$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/f5anfozJMmLJoWGCQW7YH1p6BoA.roa File: f5anfozJMmLJoWGCQW7YH1p6BoA.roa (raw, json) Hash identifier: x4V1aMds4Dcy5ASEE6D79++8hJudse8nHvpM7n3DcUQ= Subject key identifier: 7F:96:A7:7E:8C:C9:32:62:C9:A1:61:82:41:6E:D8:1F:5A:7A:06:80 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E7F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f5anfozJMmLJoWGCQW7YH1p6BoA.roa Signing time: Tue 10 Jun 2025 10:56:45 +0000 ROA not before: Tue 10 Jun 2025 10:56:45 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.110.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 18:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3711 (0xe7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:56:45 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=7F96A77E8CC93262C9A16182416ED81F5A7A0680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:cd:b8:44:83:90:70:23:c9:6f:2f:50:5b: be:73:6a:7f:ee:81:9b:5e:3e:15:5b:f0:4e:9a:d3: ed:e8:2a:48:7e:8a:51:22:45:c9:aa:0b:98:62:20: c5:de:f8:0e:e6:8d:00:20:2b:20:a9:95:af:d8:11: 96:90:02:7b:0b:d3:57:db:5c:1d:c9:33:56:bc:93: 2c:03:26:eb:9b:b4:32:c4:d4:61:c9:ee:59:60:d4: 2b:cc:21:aa:92:fb:31:04:f7:e6:92:9d:09:c2:7c: 8e:59:b3:c3:27:4c:5c:53:63:ef:26:ed:a1:6e:3a: 9d:50:68:eb:e1:9b:6b:8c:b7:6a:d4:34:b7:c7:c0: 4c:d7:55:88:92:09:9d:f5:bc:b1:9d:7c:d4:ac:6f: ca:16:2c:0c:1d:61:ac:83:82:cb:bc:2e:1c:53:00: 00:24:49:7b:6c:e9:e8:61:70:5f:4f:2f:70:51:4e: bf:0b:42:6c:33:0e:68:aa:8f:b2:c5:8d:3e:40:5d: 2d:18:77:80:b7:0f:fe:1f:ca:c4:ab:18:55:04:9e: d6:48:15:e5:3d:9d:23:d8:f5:05:90:cf:e6:97:2e: a6:c4:d2:db:06:62:5b:36:2a:f9:2a:2a:56:d5:f3: 05:1f:0e:06:b2:cb:9d:a5:f9:90:b8:34:35:4f:c1: 0d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:96:A7:7E:8C:C9:32:62:C9:A1:61:82:41:6E:D8:1F:5A:7A:06:80 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f5anfozJMmLJoWGCQW7YH1p6BoA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.110.124.0/23 Signature Algorithm: sha256WithRSAEncryption 25:bf:ad:ff:78:e3:0d:1e:bf:bf:8c:21:73:d7:23:37:56:4a: ff:5e:52:9d:be:1b:4d:5e:4a:4a:79:71:9a:7d:02:08:63:12: 54:a7:f1:c2:5f:99:f2:a5:88:a5:97:ed:5e:66:5e:54:55:c8: 22:ef:e8:69:a2:12:a0:5c:18:a7:5b:bc:f4:39:b0:02:5b:49: 8c:38:ac:fb:81:8b:49:60:b2:42:39:c4:df:88:23:95:0f:d2: 3c:93:d1:ab:01:82:04:a3:71:c7:68:8c:69:18:b5:b2:49:45: ac:b4:56:cd:eb:04:5d:b9:60:06:13:ca:ce:31:ed:78:35:58: bf:be:52:64:9f:40:f5:fc:43:ae:81:75:32:da:50:fb:ac:38: 8e:fc:90:6e:7c:4f:31:f3:af:32:35:3d:4c:54:f6:17:9c:ec: 09:45:13:88:6f:43:91:2a:05:be:a3:74:16:ab:9b:8d:ad:b4: b5:00:7b:ca:e4:53:0f:84:2a:0a:2d:3e:61:63:81:43:81:86: bf:b5:dc:16:0b:1f:ed:e7:9a:e9:15:00:a2:4d:4e:82:11:c9: b6:1b:09:20:a9:3a:e0:a3:fc:59:d1:12:15:60:8a:e4:16:35: 48:78:b0:ab:6a:28:81:38:1a:f9:22:97:dc:7b:4d:5f:57:70: 3a:64:bb:a9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDn8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDU2NDVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDdGOTZBNzdFOENDOTMy NjJDOUExNjE4MjQxNkVEODFGNUE3QTA2ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfI824RIOQcCPJby9QW75zan/ugZtePhVb8E6a0+3oKkh+ilEi RcmqC5hiIMXe+A7mjQAgKyCpla/YEZaQAnsL01fbXB3JM1a8kywDJuubtDLE1GHJ 7llg1CvMIaqS+zEE9+aSnQnCfI5Zs8MnTFxTY+8m7aFuOp1QaOvhm2uMt2rUNLfH wEzXVYiSCZ31vLGdfNSsb8oWLAwdYayDgsu8LhxTAAAkSXts6ehhcF9PL3BRTr8L QmwzDmiqj7LFjT5AXS0Yd4C3D/4fysSrGFUEntZIFeU9nSPY9QWQz+aXLqbE0tsG Yls2KvkqKlbV8wUfDgayy52l+ZC4NDVPwQ39AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUf5anfozJMmLJoWGCQW7YH1p6BoAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2Y1YW5mb3pKTW1MSm9XR0NRVzdZSDFwNkJvQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExbnwwDQYJKoZIhvcNAQELBQADggEBACW/rf944w0ev7+MIXPXIzdWSv9e Up2+G01eSkp5cZp9AghjElSn8cJfmfKliKWX7V5mXlRVyCLv6GmiEqBcGKdbvPQ5 sAJbSYw4rPuBi0lgskI5xN+II5UP0jyT0asBggSjccdojGkYtbJJRay0Vs3rBF25 YAYTys4x7Xg1WL++UmSfQPX8Q66BdTLaUPusOI78kG58TzHzrzI1PUxU9hec7AlF E4hvQ5EqBb6jdBarm42ttLUAe8rkUw+EKgotPmFjgUOBhr+13BYLH+3nmukVAKJN ToIRybYbCSCpOuCj/FnREhVgiuQWNUh4sKtqKIE4Gvkil9x7TV9XcDpku6k= -----END CERTIFICATE-----Generated at Sat Jun 21 21:36:24 2025 by rpki-client