$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YuMLLxjX5bnztpmv2zkz9QDztNc.roa File: YuMLLxjX5bnztpmv2zkz9QDztNc.roa (raw, json) Hash identifier: HFg1scKVcRs294FwZU+7Iq9xnzDC5DaZk6Hz6JW0j+A= Subject key identifier: 62:E3:0B:2F:18:D7:E5:B9:F3:B6:99:AF:DB:39:33:F5:00:F3:B4:D7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EB4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YuMLLxjX5bnztpmv2zkz9QDztNc.roa Signing time: Tue 10 Jun 2025 11:04:51 +0000 ROA not before: Tue 10 Jun 2025 11:04:51 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.111.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 15:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3764 (0xeb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:04:51 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=62E30B2F18D7E5B9F3B699AFDB3933F500F3B4D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:72:86:4d:82:e1:67:7c:2a:01:a2:5f:f9:27: a5:09:95:be:eb:b4:03:54:87:05:d2:39:52:a1:dc: f3:0d:1a:02:98:83:2d:18:09:03:40:87:51:43:a1: 0d:6d:f2:c3:e1:1e:42:e4:72:c0:fe:24:62:4a:b7: 87:3d:a5:6e:cc:a1:25:9a:90:cd:a4:c1:18:69:83: ba:79:96:fe:ef:af:40:fc:8a:c8:ca:73:d5:84:20: 78:81:83:8b:fc:71:11:f5:dd:de:66:27:39:eb:21: 17:38:5c:cd:79:61:91:3d:28:12:70:60:82:83:fc: 3a:56:4c:d0:fa:76:c6:34:df:d7:cb:47:31:97:4f: bd:c6:54:fa:1b:e1:2c:fe:ca:b6:89:a8:28:35:d7: 7e:25:94:0c:90:eb:d7:a1:96:94:bd:d2:0d:4a:40: 6b:f9:cd:bb:8c:34:03:1b:25:d3:a3:8d:e1:e3:8a: 7f:6a:1d:b5:70:37:92:5e:a6:56:f6:0d:2e:2c:ce: 09:b8:67:02:26:1c:30:13:21:a4:f0:c3:3e:bc:a0: 2c:03:c8:4a:9c:ab:55:ae:58:92:63:96:4e:b0:46: 07:e3:31:8a:51:d2:54:c9:df:10:ca:31:27:47:9e: 41:d0:ca:9a:d1:01:30:99:4f:88:8a:28:41:01:0d: c1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E3:0B:2F:18:D7:E5:B9:F3:B6:99:AF:DB:39:33:F5:00:F3:B4:D7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YuMLLxjX5bnztpmv2zkz9QDztNc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.111.0.0/17 Signature Algorithm: sha256WithRSAEncryption b1:04:c6:b0:2c:a3:f6:af:98:77:59:fc:06:c5:8a:be:10:d5: 8d:ff:ed:4e:93:69:bc:69:05:db:3c:15:1e:7c:b5:b6:e3:f9: 18:f3:f2:4d:07:dd:ca:65:f6:74:f5:72:ee:01:07:31:a4:1b: 4c:65:b4:15:84:49:6a:57:39:a6:98:db:d4:fb:42:5d:8e:1f: c0:0d:f8:01:6f:33:3a:bd:19:16:9a:98:7a:90:b4:74:19:de: d3:ed:d6:89:77:3f:84:95:a3:b6:da:ed:41:c0:24:b5:9c:c2: 7e:55:b7:34:df:c0:13:d0:f4:6f:5e:a4:01:95:12:5a:42:b6: 22:d4:84:b0:1f:4d:74:32:41:f3:b3:cc:7d:38:64:cd:e9:a8: fd:25:52:c3:60:f4:c5:b5:40:fd:23:4e:cd:4f:69:49:cd:c6: da:7a:6e:cc:be:e3:1a:a9:c5:f0:a5:5f:db:ec:b9:e2:5b:b6: ab:9e:ad:8b:dc:0d:83:fc:e2:8a:db:d9:2f:c2:78:0d:17:a0: f6:51:63:c5:7b:f8:c6:61:88:51:ee:09:9f:95:60:40:16:c2: c3:58:3e:2f:b3:90:b5:fa:52:7b:06:83:89:bd:e3:41:17:46: 13:e0:67:ec:e8:01:90:12:2a:da:57:80:74:44:c0:54:70:a5: 32:c5:2c:4d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDrQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA0NTFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDYyRTMwQjJGMThEN0U1 QjlGM0I2OTlBRkRCMzkzM0Y1MDBGM0I0RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdcoZNguFnfCoBol/5J6UJlb7rtANUhwXSOVKh3PMNGgKYgy0Y CQNAh1FDoQ1t8sPhHkLkcsD+JGJKt4c9pW7MoSWakM2kwRhpg7p5lv7vr0D8isjK c9WEIHiBg4v8cRH13d5mJznrIRc4XM15YZE9KBJwYIKD/DpWTND6dsY039fLRzGX T73GVPob4Sz+yraJqCg1134llAyQ69ehlpS90g1KQGv5zbuMNAMbJdOjjeHjin9q HbVwN5Jeplb2DS4szgm4ZwImHDATIaTwwz68oCwDyEqcq1WuWJJjlk6wRgfjMYpR 0lTJ3xDKMSdHnkHQyprRATCZT4iKKEEBDcHvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYuMLLxjX5bnztpmv2zkz9QDztNcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1l1TUxMeGpYNWJuenRwbXYyemt6OVFEenROYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcxbwAwDQYJKoZIhvcNAQELBQADggEBALEExrAso/avmHdZ/AbFir4Q1Y3/ 7U6TabxpBds8FR58tbbj+Rjz8k0H3cpl9nT1cu4BBzGkG0xltBWESWpXOaaY29T7 Ql2OH8AN+AFvMzq9GRaamHqQtHQZ3tPt1ol3P4SVo7ba7UHAJLWcwn5VtzTfwBPQ 9G9epAGVElpCtiLUhLAfTXQyQfOzzH04ZM3pqP0lUsNg9MW1QP0jTs1PaUnNxtp6 bsy+4xqpxfClX9vsueJbtquerYvcDYP84orb2S/CeA0XoPZRY8V7+MZhiFHuCZ+V YEAWwsNYPi+zkLX6UnsGg4m940EXRhPgZ+zoAZASKtpXgHREwFRwpTLFLE0= -----END CERTIFICATE-----Generated at Sun Jun 22 18:31:30 2025 by rpki-client