$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cRJMbgqCiBo6hqF1fbgN9ysHKX4.roa File: cRJMbgqCiBo6hqF1fbgN9ysHKX4.roa (raw, json) Hash identifier: ezxzXYbqtWzzGTkBgGqcsu4CXMcSZNkfeL31A4zgwxs= Subject key identifier: 71:12:4C:6E:0A:82:88:1A:3A:86:A1:75:7D:B8:0D:F7:2B:07:29:7E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EAE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cRJMbgqCiBo6hqF1fbgN9ysHKX4.roa Signing time: Tue 10 Jun 2025 11:00:46 +0000 ROA not before: Tue 10 Jun 2025 11:00:46 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.106.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3758 (0xeae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:00:46 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=71124C6E0A82881A3A86A1757DB80DF72B07297E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:76:11:d3:a8:da:23:56:35:9a:f4:83:fe: 5a:3b:dd:94:0a:6b:99:19:2f:88:0d:9f:b1:1e:0e: 27:66:ca:74:c1:bc:89:8a:cb:c0:a9:12:df:07:40: 22:dc:c1:f9:51:f0:c7:af:d9:8f:29:22:3e:c7:82: d1:3b:22:d9:1e:86:9f:f4:32:29:6d:58:a3:57:80: da:2d:3d:49:01:7e:5c:c8:9c:a2:b4:c5:69:f6:8b: ca:50:de:15:37:1f:61:fe:31:12:09:b3:f8:d3:fe: 28:25:90:18:26:8b:0a:ef:20:13:07:71:c6:71:66: 07:cb:1c:72:0f:c9:9f:6f:0c:93:7b:e5:98:28:bf: c4:98:c3:4e:10:34:cd:0a:2d:fc:cd:ea:95:f6:59: 4e:ea:b7:d7:2d:16:65:cd:6d:5a:65:42:0b:9c:a4: a3:23:03:4e:76:47:68:7f:5a:60:e6:75:58:c1:1e: f0:01:67:11:53:c0:d1:b6:6a:36:aa:00:4b:6f:fe: dd:f0:97:62:a9:c9:35:83:79:08:a1:a8:d4:1f:1d: 4e:90:ed:44:85:6c:27:40:38:90:54:d3:b1:da:c5: ba:91:43:d4:c8:76:30:89:9c:ab:28:06:bd:50:63: 04:1f:96:0c:d5:ee:94:8d:36:d6:fb:9c:ac:d0:64: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:12:4C:6E:0A:82:88:1A:3A:86:A1:75:7D:B8:0D:F7:2B:07:29:7E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cRJMbgqCiBo6hqF1fbgN9ysHKX4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.189.0/24 Signature Algorithm: sha256WithRSAEncryption ab:79:8c:11:3c:79:b0:69:95:64:04:72:a3:f2:1a:90:fc:8b: 3c:37:24:37:6e:cf:23:41:3b:e4:ed:32:a1:fa:5f:c2:e3:d9: ab:fd:52:75:34:f0:29:53:e6:97:b3:fd:e6:a9:f4:58:95:ae: e8:4f:59:c3:33:c4:a2:c6:1d:13:9f:f8:e7:4f:73:25:61:30: af:46:ae:19:d1:f3:5c:98:b6:7a:00:c4:8f:b2:29:50:45:eb: 04:b5:a2:d6:85:fa:d1:57:7b:13:ca:40:39:78:08:c7:5f:d9: cf:fa:ba:5c:7d:30:a0:dd:f4:0b:77:47:a4:01:0a:89:37:9e: 87:a4:63:5f:d1:f6:b8:f2:8e:da:40:f1:fd:42:48:70:7c:a4: 86:2f:51:23:c2:58:4d:50:47:41:8a:cb:54:d8:c7:02:e3:99: ec:56:1c:ba:7f:9f:b7:84:12:6a:5a:df:98:7d:34:5a:6d:b3: ab:e2:d4:03:fe:b5:bd:7d:85:5e:7b:62:f9:2c:07:63:cd:2d: 60:23:1c:a1:2c:81:66:4a:86:54:22:1b:62:e1:45:0e:04:95: 66:20:34:52:2f:10:0a:42:50:5c:b6:ee:26:a1:95:46:ae:05: 97:9f:59:92:1e:1b:ad:f8:36:a8:00:04:c4:af:1e:87:54:89: d0:25:65:de -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDq4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTAwNDZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDcxMTI0QzZFMEE4Mjg4 MUEzQTg2QTE3NTdEQjgwREY3MkIwNzI5N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGN3YR06jaI1Y1mvSD/lo73ZQKa5kZL4gNn7EeDidmynTBvImK y8CpEt8HQCLcwflR8Mev2Y8pIj7HgtE7Itkehp/0MiltWKNXgNotPUkBflzInKK0 xWn2i8pQ3hU3H2H+MRIJs/jT/iglkBgmiwrvIBMHccZxZgfLHHIPyZ9vDJN75Zgo v8SYw04QNM0KLfzN6pX2WU7qt9ctFmXNbVplQgucpKMjA052R2h/WmDmdVjBHvAB ZxFTwNG2ajaqAEtv/t3wl2KpyTWDeQihqNQfHU6Q7USFbCdAOJBU07HaxbqRQ9TI djCJnKsoBr1QYwQflgzV7pSNNtb7nKzQZKo9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcRJMbgqCiBo6hqF1fbgN9ysHKX4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2NSSk1iZ3FDaUJvNmhxRjFmYmdOOXlzSEtYNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxar0wDQYJKoZIhvcNAQELBQADggEBAKt5jBE8ebBplWQEcqPyGpD8izw3 JDduzyNBO+TtMqH6X8Lj2av9UnU08ClT5pez/eap9FiVruhPWcMzxKLGHROf+OdP cyVhMK9GrhnR81yYtnoAxI+yKVBF6wS1otaF+tFXexPKQDl4CMdf2c/6ulx9MKDd 9At3R6QBCok3noekY1/R9rjyjtpA8f1CSHB8pIYvUSPCWE1QR0GKy1TYxwLjmexW HLp/n7eEEmpa35h9NFpts6vi1AP+tb19hV57YvksB2PNLWAjHKEsgWZKhlQiG2Lh RQ4ElWYgNFIvEApCUFy27iahlUauBZefWZIeG634NqgABMSvHodUidAlZd4= -----END CERTIFICATE-----Generated at Sat Jun 21 23:28:15 2025 by rpki-client