$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yba2BoWploqvCGy-4qzi4Cb40BQ.roa File: Yba2BoWploqvCGy-4qzi4Cb40BQ.roa (raw, json) Hash identifier: 8n0yRD5hG5y8E2Qqr+ssATuzdLVSob2Nlo4UNcIIAJ8= Subject key identifier: 61:B6:B6:06:85:A9:96:8A:AF:08:6C:BE:E2:AC:E2:E0:26:F8:D0:14 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F77 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yba2BoWploqvCGy-4qzi4Cb40BQ.roa Signing time: Tue 10 Jun 2025 11:32:37 +0000 ROA not before: Tue 10 Jun 2025 11:32:37 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.106.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3959 (0xf77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:37 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=61B6B60685A9968AAF086CBEE2ACE2E026F8D014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:83:87:28:52:6e:39:12:6e:7e:7b:4f:9e:be: 9a:65:c0:2f:04:6e:54:22:dc:6b:74:b8:0b:72:76: 26:60:5c:e5:7e:81:70:37:0d:71:3b:8c:b3:2b:9d: f4:30:53:4c:3f:e0:8e:a2:a9:5b:9d:5f:84:19:77: 1a:c5:e1:99:a0:11:1f:6c:b0:8e:2b:1a:10:ea:c2: 73:e7:eb:30:23:55:c5:38:16:f2:b3:0c:b9:0a:e1: f0:85:44:8a:35:b3:53:95:2a:62:5c:50:9e:cf:60: a6:8e:98:9b:b2:c7:85:61:26:ef:ff:7d:f8:49:8d: a5:9d:25:52:a6:4c:fe:25:58:3b:92:65:8d:b6:02: 91:44:6c:83:44:f2:e9:cf:aa:42:76:e8:fd:5b:4e: a6:d6:f1:9b:68:53:df:88:7c:0f:bf:c6:4b:e1:e4: c4:e0:7f:e2:11:17:8b:17:6d:c4:2a:89:b0:8e:a7: ef:b8:ce:ad:66:c6:6d:33:ec:fc:20:fb:86:b6:7a: 76:47:43:30:ed:dc:af:b0:1f:cd:f4:a1:70:f9:ec: 53:c1:41:55:f9:c8:b5:cc:e6:aa:17:1d:d7:5e:51: cd:22:a1:a0:a7:bd:bc:8a:dd:93:5d:b4:99:5a:3e: b3:4f:9f:24:2c:41:cb:3b:48:22:9b:08:25:64:5d: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B6:B6:06:85:A9:96:8A:AF:08:6C:BE:E2:AC:E2:E0:26:F8:D0:14 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yba2BoWploqvCGy-4qzi4Cb40BQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.188.0/24 Signature Algorithm: sha256WithRSAEncryption 19:06:02:5d:03:fb:e8:da:fb:00:ff:98:ca:6a:24:1d:d8:73: 61:0a:8d:de:92:a3:41:61:7a:b9:f5:0b:4e:c5:be:e1:f7:54: b5:1a:63:79:9e:24:03:91:71:23:e4:69:1b:58:ba:f8:9c:4b: 39:79:ee:5a:5e:77:37:7b:20:52:40:a6:2e:3d:3e:2a:3b:2d: 64:f6:4f:09:b2:2b:35:be:99:8d:f6:38:06:f2:d8:dc:5a:ee: 01:18:47:8b:4d:de:da:a8:98:96:a0:59:27:58:e3:e9:94:12: 50:1f:ea:80:13:4a:5c:e0:3e:1c:39:3a:8d:fc:cd:ab:40:7b: cf:07:50:39:63:84:41:28:a9:5b:ea:4b:29:72:ed:43:05:77: 6e:29:87:2e:ab:39:54:47:1f:7d:be:bf:18:a5:6e:e2:79:45: 33:ff:be:02:ed:ba:d9:16:3d:da:14:ff:5a:5b:01:ff:30:ec: 84:f5:a0:a3:17:db:4b:5f:5b:05:60:36:ee:14:a7:c5:a5:67: 9e:8e:4e:12:4d:23:e3:64:f8:54:b8:a1:32:72:b4:01:16:99: c5:1e:09:55:21:b8:12:01:da:d5:63:2d:fb:35:28:d2:ea:84: 7e:b7:f5:41:46:c9:e0:a4:5c:a3:ed:8d:50:be:55:b3:46:9c: 18:41:55:42 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMzdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDYxQjZCNjA2ODVBOTk2 OEFBRjA4NkNCRUUyQUNFMkUwMjZGOEQwMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeg4coUm45Em5+e0+evpplwC8EblQi3Gt0uAtydiZgXOV+gXA3 DXE7jLMrnfQwU0w/4I6iqVudX4QZdxrF4ZmgER9ssI4rGhDqwnPn6zAjVcU4FvKz DLkK4fCFRIo1s1OVKmJcUJ7PYKaOmJuyx4VhJu//ffhJjaWdJVKmTP4lWDuSZY22 ApFEbINE8unPqkJ26P1bTqbW8ZtoU9+IfA+/xkvh5MTgf+IRF4sXbcQqibCOp++4 zq1mxm0z7Pwg+4a2enZHQzDt3K+wH830oXD57FPBQVX5yLXM5qoXHddeUc0ioaCn vbyK3ZNdtJlaPrNPnyQsQcs7SCKbCCVkXZwpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYba2BoWploqvCGy+4qzi4Cb40BQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1liYTJCb1dwbG9xdkNHeS00cXppNENiNDBCUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxarwwDQYJKoZIhvcNAQELBQADggEBABkGAl0D++ja+wD/mMpqJB3Yc2EK jd6So0Fhern1C07FvuH3VLUaY3meJAORcSPkaRtYuvicSzl57lpedzd7IFJApi49 Pio7LWT2TwmyKzW+mY32OAby2Nxa7gEYR4tN3tqomJagWSdY4+mUElAf6oATSlzg Phw5Oo38zatAe88HUDljhEEoqVvqSyly7UMFd24phy6rOVRHH32+vxilbuJ5RTP/ vgLtutkWPdoU/1pbAf8w7IT1oKMX20tfWwVgNu4Up8WlZ56OThJNI+Nk+FS4oTJy tAEWmcUeCVUhuBIB2tVjLfs1KNLqhH639UFGyeCkXKPtjVC+VbNGnBhBVUI= -----END CERTIFICATE-----Generated at Sun Jun 22 08:18:28 2025 by rpki-client