24:2c:83:ab:ac:ea:47:11:4c:83:7b:fe:12:f3:f7:7b:17:2d: e4:95:3c:56:36:eb:af:9d:2d:5d:46:58:0b:f0:3d:26:4c:7f: fc:3d:2c:90:37:ae:9a:71:28:a3:9a:53:35:b8:bd:5f:4f:1f: 7f:cc:f3:92 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC6swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM5NThaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU4OTUyQUZDMUFGQTgy NTBDOEYzQzkxRjlGMjE0MTIyODU0ODkzQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQQ9xFkF5/Wwjo+0qD1BP9N3tKZAkHP8hDKa8AfQbPHAdXH6E2 hMxn3Qz3l+byH5m3pHm/k7WxSN+9VELHDkv4vPaQ8gnpNfXWZ5hwCE7N8A2MRLtL y1zr1GD5gZxOxBu7zRiUQq3hC9vF6Cmk12RK72GlFtTi9jIk+vqiiaUC9sk3iQJ5 t7u5qhxjLlp5MshNTCU5dNo0x265ItOKoA0ZYNFMF125RL9NGaMtJwiLFmOSDg7J 9kcCtj5hPr+F8/zfc6kaCoCxFWw+qKJl3bJA+tT0s/VnU+WpjTeLPypdBDtsdaHl WdecBQ2Bbt0Gd4yImW5fye4HVbmDGcRm3W5vAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWJUq/Br6glDI88kfnyFBIoVIk8AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1dKVXFfQnI2Z2xESTg4a2ZueUZCSW9WSWs4QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaqgwDQYJKoZIhvcNAQELBQADggEBADhsOF3lIa90HZ9D5hEoklMY9EMC ZoxPond356yu7Lhj74u2sGw+QkwSwTMoCNBFrrDARLN2VCDeiSLM6rrd4tL3lrTK QdBsoTkUk4XoMkXu/jes+FkVmwuqsC0ERuK/BWfqFpSn9rw3s7NqFIj09KvZ4gxx EnmepJ0DGNwqJ3aUesQ41AKnDWcpHFAyZKsCJkCSnypzf2PaA7kpaT8+W2D5AZcK oSckGJbgEAVpO9wrlxuh5cE5QU1n+zJVJ+h4wemQu4tWiSQsg6us6kcRTIN7/hLz 93sXLeSVPFY266+dLV1GWAvwPSZMf/w9LJA3rppxKKOaUzW4vV9PH3/M85I= -----END CERTIFICATE-----Generated at Sat Apr 26 18:23:29 2025 by rpki-client