$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bgAVfeV4Z_9_u7QnqmJ_FBefFBg.roa File: bgAVfeV4Z_9_u7QnqmJ_FBefFBg.roa (raw, json) Hash identifier: BcHH0LadCNOR+Mny9MNk4qanWwONlay5QmkaGIOvsNQ= Subject key identifier: 6E:00:15:7D:E5:78:67:FF:7F:BB:B4:27:AA:62:7F:14:17:9F:14:18 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F17 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bgAVfeV4Z_9_u7QnqmJ_FBefFBg.roa Signing time: Tue 10 Jun 2025 11:20:16 +0000 ROA not before: Tue 10 Jun 2025 11:20:16 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.108.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3863 (0xf17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:20:16 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=6E00157DE57867FF7FBBB427AA627F14179F1418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:ff:57:e7:3b:91:11:02:84:54:65:1e:c0: 24:46:48:93:b3:12:2b:d0:a0:ed:c0:6e:14:d5:29: 20:cf:7a:20:c8:0f:a4:b7:ec:4f:ec:5e:ef:93:b1: 66:bd:32:75:81:0e:86:a9:6d:15:7e:1a:81:d7:26: 92:c8:ec:24:ef:11:48:22:27:5c:d6:98:23:96:59: 22:e0:eb:7d:9b:fa:0b:71:4c:28:50:25:59:a7:91: de:67:cd:80:b0:52:5c:7e:04:7e:ab:75:eb:b3:7f: 12:43:5a:a9:04:bd:db:b0:0e:18:6c:bc:a7:12:20: 6e:49:0f:9a:b0:dc:79:3a:c1:ec:32:64:e5:b3:d6: 3a:0e:9e:d2:f3:35:03:ba:96:ec:98:bb:d1:4b:3e: c6:17:a9:b8:9a:51:56:9b:db:2e:68:01:eb:98:9c: a2:06:27:97:92:09:3f:0f:a7:7a:f3:74:29:01:5a: ca:f2:9e:30:75:7b:f7:ae:36:2f:3a:a0:68:79:b9: ac:56:51:76:e2:3d:66:13:3b:9b:b9:63:b0:b1:92: b8:7f:f1:7a:d5:65:56:45:69:6c:33:9f:21:be:95: bc:86:1c:21:59:18:f1:2d:e9:65:6f:dd:98:b6:c2: 98:95:76:bb:22:f4:58:e7:df:f7:c5:1d:0b:86:4d: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:00:15:7D:E5:78:67:FF:7F:BB:B4:27:AA:62:7F:14:17:9F:14:18 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bgAVfeV4Z_9_u7QnqmJ_FBefFBg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.108.239.0/24 Signature Algorithm: sha256WithRSAEncryption 35:35:bd:e2:b2:f5:a1:b9:fc:c7:55:f6:19:15:3e:a5:f4:49: d3:ef:07:e2:a1:ea:2d:37:d9:86:83:f2:6d:e4:b8:ef:9a:c6: 33:6c:fb:d0:2e:df:3b:04:8a:41:6e:84:1d:04:f3:8a:29:34: a2:41:5f:1d:4d:0b:94:70:f2:47:21:d7:96:3e:e2:da:ea:c4: e2:e1:90:25:4e:ea:57:78:29:ba:02:04:04:b6:60:09:9e:dc: b7:f8:ad:c4:47:9c:39:58:b8:29:18:3a:e8:63:fa:98:95:de: 72:64:53:e5:c7:7d:2c:ee:be:b9:20:80:1d:24:b4:bc:03:4e: e1:15:81:3c:e9:95:3a:29:35:18:b8:4b:7c:27:8d:92:bd:80: 42:8f:0e:79:09:db:c9:90:71:f7:22:8e:41:ec:d3:7f:12:58: 90:d4:ba:70:d1:55:4a:8d:9c:c5:a5:11:3a:f0:ed:cc:e2:52: 46:56:e9:66:fe:c6:ee:88:96:6d:6f:4e:8c:c1:ac:47:92:4d: 37:a0:da:73:62:ad:9e:59:d1:26:60:5e:a5:f8:08:31:73:1c: 47:99:12:16:3e:74:38:4d:2b:00:51:bc:72:b6:cd:ff:ea:0c: a1:e3:a9:a4:86:53:08:73:ba:5d:06:1e:2a:87:21:8d:9b:47: f7:08:fd:1f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDxcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTIwMTZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDZFMDAxNTdERTU3ODY3 RkY3RkJCQjQyN0FBNjI3RjE0MTc5RjE0MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Q/9X5zuREQKEVGUewCRGSJOzEivQoO3AbhTVKSDPeiDID6S3 7E/sXu+TsWa9MnWBDoapbRV+GoHXJpLI7CTvEUgiJ1zWmCOWWSLg632b+gtxTChQ JVmnkd5nzYCwUlx+BH6rdeuzfxJDWqkEvduwDhhsvKcSIG5JD5qw3Hk6wewyZOWz 1joOntLzNQO6luyYu9FLPsYXqbiaUVab2y5oAeuYnKIGJ5eSCT8Pp3rzdCkBWsry njB1e/euNi86oGh5uaxWUXbiPWYTO5u5Y7Cxkrh/8XrVZVZFaWwznyG+lbyGHCFZ GPEt6WVv3Zi2wpiVdrsi9Fjn3/fFHQuGTZljAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbgAVfeV4Z/9/u7QnqmJ/FBefFBgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2JnQVZmZVY0Wl85X3U3UW5xbUpfRkJlZkZCZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxbO8wDQYJKoZIhvcNAQELBQADggEBADU1veKy9aG5/MdV9hkVPqX0SdPv B+Kh6i032YaD8m3kuO+axjNs+9Au3zsEikFuhB0E84opNKJBXx1NC5Rw8kch15Y+ 4trqxOLhkCVO6ld4KboCBAS2YAme3Lf4rcRHnDlYuCkYOuhj+piV3nJkU+XHfSzu vrkggB0ktLwDTuEVgTzplTopNRi4S3wnjZK9gEKPDnkJ28mQcfcijkHs038SWJDU unDRVUqNnMWlETrw7cziUkZW6Wb+xu6Ilm1vTozBrEeSTTeg2nNirZ5Z0SZgXqX4 CDFzHEeZEhY+dDhNKwBRvHK2zf/qDKHjqaSGUwhzul0GHiqHIY2bR/cI/R8= -----END CERTIFICATE-----Generated at Sat Jun 21 10:25:09 2025 by rpki-client