$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sWAe5YhBid6zgK_13rvob7bO4nM.roa File: sWAe5YhBid6zgK_13rvob7bO4nM.roa (raw, json) Hash identifier: GwiBX7adObuBYYdT+IEq3GGdmn/L0bSaid+FAW38dI8= Subject key identifier: B1:60:1E:E5:88:41:89:DE:B3:80:AF:F5:DE:BB:E8:6F:B6:CE:E2:73 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E5E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sWAe5YhBid6zgK_13rvob7bO4nM.roa Signing time: Tue 10 Jun 2025 10:47:55 +0000 ROA not before: Tue 10 Jun 2025 10:47:55 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.103.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3678 (0xe5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:47:55 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=B1601EE5884189DEB380AFF5DEBBE86FB6CEE273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b0:b1:c9:be:b2:3d:df:84:b9:18:d4:87:3b: d3:5a:b6:7f:d3:0a:db:00:cd:0f:bf:54:bc:fc:bb: ed:cc:03:a5:37:7c:59:cd:3a:a6:d5:9d:13:10:47: b1:00:9d:94:fb:cb:9f:1d:06:ec:d6:18:e8:dc:42: 33:27:63:a1:dd:b5:a9:cc:2e:5d:50:8f:8d:b7:84: eb:db:d6:50:e1:73:12:70:6d:77:9d:9f:ce:3f:f7: 44:e1:56:48:d9:33:7a:39:e5:b9:c0:af:d1:ff:56: 13:09:f6:1a:72:c9:23:71:12:5d:ae:57:93:d5:c5: 4c:59:9a:1f:17:bd:86:42:17:e6:8d:b2:3c:a9:5d: a2:f5:b4:d2:a8:24:2a:37:b1:b2:76:26:93:39:9e: a8:90:08:1d:b1:7c:1c:73:b1:f4:f9:10:2f:4f:8b: b7:6e:a2:9d:39:a8:32:0c:86:5b:93:41:e1:17:2f: b4:04:cc:28:49:9b:08:9b:ae:77:d4:a0:38:ea:17: bc:a0:3e:1f:88:d6:9a:11:bb:b1:fb:f7:76:8a:5f: d5:9c:ce:a8:39:3c:7c:ee:0c:ff:de:60:15:cd:6a: 5f:7d:f6:14:df:7a:39:89:60:d8:2d:b9:6c:90:48: d2:78:bb:8c:48:e0:fd:de:c6:fd:e4:a2:9c:39:e8: 3e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:60:1E:E5:88:41:89:DE:B3:80:AF:F5:DE:BB:E8:6F:B6:CE:E2:73 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sWAe5YhBid6zgK_13rvob7bO4nM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.103.20.0/23 Signature Algorithm: sha256WithRSAEncryption 03:1a:1f:e7:61:73:d3:7c:57:21:45:96:41:53:86:5b:84:bc: 72:4b:c0:e8:bc:75:ba:0d:21:52:7d:fd:27:33:d5:f9:f6:61: 51:4d:b9:98:c2:34:46:29:d1:22:f0:d2:7b:ad:d4:27:1e:22: 97:94:16:0f:5e:77:cc:8b:ee:dc:11:51:7d:c8:ef:04:2b:b9: 33:c9:e3:8d:c2:f8:db:35:ee:eb:b8:d7:32:4c:d1:e9:71:7f: d3:f2:23:62:e7:1e:55:ab:d1:ae:08:cb:4b:a1:cb:f1:8b:d4: 71:f3:e2:b2:35:d2:de:96:85:32:7e:5f:9a:5c:3c:6f:78:98: 03:64:2f:62:61:4a:e9:8a:8b:d9:ef:da:e5:fb:41:e1:3e:e7: 92:f2:f2:50:92:41:53:32:64:a9:4c:41:6f:3a:6a:4a:7d:63: 2e:f0:cf:4c:ae:cb:36:e7:51:fa:b9:2a:0c:36:1b:5f:5c:40: 1a:94:9a:35:27:de:2e:89:30:56:4a:b6:59:9b:0e:78:ae:8f: 0e:b9:a9:70:c9:36:16:6c:97:d6:dc:b6:1f:ae:74:23:ab:e7: e8:5e:be:52:ad:5a:2d:b2:38:b7:13:d7:48:86:38:b9:98:b2: 16:c3:54:c5:98:d1:aa:45:91:e1:a6:16:d9:06:fd:cc:71:f1: f4:7e:bd:6e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDQ3NTVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEIxNjAxRUU1ODg0MTg5 REVCMzgwQUZGNURFQkJFODZGQjZDRUUyNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFsLHJvrI934S5GNSHO9Natn/TCtsAzQ+/VLz8u+3MA6U3fFnN OqbVnRMQR7EAnZT7y58dBuzWGOjcQjMnY6HdtanMLl1Qj423hOvb1lDhcxJwbXed n84/90ThVkjZM3o55bnAr9H/VhMJ9hpyySNxEl2uV5PVxUxZmh8XvYZCF+aNsjyp XaL1tNKoJCo3sbJ2JpM5nqiQCB2xfBxzsfT5EC9Pi7duop05qDIMhluTQeEXL7QE zChJmwibrnfUoDjqF7ygPh+I1poRu7H793aKX9Wczqg5PHzuDP/eYBXNal999hTf ejmJYNgtuWyQSNJ4u4xI4P3exv3kopw56D4jAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsWAe5YhBid6zgK/13rvob7bO4nMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NXQWU1WWhCaWQ2emdLXzEzcnZvYjdiTzRuTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExZxQwDQYJKoZIhvcNAQELBQADggEBAAMaH+dhc9N8VyFFlkFThluEvHJL wOi8dboNIVJ9/Scz1fn2YVFNuZjCNEYp0SLw0nut1CceIpeUFg9ed8yL7twRUX3I 7wQruTPJ443C+Ns17uu41zJM0elxf9PyI2LnHlWr0a4Iy0uhy/GL1HHz4rI10t6W hTJ+X5pcPG94mANkL2JhSumKi9nv2uX7QeE+55Ly8lCSQVMyZKlMQW86akp9Yy7w z0yuyzbnUfq5Kgw2G19cQBqUmjUn3i6JMFZKtlmbDniujw65qXDJNhZsl9bcth+u dCOr5+hevlKtWi2yOLcT10iGOLmYshbDVMWY0apFkeGmFtkG/cxx8fR+vW4= -----END CERTIFICATE-----Generated at Sun Jun 22 05:21:09 2025 by rpki-client