$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xadQPcqnbcZSFWQW5C1DG3tV7Hg.roa File: xadQPcqnbcZSFWQW5C1DG3tV7Hg.roa (raw, json) Hash identifier: XazQVJ2X8JrYT2+ecQ7xvjXqR9LrBuwlLAhqf4CLbK0= Subject key identifier: C5:A7:50:3D:CA:A7:6D:C6:52:15:64:16:E4:2D:43:1B:7B:55:EC:78 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C4D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xadQPcqnbcZSFWQW5C1DG3tV7Hg.roa Signing time: Tue 01 Apr 2025 01:57:22 +0000 ROA not before: Tue 01 Apr 2025 01:57:22 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:22 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C5A7503DCAA76DC652156416E42D431B7B55EC78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:71:bf:bd:e0:c2:c3:0b:5e:77:4e:b8:5e:b5: 27:63:2d:ff:b2:7b:8a:2c:35:ba:35:2b:2a:a3:85: 4f:57:3f:bf:d6:32:49:fa:9c:18:13:da:e7:aa:6e: d4:bf:48:49:ea:e4:9b:1c:a2:42:cb:de:dd:b9:8d: b2:87:30:7c:41:4a:72:55:2f:f8:1a:20:ed:a3:84: d8:4a:4d:6f:e2:b5:31:90:56:f7:47:2c:18:82:f9: ba:a7:06:e8:fb:65:5c:c4:7e:74:2c:e7:24:16:4e: fa:0e:e5:85:48:5c:0f:88:8e:4a:5c:00:61:4a:8e: 43:7c:89:61:10:72:3a:5a:8e:b3:1c:6d:ee:88:84: 6e:26:46:f6:ef:1f:4a:f6:19:dc:23:c9:af:fc:2b: 50:55:ac:d8:20:02:bd:2c:6d:09:4f:0a:99:97:f1: ec:01:91:67:a2:ee:53:aa:21:9d:60:db:a3:0c:c4: db:f6:21:c6:67:54:cd:64:0c:fd:95:2d:42:5a:42: 55:65:1a:7b:66:a3:6b:fc:8a:85:c7:6b:01:44:8a: 7e:cd:ae:4d:55:29:28:bb:09:3b:c5:ff:43:35:a3: cb:da:25:16:64:7a:6e:45:19:a2:f2:60:d1:68:b0: a2:38:ed:ea:f7:4b:26:e0:96:4c:6d:6a:e5:81:92: 48:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A7:50:3D:CA:A7:6D:C6:52:15:64:16:E4:2D:43:1B:7B:55:EC:78 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xadQPcqnbcZSFWQW5C1DG3tV7Hg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.226.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:e4:eb:78:3f:d6:99:29:c6:35:b2:36:03:88:ed:b1:35:e1: 64:1a:a7:98:46:02:5f:a8:66:c9:e0:ce:b0:02:79:16:2d:12: d3:cd:7d:8a:93:48:be:23:ad:48:e9:33:8d:32:10:c5:20:5e: e5:40:f4:61:34:c0:3e:30:84:81:83:d2:33:10:9f:a5:59:ab: a5:3a:b1:fb:ee:06:1f:f4:a5:22:2c:2f:6a:cb:5c:51:6c:da: f4:f0:44:f5:6d:0c:33:eb:9d:e6:f8:19:f5:26:5a:d7:b8:df: a5:ff:66:0b:51:a8:a5:c9:13:10:77:a9:59:99:48:90:f5:66: 57:a7:d8:a7:ea:b4:0f:e7:96:78:d7:0e:88:ce:53:38:34:57: 83:c9:86:25:f0:75:25:85:dd:92:35:b7:ed:bd:b5:7a:37:b3: 40:79:7d:ab:2e:c1:af:47:b5:0e:0f:b0:a1:8e:00:b0:2f:a9: 24:b1:2c:f5:53:1d:5f:4a:4f:51:c4:aa:f9:c3:1a:ae:9b:69: 28:42:12:09:67:35:0c:39:9a:13:47:a8:32:15:ca:7f:78:cb: 55:6f:0e:57:59:f5:6a:a2:d7:a2:a8:1b:6c:36:35:45:77:fc: 04:d1:f4:ca:72:c9:b0:68:ae:a4:25:a8:05:55:65:cd:40:5e: 80:b0:e6:a0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MjJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM1QTc1MDNEQ0FBNzZE QzY1MjE1NjQxNkU0MkQ0MzFCN0I1NUVDNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+cb+94MLDC153TrhetSdjLf+ye4osNbo1KyqjhU9XP7/WMkn6 nBgT2ueqbtS/SEnq5JscokLL3t25jbKHMHxBSnJVL/gaIO2jhNhKTW/itTGQVvdH LBiC+bqnBuj7ZVzEfnQs5yQWTvoO5YVIXA+IjkpcAGFKjkN8iWEQcjpajrMcbe6I hG4mRvbvH0r2Gdwjya/8K1BVrNggAr0sbQlPCpmX8ewBkWei7lOqIZ1g26MMxNv2 IcZnVM1kDP2VLUJaQlVlGntmo2v8ioXHawFEin7Nrk1VKSi7CTvF/0M1o8vaJRZk em5FGaLyYNFosKI47er3SybglkxtauWBkkg/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxadQPcqnbcZSFWQW5C1DG3tV7HgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3hhZFFQY3FuYmNaU0ZXUVc1QzFERzN0VjdIZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYOIwDQYJKoZIhvcNAQELBQADggEBAE3k63g/1pkpxjWyNgOI7bE14WQa p5hGAl+oZsngzrACeRYtEtPNfYqTSL4jrUjpM40yEMUgXuVA9GE0wD4whIGD0jMQ n6VZq6U6sfvuBh/0pSIsL2rLXFFs2vTwRPVtDDPrneb4GfUmWte436X/ZgtRqKXJ ExB3qVmZSJD1Zlen2KfqtA/nlnjXDojOUzg0V4PJhiXwdSWF3ZI1t+29tXo3s0B5 fasuwa9HtQ4PsKGOALAvqSSxLPVTHV9KT1HEqvnDGq6baShCEglnNQw5mhNHqDIV yn94y1VvDldZ9Wqi16KoG2w2NUV3/ATR9MpyybBorqQlqAVVZc1AXoCw5qA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:24:29 2025 by rpki-client