$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/c5vzmEgq9qJCdym34WuXTPOZZDM.roa File: c5vzmEgq9qJCdym34WuXTPOZZDM.roa (raw, json) Hash identifier: niANi52r1nDQyzXIJz+jbBik/jC1RstYPj2dkfAc4i4= Subject key identifier: 73:9B:F3:98:48:2A:F6:A2:42:77:29:B7:E1:6B:97:4C:F3:99:64:33 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F08 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c5vzmEgq9qJCdym34WuXTPOZZDM.roa Signing time: Tue 10 Jun 2025 11:16:51 +0000 ROA not before: Tue 10 Jun 2025 11:16:51 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.102.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3848 (0xf08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:16:51 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=739BF398482AF6A2427729B7E16B974CF3996433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:74:f5:56:9e:b4:a4:6d:2a:ec:36:6a:20: 9a:ea:f1:fe:4c:54:8d:62:b3:a4:44:0f:38:54:39: 04:28:81:fa:af:66:cf:f4:9e:26:f3:b8:00:24:69: 72:52:3b:a5:02:87:72:5b:d5:4c:9b:54:02:ad:10: e3:92:56:bb:03:24:59:09:39:96:7a:b4:9d:f9:79: 67:4e:b5:b2:b4:28:2c:a6:84:51:27:c8:4c:83:7a: a9:de:f8:a6:c6:fb:93:50:e1:ad:bd:ec:ca:26:5b: 2b:35:21:37:a3:81:f6:5c:39:a3:62:b6:2b:64:38: b9:51:08:4e:ed:e2:12:92:fe:b2:e7:2d:5c:70:90: 35:94:55:88:ca:ec:d5:37:0b:4c:60:a6:8f:c1:44: f9:10:39:21:b5:61:a3:61:a8:18:de:3c:49:cb:c3: eb:04:b1:08:b2:23:af:67:c0:ea:61:35:3c:2a:d7: 6f:18:4e:85:bb:ed:71:66:c3:48:ab:ca:ef:44:ef: 47:f9:e8:9c:1b:dc:e5:11:98:69:10:26:dc:56:d8: fa:35:95:38:06:21:7d:e0:4d:7e:5a:27:ec:86:ca: 15:7d:e1:c7:05:7b:81:d4:a9:f4:79:0a:c2:e6:66: bb:25:d4:ed:93:32:a1:c9:1e:96:68:84:30:b8:6b: 40:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9B:F3:98:48:2A:F6:A2:42:77:29:B7:E1:6B:97:4C:F3:99:64:33 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c5vzmEgq9qJCdym34WuXTPOZZDM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.159.0/24 Signature Algorithm: sha256WithRSAEncryption 57:e2:fa:07:22:be:56:3a:52:1f:c6:3c:cd:81:f0:a0:29:1a: 15:03:98:a8:94:4f:3e:1e:69:82:55:a0:e3:8a:4e:70:4f:54: 91:e9:78:a0:71:8b:86:23:5d:47:6c:c6:99:f4:bb:a7:3b:12: 32:35:7e:72:a6:ea:6c:3b:7f:54:2b:6c:d4:84:14:ba:26:af: 37:af:10:04:e9:ad:68:34:50:31:40:a1:01:ec:a9:fa:a5:0c: 6e:b5:06:89:d0:f9:f4:ae:70:0d:00:c7:2a:0a:01:5d:53:d3: ea:aa:4a:ed:ac:60:ff:22:da:2e:b6:81:90:33:5c:a0:fa:78: dc:9d:cf:84:f3:41:ae:73:c1:17:67:3c:90:3d:30:a7:82:09: 98:3b:a7:11:a1:cd:0e:d5:2c:99:de:50:d2:da:b4:15:87:64: 24:bc:df:4d:de:46:cb:60:5c:23:d1:64:05:5b:ef:ef:5d:e2: e5:3c:19:a2:c6:5b:cc:85:2d:6a:39:e2:6f:32:7a:fb:b7:78: a8:68:36:12:58:16:6b:6b:e2:da:25:6f:ed:bf:ae:82:5b:84: 8a:d6:4a:5d:b3:12:87:ac:93:29:03:20:6a:9c:ba:c6:a2:c5: a9:ea:3f:eb:8b:25:ec:f7:31:c5:ef:7f:0c:65:69:32:e6:70: 05:59:83:f2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTE2NTFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDczOUJGMzk4NDgyQUY2 QTI0Mjc3MjlCN0UxNkI5NzRDRjM5OTY0MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrFXT1Vp60pG0q7DZqIJrq8f5MVI1is6REDzhUOQQogfqvZs/0 nibzuAAkaXJSO6UCh3Jb1UybVAKtEOOSVrsDJFkJOZZ6tJ35eWdOtbK0KCymhFEn yEyDeqne+KbG+5NQ4a297MomWys1ITejgfZcOaNititkOLlRCE7t4hKS/rLnLVxw kDWUVYjK7NU3C0xgpo/BRPkQOSG1YaNhqBjePEnLw+sEsQiyI69nwOphNTwq128Y ToW77XFmw0iryu9E70f56Jwb3OURmGkQJtxW2Po1lTgGIX3gTX5aJ+yGyhV94ccF e4HUqfR5CsLmZrsl1O2TMqHJHpZohDC4a0CXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUc5vzmEgq9qJCdym34WuXTPOZZDMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2M1dnptRWdxOXFKQ2R5bTM0V3VYVFBPWlpETS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxZp8wDQYJKoZIhvcNAQELBQADggEBAFfi+gcivlY6Uh/GPM2B8KApGhUD mKiUTz4eaYJVoOOKTnBPVJHpeKBxi4YjXUdsxpn0u6c7EjI1fnKm6mw7f1QrbNSE FLomrzevEATprWg0UDFAoQHsqfqlDG61BonQ+fSucA0AxyoKAV1T0+qqSu2sYP8i 2i62gZAzXKD6eNydz4TzQa5zwRdnPJA9MKeCCZg7pxGhzQ7VLJneUNLatBWHZCS8 303eRstgXCPRZAVb7+9d4uU8GaLGW8yFLWo54m8yevu3eKhoNhJYFmtr4tolb+2/ roJbhIrWSl2zEoeskykDIGqcusaixanqP+uLJez3McXvfwxlaTLmcAVZg/I= -----END CERTIFICATE-----Generated at Sun Jun 22 00:50:52 2025 by rpki-client