$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/qNC-SHY3czG1zVABvzKiLHI54PU.roa File: qNC-SHY3czG1zVABvzKiLHI54PU.roa (raw, json) Hash identifier: e86uG+zJNF2akieo6lWT+ug1Hro0n7VSTDZabi6cq78= Subject key identifier: A8:D0:BE:48:76:37:73:31:B5:CD:50:01:BF:32:A2:2C:72:39:E0:F5 Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Certificate serial: 3F Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/qNC-SHY3czG1zVABvzKiLHI54PU.roa Signing time: Tue 10 Jun 2025 10:48:46 +0000 ROA not before: Tue 10 Jun 2025 10:48:46 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 38628 IP address blocks: 116.193.96.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Validity Not Before: Jun 10 10:48:46 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=A8D0BE4876377331B5CD5001BF32A22C7239E0F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:8f:a8:99:5e:c9:56:9a:66:67:ff:cf:5f: 93:e2:88:12:e6:01:ad:67:6a:75:37:e0:2b:a5:6b: b9:d3:13:e3:10:98:47:e4:ec:71:86:a5:92:9c:bb: c1:22:21:fb:9f:a2:f4:40:fa:d1:4f:49:35:04:22: 5e:4e:5d:8d:b9:94:99:20:f5:6a:3e:bc:4e:2f:45: 47:04:aa:8a:55:42:f0:30:e4:0a:a3:38:d2:08:1d: a8:32:20:42:9e:da:c2:ed:4c:39:37:9c:98:75:4b: 8f:6b:45:6a:71:7b:d2:94:9c:db:76:6b:ac:e9:29: f1:80:ba:85:b7:54:91:cf:ee:ea:fd:b4:b3:b9:a7: a9:27:aa:28:cb:18:5a:45:ce:7d:ef:3a:a5:78:87: 21:f4:5e:55:6c:41:10:d9:1a:79:12:0c:ef:46:35: 55:60:6c:47:b7:95:f2:ba:92:44:b9:a8:d2:89:33: 54:ae:07:25:4d:51:0a:94:2a:67:3a:51:af:f2:41: 4b:34:a3:70:6f:42:2c:91:1d:9f:f1:70:26:22:b9: 44:86:61:e9:ed:d7:b6:ea:2b:d3:0e:be:7b:e8:36: c9:54:88:56:f9:19:9e:ae:0c:30:e9:f3:10:9c:b4: a8:97:80:6e:d8:b5:1f:a9:f9:18:39:d7:66:40:fe: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D0:BE:48:76:37:73:31:B5:CD:50:01:BF:32:A2:2C:72:39:E0:F5 X509v3 Authority Key Identifier: keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/qNC-SHY3czG1zVABvzKiLHI54PU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.193.96.0/19 Signature Algorithm: sha256WithRSAEncryption a3:f1:b5:e0:78:bf:66:6c:69:a5:5a:b7:20:ff:5a:0f:ca:36: ca:b9:78:2a:4d:55:4f:78:84:70:c1:00:24:e0:c1:11:ee:b8: 51:df:bc:43:30:56:66:46:53:86:4e:92:ce:32:23:65:5c:b5: 31:94:22:69:a2:1f:c1:eb:49:b0:53:eb:d2:a5:f5:ea:33:eb: 96:55:40:9b:7b:6c:bf:f5:e7:1b:41:85:05:65:4f:7c:81:7b: 5e:97:2b:c1:39:7a:9d:d0:75:13:b7:57:18:42:2f:48:3c:c1: 3e:ce:19:11:84:77:f5:e1:1d:64:59:92:c6:56:d1:a4:e6:92: 93:64:4c:90:1e:f6:b7:41:b7:b6:d5:e0:47:f5:a7:16:8f:7f: 3a:79:5e:f4:a0:3c:9a:7f:c7:dd:a4:80:cd:b0:8c:6c:c7:ac: 2b:bb:40:c4:57:da:6f:e6:8c:8d:10:fe:9c:7f:1f:22:39:95: 13:01:74:41:cc:9e:67:0a:44:50:b9:2c:e6:10:79:2c:83:8a: 54:82:c0:c1:d4:a6:af:81:07:35:ed:35:28:7a:ff:66:3d:c8: a1:2d:5c:ff:c7:64:c4:4a:ea:00:45:ca:7e:62:8e:c1:9f:bc: 28:87:91:b8:49:0d:9c:57:87:14:25:dd:b1:58:8d:0e:85:82: 04:92:6c:65 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNEI5 NTM2QzRFQzc4NUI4ODEyRTUzQTIxOUQyQjA5QTdEQ0JDRTBDMB4XDTI1MDYxMDEw NDg0NloXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoQThEMEJFNDg3NjM3NzMz MUI1Q0Q1MDAxQkYzMkEyMkM3MjM5RTBGNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMPAj6iZXslWmmZn/89fk+KIEuYBrWdqdTfgK6VrudMT4xCYR+Ts cYalkpy7wSIh+5+i9ED60U9JNQQiXk5djbmUmSD1aj68Ti9FRwSqilVC8DDkCqM4 0ggdqDIgQp7awu1MOTecmHVLj2tFanF70pSc23ZrrOkp8YC6hbdUkc/u6v20s7mn qSeqKMsYWkXOfe86pXiHIfReVWxBENkaeRIM70Y1VWBsR7eV8rqSRLmo0okzVK4H JU1RCpQqZzpRr/JBSzSjcG9CLJEdn/FwJiK5RIZh6e3Xtuor0w6+e+g2yVSIVvkZ nq4MMOnzEJy0qJeAbti1H6n5GDnXZkD+BHcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSo0L5IdjdzMbXNUAG/MqIscjng9TAfBgNVHSMEGDAWgBTEuVNsTseFuIEuU6IZ 0rCafcvODDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQ4L3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4zTHpndy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4z THpndy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NDgvcU5DLVNIWTNjekcxelZBQnZ6S2lMSEk1NFBVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXTBYDANBgkqhkiG9w0BAQsFAAOCAQEAo/G14Hi/ZmxppVq3IP9aD8o2yrl4 Kk1VT3iEcMEAJODBEe64Ud+8QzBWZkZThk6SzjIjZVy1MZQiaaIfwetJsFPr0qX1 6jPrllVAm3tsv/XnG0GFBWVPfIF7XpcrwTl6ndB1E7dXGEIvSDzBPs4ZEYR39eEd ZFmSxlbRpOaSk2RMkB72t0G3ttXgR/WnFo9/Onle9KA8mn/H3aSAzbCMbMesK7tA xFfab+aMjRD+nH8fIjmVEwF0QcyeZwpEULks5hB5LIOKVILAwdSmr4EHNe01KHr/ Zj3IoS1c/8dkxErqAEXKfmKOwZ+8KIeRuEkNnFeHFCXdsViNDoWCBJJsZQ== -----END CERTIFICATE-----Generated at Sun Jun 22 05:08:57 2025 by rpki-client