$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z6PsadWoTrW4PFs7XmZgWWbEV1Y.roa File: Z6PsadWoTrW4PFs7XmZgWWbEV1Y.roa (raw, json) Hash identifier: hMaM4si6IlGRpoxos1AkfHkYInTzgyTpOfjC6TxDYF0= Subject key identifier: 67:A3:EC:69:D5:A8:4E:B5:B8:3C:5B:3B:5E:66:60:59:66:C4:57:56 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C79 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z6PsadWoTrW4PFs7XmZgWWbEV1Y.roa Signing time: Tue 01 Apr 2025 02:00:39 +0000 ROA not before: Tue 01 Apr 2025 02:00:39 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3193 (0xc79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:00:39 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=67A3EC69D5A84EB5B83C5B3B5E66605966C45756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fa:d7:e7:bd:fb:1b:be:a5:09:28:57:f0:d0: 5c:df:35:1a:e7:0c:f7:7b:eb:97:01:f4:3d:28:c9: 06:0a:83:e0:a2:0c:49:cc:db:31:9f:c7:99:79:9e: 8c:74:d4:5a:28:bf:bc:30:6f:a1:2c:ec:bf:24:91: 18:e4:f1:eb:6c:53:ef:56:40:f9:df:21:09:74:3d: 2a:80:4d:16:79:6e:7a:d0:33:72:f9:a7:08:ab:54: ec:64:60:39:f1:a8:a2:8d:9a:cf:83:99:86:14:02: 61:93:95:f5:fc:35:4b:09:d2:ce:08:a2:a7:3b:26: 80:1b:2e:0a:44:31:91:8c:23:bb:a7:1e:72:93:c2: 16:27:f7:05:39:71:ad:af:9d:be:c2:ee:9a:df:f1: 99:a0:e8:96:1d:e4:c4:81:91:03:0c:8c:93:e2:ed: 8b:64:cf:22:7c:c7:34:ac:9e:5a:bd:3a:03:fe:07: 38:b4:e3:41:6a:cd:6f:f6:ae:be:0d:5e:91:4c:e6: f0:66:a2:ca:3d:4e:fb:f0:7f:61:c4:04:bd:4d:63: ed:b4:22:3d:42:25:c3:9b:4b:d2:f3:37:a6:b4:b8: 7a:61:d0:de:61:bf:28:d5:cb:7a:23:36:ca:6f:48: 1c:dd:a2:bf:51:39:b6:f2:8b:76:1c:e5:23:be:96: 9d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A3:EC:69:D5:A8:4E:B5:B8:3C:5B:3B:5E:66:60:59:66:C4:57:56 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z6PsadWoTrW4PFs7XmZgWWbEV1Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.212.0/24 Signature Algorithm: sha256WithRSAEncryption ce:f8:c9:10:c1:f8:c7:cc:be:c1:a5:bd:ac:aa:03:91:9a:46: 4b:9c:68:7a:5e:1c:b6:b3:21:ee:e6:e0:18:4b:e7:af:21:2a: 58:74:7d:91:9f:f7:01:14:08:f2:87:c1:09:99:b9:e9:67:dd: 6b:aa:95:8f:ff:79:e1:d8:8f:5e:69:42:c5:6d:ef:70:4f:ab: c1:93:06:ee:df:cb:47:7f:75:78:55:59:3a:99:ab:a8:9f:f7: 8c:53:57:2c:b4:58:56:1f:68:bf:ec:49:6b:64:9c:a9:6e:bc: 80:83:fe:ac:07:d9:d5:88:6c:20:2e:b9:cf:54:42:e6:f7:5e: 95:5f:de:f3:fd:e1:f3:30:ec:ec:63:98:a0:04:87:f2:9f:bf: 71:f6:60:a3:60:65:a0:d7:b0:59:a8:a1:7d:91:90:ec:11:db: 60:14:96:71:ce:4c:04:3d:fd:8d:d0:46:27:c3:5e:99:7f:e1: 7f:fd:21:36:23:51:a0:79:3d:4d:72:08:44:81:e7:32:50:da: 8c:a6:d7:1c:4d:5b:a9:2d:90:2a:15:6e:2c:11:81:74:aa:de: 9b:d2:f6:09:6a:4b:14:e2:0c:b8:45:78:09:18:15:fb:98:0b: d8:a6:e0:8e:ca:98:90:29:89:01:eb:6e:74:b5:f6:7f:7f:82: ec:61:47:96 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAwMzlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY3QTNFQzY5RDVBODRF QjVCODNDNUIzQjVFNjY2MDU5NjZDNDU3NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo+tfnvfsbvqUJKFfw0FzfNRrnDPd765cB9D0oyQYKg+CiDEnM 2zGfx5l5nox01Foov7wwb6Es7L8kkRjk8etsU+9WQPnfIQl0PSqATRZ5bnrQM3L5 pwirVOxkYDnxqKKNms+DmYYUAmGTlfX8NUsJ0s4Ioqc7JoAbLgpEMZGMI7unHnKT whYn9wU5ca2vnb7C7prf8Zmg6JYd5MSBkQMMjJPi7YtkzyJ8xzSsnlq9OgP+Bzi0 40FqzW/2rr4NXpFM5vBmoso9Tvvwf2HEBL1NY+20Ij1CJcObS9LzN6a0uHph0N5h vyjVy3ojNspvSBzdor9RObbyi3Yc5SO+lp0/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZ6PsadWoTrW4PFs7XmZgWWbEV1YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1o2UHNhZFdvVHJXNFBGczdYbVpnV1diRVYxWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxatQwDQYJKoZIhvcNAQELBQADggEBAM74yRDB+MfMvsGlvayqA5GaRkuc aHpeHLazIe7m4BhL568hKlh0fZGf9wEUCPKHwQmZueln3WuqlY//eeHYj15pQsVt 73BPq8GTBu7fy0d/dXhVWTqZq6if94xTVyy0WFYfaL/sSWtknKluvICD/qwH2dWI bCAuuc9UQub3XpVf3vP94fMw7OxjmKAEh/Kfv3H2YKNgZaDXsFmooX2RkOwR22AU lnHOTAQ9/Y3QRifDXpl/4X/9ITYjUaB5PU1yCESB5zJQ2oym1xxNW6ktkCoVbiwR gXSq3pvS9glqSxTiDLhFeAkYFfuYC9im4I7KmJApiQHrbnS19n9/guxhR5Y= -----END CERTIFICATE-----Generated at Sat Apr 26 18:21:05 2025 by rpki-client