$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qTY5iRjPxbg6zzVk__gEz7vt-vM.roa File: qTY5iRjPxbg6zzVk__gEz7vt-vM.roa (raw, json) Hash identifier: pdYz9dMtBd0IweTraFqk9q00aq7dPz5NVI3sSNBNskg= Subject key identifier: A9:36:39:89:18:CF:C5:B8:3A:CF:35:64:FF:F8:04:CF:BB:ED:FA:F3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CFC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qTY5iRjPxbg6zzVk__gEz7vt-vM.roa Signing time: Tue 01 Apr 2025 02:11:36 +0000 ROA not before: Tue 01 Apr 2025 02:11:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.105.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3324 (0xcfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=A936398918CFC5B83ACF3564FFF804CFBBEDFAF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:f9:e1:3c:f7:36:ca:e3:c7:89:ed:e3:a3: 41:fc:24:6f:a2:9b:a7:c5:86:76:97:78:07:83:11: 8f:d5:9a:84:da:fd:87:92:93:da:d0:d9:fa:d2:47: 6c:38:69:35:fe:23:ca:4a:35:75:9a:be:03:09:21: 12:95:d5:7b:73:be:08:1e:a8:2b:f1:a9:d5:73:08: cf:5c:71:a0:c5:2a:6c:74:b7:6b:c5:7d:1f:f8:e6: 8c:ee:2b:dd:99:9d:6f:41:ed:81:04:60:98:fc:b5: 50:75:d9:bd:57:b2:fc:e9:8e:d4:99:08:48:63:a4: 0b:b1:e5:fa:ff:a0:84:f8:09:aa:6c:d4:d2:da:5b: 2c:6d:41:6d:cb:16:a4:a5:6e:9f:45:ed:95:65:f1: 3a:de:74:85:f0:dd:50:2b:c4:c0:2b:a1:d8:18:75: a9:a9:ac:ce:11:3c:0f:3b:4b:9a:93:8b:69:6e:ad: b6:77:73:03:c5:0d:20:32:ac:20:ad:a8:15:f9:49: d5:63:46:00:e2:75:9a:1a:1d:36:82:89:8a:7b:a1: 0f:8a:4f:5c:4e:92:c9:cf:87:49:ab:c9:a6:78:c7: ba:a7:e4:de:ff:84:48:d1:3d:06:fd:b6:2f:9b:20: 7a:7c:cd:b6:ac:77:51:74:6d:65:e1:fd:8f:c5:25: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:36:39:89:18:CF:C5:B8:3A:CF:35:64:FF:F8:04:CF:BB:ED:FA:F3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qTY5iRjPxbg6zzVk__gEz7vt-vM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.86.0/23 Signature Algorithm: sha256WithRSAEncryption 49:f3:9f:36:4d:50:18:23:38:1f:88:e8:42:32:00:ee:78:ba: 1e:e4:14:e7:ed:07:bd:6e:dc:ed:66:f0:41:66:8f:a5:60:94: 57:87:51:5b:d7:7b:20:7f:b0:cc:d7:b3:6d:95:13:c1:c1:52: 84:89:6e:b6:d2:2e:8d:ac:6e:0e:71:03:24:74:7a:55:ae:51: 50:53:98:c4:81:d8:aa:14:d0:aa:c1:12:f1:f5:65:7f:fb:35: 9e:23:7f:d2:3d:d2:ee:9c:4c:3c:69:3c:7f:03:bb:ea:2c:57: aa:d7:d0:22:f2:d0:6a:a2:21:bb:3a:49:dd:d4:cb:d1:ef:4a: 95:ba:3b:55:a9:4f:6e:3c:e6:32:21:88:a7:cd:6c:9f:db:cc: 64:fb:b7:eb:a4:24:dd:a2:c6:d4:2d:2d:ec:13:22:35:ab:2c: 63:b1:0e:f0:d3:8e:e6:c5:bb:b9:bc:4e:8d:8d:2c:1e:c8:42: db:b1:dc:19:a0:3c:22:22:ba:fb:cc:36:19:2b:45:ed:be:39: 91:97:dc:1f:75:85:19:5a:7f:36:04:c2:00:92:bf:f1:3a:3f: cf:dc:ee:a7:ed:70:03:78:30:4e:eb:9b:86:6f:9e:06:4b:f7: c5:d6:62:e8:c8:87:2c:61:67:0a:05:47:f2:48:3f:8b:45:b8: 1b:49:c9:72 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExMzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE5MzYzOTg5MThDRkM1 QjgzQUNGMzU2NEZGRjgwNENGQkJFREZBRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClNfnhPPc2yuPHie3jo0H8JG+im6fFhnaXeAeDEY/VmoTa/YeS k9rQ2frSR2w4aTX+I8pKNXWavgMJIRKV1XtzvggeqCvxqdVzCM9ccaDFKmx0t2vF fR/45ozuK92ZnW9B7YEEYJj8tVB12b1XsvzpjtSZCEhjpAux5fr/oIT4Caps1NLa WyxtQW3LFqSlbp9F7ZVl8TredIXw3VArxMArodgYdamprM4RPA87S5qTi2lurbZ3 cwPFDSAyrCCtqBX5SdVjRgDidZoaHTaCiYp7oQ+KT1xOksnPh0mryaZ4x7qn5N7/ hEjRPQb9ti+bIHp8zbasd1F0bWXh/Y/FJe33AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqTY5iRjPxbg6zzVk//gEz7vt+vMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3FUWTVpUmpQeGJnNnp6VmtfX2dFejd2dC12TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaVYwDQYJKoZIhvcNAQELBQADggEBAEnznzZNUBgjOB+I6EIyAO54uh7k FOftB71u3O1m8EFmj6VglFeHUVvXeyB/sMzXs22VE8HBUoSJbrbSLo2sbg5xAyR0 elWuUVBTmMSB2KoU0KrBEvH1ZX/7NZ4jf9I90u6cTDxpPH8Du+osV6rX0CLy0Gqi Ibs6Sd3Uy9HvSpW6O1WpT2485jIhiKfNbJ/bzGT7t+ukJN2ixtQtLewTIjWrLGOx DvDTjubFu7m8To2NLB7IQtux3BmgPCIiuvvMNhkrRe2+OZGX3B91hRlafzYEwgCS v/E6P8/c7qftcAN4ME7rm4ZvngZL98XWYujIhyxhZwoFR/JIP4tFuBtJyXI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:14:48 2025 by rpki-client