$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tcgd8A_x-Z8_C0-L_-8vLWVFTCc.roa File: tcgd8A_x-Z8_C0-L_-8vLWVFTCc.roa (raw, json) Hash identifier: 1BA4SSGHfPUTttfTP88H0/eM7lIxlj+a8OYDYhzTZa8= Subject key identifier: B5:C8:1D:F0:0F:F1:F9:9F:3F:0B:4F:8B:FF:EF:2F:2D:65:45:4C:27 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F41 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tcgd8A_x-Z8_C0-L_-8vLWVFTCc.roa Signing time: Tue 10 Jun 2025 11:24:41 +0000 ROA not before: Tue 10 Jun 2025 11:24:41 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 49.105.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 16:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3905 (0xf41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:41 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=B5C81DF00FF1F99F3F0B4F8BFFEF2F2D65454C27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:f0:d8:bb:01:f6:df:ff:01:07:62:9c:39: da:31:ff:48:ba:46:7f:47:34:01:b1:e0:7e:ff:8d: ad:7f:75:27:c9:03:7a:d9:03:75:37:ab:14:26:1d: 0d:88:7c:f5:3a:75:2e:b8:18:a0:86:92:e3:aa:5b: 08:18:fe:f3:ce:31:5f:f1:c3:e0:a7:76:eb:91:87: 1b:93:07:2a:16:9a:19:fb:c2:40:12:46:51:85:d3: f7:84:19:cd:8b:f2:89:63:34:67:33:8e:61:28:a5: 30:a7:5a:cd:80:44:10:3d:16:25:96:95:97:af:36: ac:7c:49:b4:df:23:af:ef:14:44:c7:4c:ce:3a:00: f6:1a:4e:90:58:4d:61:5e:1c:36:62:ed:e1:0b:f9: fc:17:07:7f:7c:15:e2:3e:2f:e4:cc:2e:6c:bd:31: a8:45:6a:02:1a:55:ef:35:59:39:6d:03:4b:be:5a: 7e:d0:88:87:b3:2f:39:93:ad:43:5e:59:12:c9:46: 20:72:6d:72:c1:71:43:fb:19:ec:18:6d:84:f0:78: 2c:44:b2:b7:e5:44:5f:a3:a1:7a:0a:6f:ef:36:4f: 29:9a:80:12:c6:6c:9d:50:ad:d3:41:b7:7f:50:66: d5:ac:44:d3:ea:95:87:5d:25:32:f8:d4:d6:c1:56: bd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C8:1D:F0:0F:F1:F9:9F:3F:0B:4F:8B:FF:EF:2F:2D:65:45:4C:27 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tcgd8A_x-Z8_C0-L_-8vLWVFTCc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.128.0/19 Signature Algorithm: sha256WithRSAEncryption c1:e5:d5:ff:a5:ac:50:54:21:1f:03:4d:d2:12:77:b3:81:df: e3:25:27:f8:35:c0:60:cc:bc:45:d0:d5:fe:89:26:b8:23:6a: 75:d9:24:48:6d:45:34:ba:0a:85:b7:80:19:6b:f5:ff:3a:da: 86:ae:5b:2c:81:78:7d:32:f2:0a:96:30:db:df:91:f9:6c:b6: 2a:46:ed:ed:87:26:04:e0:2d:9d:b9:8f:be:14:1c:c7:6b:93: 26:31:16:16:cb:a6:b4:e7:d4:f9:ae:f3:77:5b:94:e0:88:0d: 8a:b5:1e:d7:81:91:d6:74:aa:f4:f4:5d:0d:4c:c6:56:9f:a0: af:5c:52:5e:7d:51:f3:60:2e:bc:a5:1c:14:9b:d5:97:4a:11: c9:47:48:18:81:e3:76:05:37:17:ef:22:c4:51:41:44:6d:d6: a4:7d:c3:67:31:8e:1a:00:03:29:cc:00:20:f8:6e:51:d9:06: 25:4f:a9:cb:53:91:c2:51:e1:23:ee:b4:53:d6:11:5f:9a:68: 8b:1e:2f:16:13:80:08:1f:75:4b:d2:f3:2e:cc:62:b4:11:b3: d6:63:1a:b8:3c:bd:9c:4e:4e:49:a9:7e:87:fa:43:fc:cf:84: 7c:ab:fb:81:1c:87:8f:6a:07:9b:c8:0e:87:8d:01:79:f8:1a: c5:86:ec:98 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD0EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0NDFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEI1QzgxREYwMEZGMUY5 OUYzRjBCNEY4QkZGRUYyRjJENjU0NTRDMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI8vDYuwH23/8BB2KcOdox/0i6Rn9HNAGx4H7/ja1/dSfJA3rZ A3U3qxQmHQ2IfPU6dS64GKCGkuOqWwgY/vPOMV/xw+CnduuRhxuTByoWmhn7wkAS RlGF0/eEGc2L8oljNGczjmEopTCnWs2ARBA9FiWWlZevNqx8SbTfI6/vFETHTM46 APYaTpBYTWFeHDZi7eEL+fwXB398FeI+L+TMLmy9MahFagIaVe81WTltA0u+Wn7Q iIezLzmTrUNeWRLJRiBybXLBcUP7GewYbYTweCxEsrflRF+joXoKb+82TymagBLG bJ1QrdNBt39QZtWsRNPqlYddJTL41NbBVr0nAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUtcgd8A/x+Z8/C0+L/+8vLWVFTCcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3RjZ2Q4QV94LVo4X0MwLUxfLTh2TFdWRlRDYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUxaYAwDQYJKoZIhvcNAQELBQADggEBAMHl1f+lrFBUIR8DTdISd7OB3+Ml J/g1wGDMvEXQ1f6JJrgjanXZJEhtRTS6CoW3gBlr9f862oauWyyBeH0y8gqWMNvf kflstipG7e2HJgTgLZ25j74UHMdrkyYxFhbLprTn1Pmu83dblOCIDYq1HteBkdZ0 qvT0XQ1MxlafoK9cUl59UfNgLrylHBSb1ZdKEclHSBiB43YFNxfvIsRRQURt1qR9 w2cxjhoAAynMACD4blHZBiVPqctTkcJR4SPutFPWEV+aaIseLxYTgAgfdUvS8y7M YrQRs9ZjGrg8vZxOTkmpfof6Q/zPhHyr+4Ech49qB5vIDoeNAXn4GsWG7Jg= -----END CERTIFICATE-----Generated at Sat Jun 21 19:41:47 2025 by rpki-client