$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/j3G-PAnmqHscFaWXFfyps0Y3O2M.roa File: j3G-PAnmqHscFaWXFfyps0Y3O2M.roa (raw, json) Hash identifier: czzHJOFu8L5KcmAuS5J75RcmHXQeLVIfNPjtCBqXIvQ= Subject key identifier: 8F:71:BE:3C:09:E6:A8:7B:1C:15:A5:97:15:FC:A9:B3:46:37:3B:63 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DC0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j3G-PAnmqHscFaWXFfyps0Y3O2M.roa Signing time: Tue 01 Apr 2025 02:24:49 +0000 ROA not before: Tue 01 Apr 2025 02:24:49 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.105.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3520 (0xdc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:49 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=8F71BE3C09E6A87B1C15A59715FCA9B346373B63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:59:64:46:e0:c3:56:fb:cd:85:79:ba:70: ce:f1:63:60:a4:a3:fd:fa:d2:3b:4e:6d:36:a7:53: 59:99:b4:b8:ec:f4:33:3c:60:66:34:c9:cd:a2:31: 72:97:af:2c:eb:49:8a:b8:3c:36:ee:b6:5d:bf:1e: 13:66:b1:e7:e0:89:fd:d4:e2:45:aa:cd:d5:8b:5a: 26:ca:fc:47:8f:28:72:89:a1:1c:16:10:e4:e8:97: 91:05:a4:46:c7:cc:ba:c9:74:e0:ee:f8:29:d8:97: 1d:de:23:85:a1:ed:71:c1:b2:94:b6:e5:2d:5d:c3: c9:30:03:e0:57:14:10:a3:2a:f5:1a:64:ea:db:69: 2b:2f:0d:4c:3b:dc:2b:48:7e:ca:ce:00:cd:06:9e: 45:8c:a1:95:7f:51:08:eb:84:07:c9:9a:3b:db:cb: 86:0a:4f:d9:18:07:80:90:3f:88:ab:6f:4e:bc:fc: 0e:78:4f:d4:7f:c3:42:9f:ca:4b:d3:7b:b0:c2:19: 74:71:e7:fe:05:ff:3a:60:a1:83:57:ae:1d:33:6a: b2:c0:47:d1:b0:38:ba:9c:d6:e1:bb:50:71:84:a3: 9d:e6:16:44:4a:ee:2f:fe:d0:95:3d:c3:1d:3e:5b: ea:45:31:4f:8a:a9:57:1f:5b:7c:08:37:b8:0a:82: 17:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:71:BE:3C:09:E6:A8:7B:1C:15:A5:97:15:FC:A9:B3:46:37:3B:63 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j3G-PAnmqHscFaWXFfyps0Y3O2M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.14.0/23 Signature Algorithm: sha256WithRSAEncryption 03:9d:1e:a8:7f:50:b1:4a:54:30:20:8d:f8:a9:5b:30:90:0a: fe:0c:8e:30:13:5d:24:3d:4b:f2:48:a0:dc:ad:fa:e0:2a:51: e3:72:93:cb:86:7c:f5:ba:0b:67:7c:2f:32:bd:ba:03:7f:64: 90:de:34:1e:cf:44:b3:1d:fb:dd:c6:25:d9:50:d1:9c:a9:16: 2c:74:41:9b:74:75:cb:22:04:f9:c1:cb:84:bf:31:71:18:3a: 95:11:dd:2e:9e:f6:88:12:24:08:b8:39:0c:37:2a:eb:eb:09: d9:28:0b:07:60:e4:17:e2:3f:a6:35:f6:ce:e6:fd:dc:9a:a8: 9e:a6:e2:34:e3:56:d7:89:54:73:bf:25:0a:dc:2c:e6:ed:85: 91:33:1c:81:20:19:5c:e2:60:51:99:2a:2c:c6:a3:62:05:ad: 1f:41:e8:89:ec:c4:ef:3c:e7:f8:eb:2a:25:6e:42:f4:5c:01: 17:98:07:30:ab:c1:a9:6a:d7:1a:44:b8:71:55:23:3d:f3:24: 44:3b:a5:60:c8:69:24:f0:e9:29:f9:aa:2d:7d:68:1e:9d:28: ca:b0:4b:10:44:20:48:15:6f:72:c1:25:45:61:e0:52:71:66: 6a:6d:85:c7:54:0b:95:72:d7:27:c1:e1:3a:39:ac:c2:c7:15: d5:a0:25:9e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDcAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0NDlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhGNzFCRTNDMDlFNkE4 N0IxQzE1QTU5NzE1RkNBOUIzNDYzNzNCNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsOllkRuDDVvvNhXm6cM7xY2Cko/360jtObTanU1mZtLjs9DM8 YGY0yc2iMXKXryzrSYq4PDbutl2/HhNmsefgif3U4kWqzdWLWibK/EePKHKJoRwW EOTol5EFpEbHzLrJdODu+CnYlx3eI4Wh7XHBspS25S1dw8kwA+BXFBCjKvUaZOrb aSsvDUw73CtIfsrOAM0GnkWMoZV/UQjrhAfJmjvby4YKT9kYB4CQP4irb068/A54 T9R/w0KfykvTe7DCGXRx5/4F/zpgoYNXrh0zarLAR9GwOLqc1uG7UHGEo53mFkRK 7i/+0JU9wx0+W+pFMU+KqVcfW3wIN7gKghetAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUj3G+PAnmqHscFaWXFfyps0Y3O2MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ozRy1QQW5tcUhzY0ZhV1hGZnlwczBZM08yTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaQ4wDQYJKoZIhvcNAQELBQADggEBAAOdHqh/ULFKVDAgjfipWzCQCv4M jjATXSQ9S/JIoNyt+uAqUeNyk8uGfPW6C2d8LzK9ugN/ZJDeNB7PRLMd+93GJdlQ 0ZypFix0QZt0dcsiBPnBy4S/MXEYOpUR3S6e9ogSJAi4OQw3KuvrCdkoCwdg5Bfi P6Y19s7m/dyaqJ6m4jTjVteJVHO/JQrcLObthZEzHIEgGVziYFGZKizGo2IFrR9B 6InsxO885/jrKiVuQvRcAReYBzCrwalq1xpEuHFVIz3zJEQ7pWDIaSTw6Sn5qi19 aB6dKMqwSxBEIEgVb3LBJUVh4FJxZmpthcdUC5Vy1yfB4To5rMLHFdWgJZ4= -----END CERTIFICATE-----Generated at Sat Apr 26 18:22:37 2025 by rpki-client