$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MF6Dr2jUrO71hdByMV9J94fJqyk.roa File: MF6Dr2jUrO71hdByMV9J94fJqyk.roa (raw, json) Hash identifier: VTT9w1p9R7xXXQUZzfaNv2ncY5xVc1HGB2YlLif3lck= Subject key identifier: 30:5E:83:AF:68:D4:AC:EE:F5:85:D0:72:31:5F:49:F7:87:C9:AB:29 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CF9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MF6Dr2jUrO71hdByMV9J94fJqyk.roa Signing time: Tue 01 Apr 2025 02:11:34 +0000 ROA not before: Tue 01 Apr 2025 02:11:34 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3321 (0xcf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:34 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=305E83AF68D4ACEEF585D072315F49F787C9AB29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4f:5b:29:ea:1c:8c:ce:eb:ea:cd:61:61:5d: 62:c1:ca:e7:f5:d0:09:b7:ea:b3:8e:1f:8a:47:6a: 23:f4:db:d3:87:2f:03:a4:00:bf:b3:96:55:26:95: 5d:b6:ce:de:74:13:6d:f2:09:ac:62:f9:35:5d:be: d3:c5:a5:3a:c2:92:16:bf:7e:d5:b1:23:3f:a1:fc: 0e:dd:16:02:bb:78:0f:6a:e9:1a:d2:2a:a3:cd:39: a2:36:36:37:92:02:a6:cb:fb:73:0b:b0:a2:08:47: b3:c4:32:b6:e8:e4:54:de:6f:46:da:3e:3f:a8:c5: 41:7f:03:c0:ce:85:1a:28:ac:7d:46:0b:47:32:24: 91:42:22:6a:29:98:23:67:68:91:2d:8f:ac:53:d6: 8d:fb:d2:44:a6:5c:3c:94:7b:9a:e5:02:a3:03:f2: 58:c2:30:83:e8:97:0c:7f:89:93:ba:fd:15:01:e4: 74:90:1f:c3:cd:dc:5b:0c:02:bb:19:a2:06:60:93: 66:f7:78:f9:1d:81:23:fd:50:f7:83:41:c8:c3:96: 2e:b1:5b:32:7b:3c:db:8e:c3:69:10:42:19:57:2f: 1d:e7:cc:15:0f:02:f5:85:d5:12:18:44:84:0a:c5: 9b:c8:98:30:94:86:a8:5e:de:d3:48:ed:37:a4:11: 37:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5E:83:AF:68:D4:AC:EE:F5:85:D0:72:31:5F:49:F7:87:C9:AB:29 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MF6Dr2jUrO71hdByMV9J94fJqyk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.188.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:8e:dc:b5:ed:aa:67:dd:5f:70:ed:ac:47:47:e1:3c:e6:f2: 14:30:43:ff:30:f3:c0:23:5a:61:93:e1:7b:89:27:e5:b7:d4: 67:99:dd:a7:db:fd:6b:0c:be:04:1c:1f:f1:59:bf:df:8a:56: 4c:ea:b9:dd:92:4b:c4:1f:ec:a1:0e:84:67:86:b7:5b:3c:d5: d5:78:61:97:67:b7:42:29:dc:99:24:88:c0:02:2b:39:b1:d3: 5d:d8:6d:b6:5f:0f:26:80:82:7f:04:ba:13:5d:02:66:07:0f: 4b:eb:8b:56:f1:42:c9:21:86:01:31:b5:ed:d3:14:ac:77:da: 0d:ed:35:f2:31:54:ad:39:b8:ef:19:8e:0f:5b:01:de:1d:94: 72:3d:2b:75:74:dd:37:2e:4a:b4:75:e6:f9:68:49:ca:df:e3: 25:e3:60:78:6c:f7:d1:94:38:41:2d:87:99:70:27:a6:0f:e0: e8:ea:d9:23:a8:c8:7e:f4:23:23:47:8f:5e:47:75:03:9f:df: dc:71:f5:18:6e:3d:11:5b:37:83:77:15:1e:d0:bd:15:e1:4e: 71:6c:33:b7:23:cf:5d:c3:04:cb:dc:06:4f:d7:4c:a8:35:de: 98:0c:05:11:de:a2:cf:6f:6a:50:dc:a0:3b:d3:60:e4:23:24: bf:49:dd:b1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExMzRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMwNUU4M0FGNjhENEFD RUVGNTg1RDA3MjMxNUY0OUY3ODdDOUFCMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeT1sp6hyMzuvqzWFhXWLByuf10Am36rOOH4pHaiP029OHLwOk AL+zllUmlV22zt50E23yCaxi+TVdvtPFpTrCkha/ftWxIz+h/A7dFgK7eA9q6RrS KqPNOaI2NjeSAqbL+3MLsKIIR7PEMrbo5FTeb0baPj+oxUF/A8DOhRoorH1GC0cy JJFCImopmCNnaJEtj6xT1o370kSmXDyUe5rlAqMD8ljCMIPolwx/iZO6/RUB5HSQ H8PN3FsMArsZogZgk2b3ePkdgSP9UPeDQcjDli6xWzJ7PNuOw2kQQhlXLx3nzBUP AvWF1RIYRIQKxZvImDCUhqhe3tNI7TekETcNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMF6Dr2jUrO71hdByMV9J94fJqykwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L01GNkRyMmpVck83MWhkQnlNVjlKOTRmSnF5ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYrwwDQYJKoZIhvcNAQELBQADggEBAA2O3LXtqmfdX3DtrEdH4Tzm8hQw Q/8w88AjWmGT4XuJJ+W31GeZ3afb/WsMvgQcH/FZv9+KVkzqud2SS8Qf7KEOhGeG t1s81dV4YZdnt0Ip3JkkiMACKzmx013YbbZfDyaAgn8EuhNdAmYHD0vri1bxQskh hgExte3TFKx32g3tNfIxVK05uO8Zjg9bAd4dlHI9K3V03TcuSrR15vloScrf4yXj YHhs99GUOEEth5lwJ6YP4Ojq2SOoyH70IyNHj15HdQOf39xx9RhuPRFbN4N3FR7Q vRXhTnFsM7cjz13DBMvcBk/XTKg13pgMBRHeos9valDcoDvTYOQjJL9J3bE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:27 2025 by rpki-client