$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fmSoh7TWCNe6VxCYGdByS1PiGJ0.roa File: fmSoh7TWCNe6VxCYGdByS1PiGJ0.roa (raw, json) Hash identifier: VzBti4ay1mhCSOoIbBybc2ew3Ae+RpkaDYbQTAeTbYA= Subject key identifier: 7E:64:A8:87:B4:D6:08:D7:BA:57:10:98:19:D0:72:4B:53:E2:18:9D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E5C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fmSoh7TWCNe6VxCYGdByS1PiGJ0.roa Signing time: Tue 10 Jun 2025 10:47:54 +0000 ROA not before: Tue 10 Jun 2025 10:47:54 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.108.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3676 (0xe5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:47:54 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=7E64A887B4D608D7BA57109819D0724B53E2189D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6e:74:7d:f1:3b:17:74:b0:b0:de:d8:49:39: be:81:66:89:ac:18:6e:80:28:5e:73:71:4e:d3:d3: d2:dd:89:85:14:dd:13:76:38:b4:03:2b:5f:f8:d3: ed:fa:1b:8e:57:45:65:e7:88:4c:43:38:d5:95:d3: 66:73:83:57:16:a8:1a:77:62:8d:79:54:f4:10:02: 4e:1a:d6:a9:09:19:be:63:3c:96:54:ef:1b:13:41: 85:5e:7f:1f:7b:1d:48:58:26:93:85:90:9e:5f:4c: e3:ef:8c:c8:83:64:9a:60:67:83:14:7f:66:fa:d3: ba:f5:b4:2f:ae:90:39:69:30:8b:61:4a:e9:05:9e: ae:2a:c7:4b:4b:15:8f:e8:6d:23:43:d9:e1:10:70: 23:00:b9:c7:04:de:32:e3:70:7b:b2:8b:d2:fb:0b: 6a:24:c5:8d:fe:48:bc:2e:dd:23:88:cf:db:2b:4c: e5:f8:dc:76:18:a0:88:75:d2:46:2f:52:65:6a:bd: 4f:39:02:93:6d:16:41:02:e5:2b:0a:1e:c7:0f:fa: aa:20:22:ee:b4:44:48:e4:fe:a3:39:ad:05:0f:e4: b1:04:70:cb:0e:a3:d7:34:d1:96:ee:c1:6d:67:7a: 36:3b:ab:fc:07:06:b7:d0:6c:61:b8:36:8f:dd:4e: 2a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:64:A8:87:B4:D6:08:D7:BA:57:10:98:19:D0:72:4B:53:E2:18:9D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fmSoh7TWCNe6VxCYGdByS1PiGJ0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.108.0.0/18 Signature Algorithm: sha256WithRSAEncryption b3:de:cb:0f:67:3f:8f:ac:9b:66:68:ec:ca:2a:57:44:53:c6: 45:f7:0a:cb:26:6f:81:16:50:33:d0:c2:e5:cc:29:b3:3f:55: fe:31:1c:b1:82:9d:74:40:2a:fd:75:44:90:92:c4:53:fe:ea: 3c:23:9b:ea:8c:47:0e:28:3a:9c:ec:d2:4b:85:55:2c:3d:6c: e8:55:e0:50:ca:3e:3c:24:c3:bb:8d:9d:d9:08:78:71:94:09: aa:a9:32:df:3f:33:58:b5:b8:ec:f0:73:cb:93:db:78:11:cc: 08:32:45:60:7e:ae:59:61:13:e8:c0:87:15:bf:71:f9:d1:4f: 32:c7:c9:62:84:c6:e1:e9:b9:9d:92:49:48:75:3e:b1:5f:44: f5:0b:41:e1:51:82:43:f9:20:70:57:c8:93:05:c1:2c:c7:82: 57:00:7a:db:e8:11:91:d5:56:1f:00:42:83:fd:51:de:ba:2e: 4d:8a:ca:6b:93:d9:17:33:32:b9:c5:76:45:01:99:4f:8c:ea: bb:15:56:33:28:8c:a9:46:19:5e:08:40:02:33:9c:5a:12:fb: 84:ba:44:ab:db:82:83:df:47:b7:df:a1:43:ab:3d:4a:ae:34: 68:e0:01:54:ae:84:6f:22:15:b6:d8:d9:06:17:2f:df:9d:55: 25:f5:fc:fe -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDlwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDQ3NTRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDdFNjRBODg3QjRENjA4 RDdCQTU3MTA5ODE5RDA3MjRCNTNFMjE4OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpbnR98TsXdLCw3thJOb6BZomsGG6AKF5zcU7T09LdiYUU3RN2 OLQDK1/40+36G45XRWXniExDONWV02Zzg1cWqBp3Yo15VPQQAk4a1qkJGb5jPJZU 7xsTQYVefx97HUhYJpOFkJ5fTOPvjMiDZJpgZ4MUf2b607r1tC+ukDlpMIthSukF nq4qx0tLFY/obSND2eEQcCMAuccE3jLjcHuyi9L7C2okxY3+SLwu3SOIz9srTOX4 3HYYoIh10kYvUmVqvU85ApNtFkEC5SsKHscP+qogIu60REjk/qM5rQUP5LEEcMsO o9c00ZbuwW1nejY7q/wHBrfQbGG4No/dTiq7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfmSoh7TWCNe6VxCYGdByS1PiGJ0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ZtU29oN1RXQ05lNlZ4Q1lHZEJ5UzFQaUdKMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYxbAAwDQYJKoZIhvcNAQELBQADggEBALPeyw9nP4+sm2Zo7MoqV0RTxkX3 Cssmb4EWUDPQwuXMKbM/Vf4xHLGCnXRAKv11RJCSxFP+6jwjm+qMRw4oOpzs0kuF VSw9bOhV4FDKPjwkw7uNndkIeHGUCaqpMt8/M1i1uOzwc8uT23gRzAgyRWB+rllh E+jAhxW/cfnRTzLHyWKExuHpuZ2SSUh1PrFfRPULQeFRgkP5IHBXyJMFwSzHglcA etvoEZHVVh8AQoP9Ud66Lk2KymuT2RczMrnFdkUBmU+M6rsVVjMojKlGGV4IQAIz nFoS+4S6RKvbgoPfR7ffoUOrPUquNGjgAVSuhG8iFbbY2QYXL9+dVSX1/P4= -----END CERTIFICATE-----Generated at Sun Jun 22 07:42:53 2025 by rpki-client