$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/atSi-LtHeWNrXCUBTkXHKGD9f-Y.roa File: atSi-LtHeWNrXCUBTkXHKGD9f-Y.roa (raw, json) Hash identifier: 3ReoJB932u9SsWI1bNB0s2O+gQmCzaFkcBUU/XR/RIM= Subject key identifier: 6A:D4:A2:F8:BB:47:79:63:6B:5C:25:01:4E:45:C7:28:60:FD:7F:E6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F74 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/atSi-LtHeWNrXCUBTkXHKGD9f-Y.roa Signing time: Tue 10 Jun 2025 11:32:36 +0000 ROA not before: Tue 10 Jun 2025 11:32:36 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.110.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 14:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3956 (0xf74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:32:36 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=6AD4A2F8BB4779636B5C25014E45C72860FD7FE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3a:65:67:f5:dc:0a:67:fd:8c:37:eb:da:ba: 43:4b:1a:a5:a4:f8:38:64:7f:e2:62:95:07:a3:84: fb:04:ac:7f:74:8b:96:46:33:4e:33:69:aa:12:8e: d6:75:7f:09:10:2b:87:d8:27:a1:43:9a:b3:3f:2b: 7b:62:0f:8f:66:08:7a:3f:d2:2e:9b:ca:fe:22:af: f8:f8:c3:ad:64:c7:17:14:5c:1c:7d:d7:29:a7:f7: f9:81:6f:f3:ae:d6:86:48:fa:68:9f:9a:7d:78:8c: ba:0e:2e:d7:b4:d3:d2:54:36:da:b3:c9:bc:4d:d4: 82:e1:1e:6e:2c:e9:6d:fa:b7:14:6a:f5:88:62:fa: 00:57:56:61:99:33:25:a3:93:a7:42:ec:f4:37:ce: b9:7b:77:e0:e0:ac:fe:34:aa:2b:9c:0c:9c:4c:0f: 49:10:b7:cc:ab:67:c3:5e:3e:49:95:d0:53:d2:a0: 10:94:dc:ea:39:e9:ab:c0:97:c5:aa:28:c9:d8:85: 35:3b:b2:b3:4a:d3:6a:d7:bb:42:9e:4e:6f:16:1e: f4:5b:1f:15:f5:6c:66:29:ab:83:98:7f:cc:a5:33: 75:1f:75:1a:a1:fa:54:f7:be:eb:a4:ae:46:44:c8: 4d:bc:76:ce:5a:5f:94:53:f6:4c:4a:34:97:89:17: 12:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D4:A2:F8:BB:47:79:63:6B:5C:25:01:4E:45:C7:28:60:FD:7F:E6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/atSi-LtHeWNrXCUBTkXHKGD9f-Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.110.128.0/18 Signature Algorithm: sha256WithRSAEncryption 86:be:c1:36:4f:2d:bf:8a:53:a7:67:51:4e:79:ec:0e:c4:f1: 0b:4c:8a:2c:d9:9f:a8:63:92:67:b1:d9:93:6f:6c:6e:d2:eb: 2b:d3:d0:54:23:e1:fd:f0:6f:36:68:45:3a:25:e2:48:0e:16: 67:69:25:ed:42:d1:8c:b0:d6:40:02:a0:c9:95:e5:4a:a1:25: 4f:c8:f5:8e:5c:d6:f6:57:f4:22:67:c2:2f:e0:11:b2:97:e6: b9:e5:7b:72:ab:01:25:e0:96:22:6f:7c:a1:ae:9d:17:37:bd: 11:ec:b7:73:fa:17:9f:81:7b:25:73:de:ea:7e:26:4a:17:ec: 63:7b:91:36:4c:89:ae:b2:cf:27:ef:76:ce:fe:f2:0a:4d:30: df:e5:59:0d:24:6f:4a:62:3c:01:9d:c3:18:69:7f:d2:6a:79: 95:65:f1:f5:81:0c:68:46:05:bf:09:22:63:77:04:30:24:52: d1:fd:c2:e0:53:a9:09:47:ce:7a:ff:f6:0c:f0:14:f5:bb:b5: aa:43:e3:77:c2:a4:45:82:23:d2:f8:2c:af:91:ae:59:44:77: 9d:9d:96:e1:b6:9b:6e:1f:4e:9b:32:89:ec:b0:97:71:ed:c8: cc:9c:71:8a:f6:bf:58:2e:86:d6:15:32:8c:ea:19:76:c7:44: 6a:a7:34:01 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTMyMzZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDZBRDRBMkY4QkI0Nzc5 NjM2QjVDMjUwMTRFNDVDNzI4NjBGRDdGRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWOmVn9dwKZ/2MN+vaukNLGqWk+Dhkf+JilQejhPsErH90i5ZG M04zaaoSjtZ1fwkQK4fYJ6FDmrM/K3tiD49mCHo/0i6byv4ir/j4w61kxxcUXBx9 1ymn9/mBb/Ou1oZI+mifmn14jLoOLte009JUNtqzybxN1ILhHm4s6W36txRq9Yhi +gBXVmGZMyWjk6dC7PQ3zrl7d+DgrP40qiucDJxMD0kQt8yrZ8NePkmV0FPSoBCU 3Oo56avAl8WqKMnYhTU7srNK02rXu0KeTm8WHvRbHxX1bGYpq4OYf8ylM3UfdRqh +lT3vuukrkZEyE28ds5aX5RT9kxKNJeJFxI7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUatSi+LtHeWNrXCUBTkXHKGD9f+YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2F0U2ktTHRIZVdOclhDVUJUa1hIS0dEOWYtWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYxboAwDQYJKoZIhvcNAQELBQADggEBAIa+wTZPLb+KU6dnUU557A7E8QtM iizZn6hjkmex2ZNvbG7S6yvT0FQj4f3wbzZoRTol4kgOFmdpJe1C0Yyw1kACoMmV 5UqhJU/I9Y5c1vZX9CJnwi/gEbKX5rnle3KrASXgliJvfKGunRc3vRHst3P6F5+B eyVz3up+JkoX7GN7kTZMia6yzyfvds7+8gpNMN/lWQ0kb0piPAGdwxhpf9JqeZVl 8fWBDGhGBb8JImN3BDAkUtH9wuBTqQlHznr/9gzwFPW7tapD43fCpEWCI9L4LK+R rllEd52dluG2m24fTpsyieywl3HtyMyccYr2v1guhtYVMozqGXbHRGqnNAE= -----END CERTIFICATE-----Generated at Sat Jun 21 16:53:02 2025 by rpki-client