$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_OTFScKuP1CevBfH7QUZo75mjpk.roa File: _OTFScKuP1CevBfH7QUZo75mjpk.roa (raw, json) Hash identifier: n1H3JL0u2zay1NKZ+G7L0vvYrJeCzAg9OY67Ewlk4Ww= Subject key identifier: FC:E4:C5:49:C2:AE:3F:50:9E:BC:17:C7:ED:05:19:A3:BE:66:8E:99 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F9E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_OTFScKuP1CevBfH7QUZo75mjpk.roa Signing time: Tue 10 Jun 2025 11:40:30 +0000 ROA not before: Tue 10 Jun 2025 11:40:30 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.106.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 14:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3998 (0xf9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:40:30 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=FCE4C549C2AE3F509EBC17C7ED0519A3BE668E99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:a9:e8:b7:f3:42:9e:a0:42:16:c6:12:40: 09:c6:b0:e6:e6:e4:8d:de:46:a0:76:33:4e:ab:12: 98:78:26:6c:b2:41:8e:01:fc:d7:09:88:27:d3:c2: 6c:10:74:98:17:31:b6:6c:01:cf:9f:c6:aa:df:6e: 8e:4d:85:9a:3e:07:9e:5e:90:c4:24:93:0b:b4:24: 71:f6:1a:45:f4:06:e1:29:40:6c:72:5a:cc:55:57: 75:80:65:65:f5:89:91:7a:09:6e:34:82:81:ba:ac: bb:a6:68:6f:57:2d:2a:2d:a6:dc:0b:66:a3:c2:64: 57:34:b2:3c:d7:90:50:08:e5:e9:bf:56:58:5f:40: b9:93:3c:3a:9e:ac:88:8e:0e:42:48:25:71:c6:e5: 53:3c:08:2e:10:1b:d4:d0:c2:24:10:8b:6e:7e:0b: fb:6b:c8:f8:b0:de:2f:5d:e5:d7:33:33:99:e5:94: f0:d4:6c:71:31:1d:88:5b:3e:77:7e:30:15:94:10: 13:c8:c2:d9:0f:2f:cf:c4:86:fa:c2:a5:82:d9:3d: ea:c3:0b:ce:b9:1c:6c:fa:36:11:e2:c0:0b:90:a8: 10:c6:cb:7d:a0:ce:3d:24:51:1a:fe:ad:bb:6b:cf: f6:55:67:97:07:f2:b4:3b:db:3e:a5:72:10:00:97: 8e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E4:C5:49:C2:AE:3F:50:9E:BC:17:C7:ED:05:19:A3:BE:66:8E:99 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_OTFScKuP1CevBfH7QUZo75mjpk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.175.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:79:84:48:92:cd:80:96:90:0f:31:30:a6:51:c4:c1:94:55: 6e:e1:f5:9e:34:24:02:88:81:6e:2e:c6:28:aa:e0:ae:6e:8b: 22:d2:eb:b9:72:3a:0f:d9:fb:80:9b:c8:f6:6f:09:d6:15:22: 87:11:f6:81:35:72:a5:02:b2:c7:0c:25:cb:2b:3d:f2:18:d0: 8f:e1:5f:0b:f8:5d:e0:42:32:a4:41:98:2c:b7:52:27:40:ab: 75:eb:53:1b:ff:cf:77:3f:b6:1c:bd:8b:ff:25:03:f5:bc:a3: 5f:cd:d2:83:09:80:dd:ea:46:84:78:bf:40:d0:70:e8:af:ed: 9a:a2:45:12:91:44:b0:7e:52:fe:da:c8:32:a8:11:2e:2c:e1: f3:d9:eb:02:b9:5a:ba:1c:7b:96:f3:eb:35:66:ac:0e:51:5f: d1:61:13:8e:54:9e:d6:62:25:06:d3:2d:d9:55:7d:e2:5b:0a: 6a:1b:23:fb:59:d8:62:27:0a:fe:76:59:27:13:64:7d:a8:7a: 87:2e:6f:8a:fe:aa:fd:a7:7e:29:41:cd:08:44:72:84:88:66: b9:66:24:22:17:3d:49:46:b9:18:53:f9:8b:01:69:83:a0:fe: 0b:0f:7c:91:38:eb:e4:70:14:3d:0c:24:e4:11:32:85:31:d3: fb:23:d5:e6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQwMzBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEZDRTRDNTQ5QzJBRTNG NTA5RUJDMTdDN0VEMDUxOUEzQkU2NjhFOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8Z6not/NCnqBCFsYSQAnGsObm5I3eRqB2M06rEph4JmyyQY4B /NcJiCfTwmwQdJgXMbZsAc+fxqrfbo5NhZo+B55ekMQkkwu0JHH2GkX0BuEpQGxy WsxVV3WAZWX1iZF6CW40goG6rLumaG9XLSotptwLZqPCZFc0sjzXkFAI5em/Vlhf QLmTPDqerIiODkJIJXHG5VM8CC4QG9TQwiQQi25+C/tryPiw3i9d5dczM5nllPDU bHExHYhbPnd+MBWUEBPIwtkPL8/EhvrCpYLZPerDC865HGz6NhHiwAuQqBDGy32g zj0kURr+rbtrz/ZVZ5cH8rQ72z6lchAAl44BAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/OTFScKuP1CevBfH7QUZo75mjpkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L19PVEZTY0t1UDFDZXZCZkg3UVVabzc1bWpway5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaq8wDQYJKoZIhvcNAQELBQADggEBAF15hEiSzYCWkA8xMKZRxMGUVW7h 9Z40JAKIgW4uxiiq4K5uiyLS67lyOg/Z+4CbyPZvCdYVIocR9oE1cqUCsscMJcsr PfIY0I/hXwv4XeBCMqRBmCy3UidAq3XrUxv/z3c/thy9i/8lA/W8o1/N0oMJgN3q RoR4v0DQcOiv7ZqiRRKRRLB+Uv7ayDKoES4s4fPZ6wK5Wroce5bz6zVmrA5RX9Fh E45UntZiJQbTLdlVfeJbCmobI/tZ2GInCv52WScTZH2oeocub4r+qv2nfilBzQhE coSIZrlmJCIXPUlGuRhT+YsBaYOg/gsPfJE46+RwFD0MJOQRMoUx0/sj1eY= -----END CERTIFICATE-----Generated at Sat Jun 21 16:53:04 2025 by rpki-client