$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q-QF6ELL8zvHGN_mrr90ZeyvMFU.roa File: Q-QF6ELL8zvHGN_mrr90ZeyvMFU.roa (raw, json) Hash identifier: uLJ4Yqdrl0Ht+ZuZA63VemJMB1EXPm4pKiIyXWHUSDk= Subject key identifier: 43:E4:05:E8:42:CB:F3:3B:C7:18:DF:E6:AE:BF:74:65:EC:AF:30:55 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CA5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q-QF6ELL8zvHGN_mrr90ZeyvMFU.roa Signing time: Tue 01 Apr 2025 02:03:31 +0000 ROA not before: Tue 01 Apr 2025 02:03:31 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3237 (0xca5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:31 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=43E405E842CBF33BC718DFE6AEBF7465ECAF3055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d7:07:36:4a:cd:34:33:08:9e:da:88:dc:a2: eb:5d:f0:b5:03:ae:b5:e1:ad:c0:6d:25:60:12:b9: b5:22:e7:c1:a2:cf:6a:05:fe:0d:c0:eb:0c:e6:fa: 9d:a0:9e:2e:42:08:98:83:13:c1:fd:44:5b:82:2f: f7:fe:64:7d:d3:45:64:53:95:58:82:bd:4b:20:85: 3f:b7:c9:da:9f:3c:0b:40:11:97:b0:4e:21:b7:59: 59:b0:e4:49:2b:91:00:91:1d:34:51:e6:85:dc:ff: 0a:ae:5d:8e:f6:8c:54:01:58:2d:f8:b6:5a:d5:82: 57:70:b6:8b:ba:f3:24:5d:4d:7d:9d:2d:3c:9e:53: 1b:50:6c:a6:1c:45:af:46:a6:18:91:a2:d0:9b:0c: 4e:62:e3:c3:11:e1:11:99:a6:18:ab:4c:cb:cc:d9: 2d:72:5c:0d:d5:2d:0a:d1:29:90:f2:32:43:61:1a: 06:c4:7e:01:20:c5:8e:09:70:34:e6:0f:61:58:65: aa:9b:7f:b7:19:24:0e:87:7c:4b:e1:b5:77:9c:ad: 72:cc:76:aa:f7:d8:0b:b2:73:81:bf:56:35:8d:cd: b2:48:23:50:9b:18:ae:51:fe:f8:c4:71:b5:be:29: 84:1a:81:8b:40:21:b9:4b:b4:b9:e9:cf:ba:b1:c2: 5f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E4:05:E8:42:CB:F3:3B:C7:18:DF:E6:AE:BF:74:65:EC:AF:30:55 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q-QF6ELL8zvHGN_mrr90ZeyvMFU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.176.0/22 Signature Algorithm: sha256WithRSAEncryption 84:58:3d:df:d5:ca:37:4f:f5:15:c8:40:83:7d:79:e9:de:24: 9b:d1:ed:52:1a:72:fb:ea:f9:de:a2:47:5a:95:bd:a9:f7:9f: 5c:5e:5f:ee:da:b0:ee:0e:62:ff:b8:e7:09:2c:1d:2b:3e:2e: dc:56:a0:52:c9:e5:b2:00:b7:42:16:7c:8e:23:68:90:65:4d: 90:cf:37:4c:3a:2d:4f:c6:7b:1d:76:ca:f5:8b:c3:07:94:24: c7:db:10:35:ba:04:a5:df:b1:85:64:a8:e5:7e:5a:97:3b:66: 3f:f7:11:81:92:b7:ab:87:74:f5:a8:4e:cc:41:57:24:f4:5d: d8:30:82:69:7b:81:73:7c:32:38:ea:24:39:30:6c:5e:63:2c: 19:33:49:36:27:19:8e:1c:3c:43:69:68:a5:00:62:cd:47:17: 99:5c:1c:64:46:83:b3:ad:91:bf:66:4c:a7:13:4f:25:ca:88: 0f:68:17:7f:9d:78:81:19:91:1a:90:3a:19:d5:fa:c2:e3:fe: dc:98:70:f7:89:9c:cd:70:86:65:fb:f9:fe:27:22:5d:e2:4e: 29:b9:91:5b:ef:04:c2:19:71:f3:6b:c3:ef:1c:ce:55:a4:17: 03:5d:bf:46:d2:b6:73:35:45:78:c7:22:ac:6a:0e:86:a9:be: 3a:8d:0f:1c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMzFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQzRTQwNUU4NDJDQkYz M0JDNzE4REZFNkFFQkY3NDY1RUNBRjMwNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR1wc2Ss00Mwie2ojcoutd8LUDrrXhrcBtJWASubUi58Giz2oF /g3A6wzm+p2gni5CCJiDE8H9RFuCL/f+ZH3TRWRTlViCvUsghT+3ydqfPAtAEZew TiG3WVmw5EkrkQCRHTRR5oXc/wquXY72jFQBWC34tlrVgldwtou68yRdTX2dLTye UxtQbKYcRa9GphiRotCbDE5i48MR4RGZphirTMvM2S1yXA3VLQrRKZDyMkNhGgbE fgEgxY4JcDTmD2FYZaqbf7cZJA6HfEvhtXecrXLMdqr32Auyc4G/VjWNzbJII1Cb GK5R/vjEcbW+KYQagYtAIblLtLnpz7qxwl8NAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQ+QF6ELL8zvHGN/mrr90ZeyvMFUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1EtUUY2RUxMOHp2SEdOX21ycjkwWmV5dk1GVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYrAwDQYJKoZIhvcNAQELBQADggEBAIRYPd/VyjdP9RXIQIN9eeneJJvR 7VIacvvq+d6iR1qVvan3n1xeX+7asO4OYv+45wksHSs+LtxWoFLJ5bIAt0IWfI4j aJBlTZDPN0w6LU/Gex12yvWLwweUJMfbEDW6BKXfsYVkqOV+Wpc7Zj/3EYGSt6uH dPWoTsxBVyT0Xdgwgml7gXN8MjjqJDkwbF5jLBkzSTYnGY4cPENpaKUAYs1HF5lc HGRGg7Otkb9mTKcTTyXKiA9oF3+deIEZkRqQOhnV+sLj/tyYcPeJnM1whmX7+f4n Il3iTim5kVvvBMIZcfNrw+8czlWkFwNdv0bStnM1RXjHIqxqDoapvjqNDxw= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:12 2025 by rpki-client