$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2jZBbQvI6XNrrIfeFBebWrOr9G8.roa File: 2jZBbQvI6XNrrIfeFBebWrOr9G8.roa (raw, json) Hash identifier: RQugyZS/plz5dThI/ngsob0PJx00cDDCvhBItuwa5yQ= Subject key identifier: DA:36:41:6D:0B:C8:E9:73:6B:AC:87:DE:14:17:9B:5A:B3:AB:F4:6F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AD3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2jZBbQvI6XNrrIfeFBebWrOr9G8.roa Signing time: Fri 24 Jan 2025 04:49:09 +0000 ROA not before: Fri 24 Jan 2025 04:49:09 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.109.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2771 (0xad3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 24 04:49:09 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=DA36416D0BC8E9736BAC87DE14179B5AB3ABF46F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e7:14:a9:d0:7f:f9:00:10:46:99:82:8a:18: 51:07:8f:69:c1:ab:59:dd:b2:2c:32:b9:b5:e2:53: d2:4b:75:f9:6e:59:8e:42:ef:57:52:c3:03:65:d6: 5d:96:a2:e9:b4:42:25:bb:f3:cb:60:43:ec:20:16: 90:f7:b8:9c:4a:1e:06:10:76:36:8f:a9:47:8d:0e: b9:7e:56:84:20:b8:a4:c4:60:a1:26:85:a7:4e:dc: be:4d:37:c8:e9:2c:5d:53:c6:ff:85:0d:58:ec:f7: c0:24:a1:fd:23:8e:97:b8:87:13:44:ee:51:2f:e3: 98:b4:b4:4f:0b:e8:f9:f7:78:13:cd:6a:d5:13:6f: 64:cc:50:31:76:8a:1f:11:38:84:83:d2:dc:be:44: c8:1a:18:e7:ac:17:60:9e:aa:ed:ec:f1:9e:19:41: ea:3e:09:b7:96:5c:c3:e6:ca:f0:38:14:51:b0:92: 68:f1:d1:c4:bc:ce:0c:82:2c:92:03:f9:14:eb:d5: 03:41:d4:b4:ff:f5:97:5f:f1:f2:61:1f:f9:d3:b8: ce:dc:e2:b3:b0:79:20:5e:8b:f7:e1:aa:73:68:9f: 84:47:b2:ae:7a:f1:63:7d:70:c1:2b:f2:2f:72:02: 4e:72:8b:8d:b2:de:d1:59:71:75:09:71:52:5f:85: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:36:41:6D:0B:C8:E9:73:6B:AC:87:DE:14:17:9B:5A:B3:AB:F4:6F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2jZBbQvI6XNrrIfeFBebWrOr9G8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.109.72.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:e6:cf:95:21:a3:06:1b:7c:57:85:7e:72:ed:f0:af:03:5d: 2f:c6:47:7b:e6:ee:c4:b4:22:0c:0e:f2:25:19:79:e6:cb:e6: 81:99:30:cc:35:71:05:24:cb:8f:c8:56:44:f8:95:dd:d6:b1: 29:6a:1d:38:3a:6e:bd:79:fa:61:8a:22:58:2b:f2:4c:c7:d4: 13:96:dc:38:e8:9b:94:0d:f2:41:bb:3f:fb:7e:34:fd:e8:c0: ab:62:c6:b2:1e:65:a4:44:0c:7d:44:b1:47:b8:b8:a9:19:72: 61:39:a0:85:26:7a:c1:eb:8c:af:f0:a3:14:07:33:3f:c4:9a: 58:4b:43:fc:b3:d3:cd:ef:04:cd:97:95:e8:9b:24:24:79:6c: 4e:30:88:f0:6d:3f:54:99:98:b2:e2:3d:eb:12:b0:64:6e:38: b8:e3:87:a0:d5:29:ed:bc:ed:89:61:41:6b:12:92:07:a4:cd: 20:78:79:85:b3:b9:79:f0:ea:a2:ae:8e:12:fd:05:b0:41:b1: 6c:94:e6:a3:56:b9:d4:5f:89:1f:54:c5:45:aa:9d:ba:64:bf: e2:ba:8a:56:85:01:c1:4b:5e:c7:e8:d4:86:fc:88:34:d9:07: 4d:4d:ee:95:5d:fb:08:02:8e:29:cc:8c:e2:b1:6d:84:a1:b6: 2d:ed:3b:af -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCtMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMjQw NDQ5MDlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERBMzY0MTZEMEJDOEU5 NzM2QkFDODdERTE0MTc5QjVBQjNBQkY0NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt5xSp0H/5ABBGmYKKGFEHj2nBq1ndsiwyubXiU9JLdfluWY5C 71dSwwNl1l2Woum0QiW788tgQ+wgFpD3uJxKHgYQdjaPqUeNDrl+VoQguKTEYKEm hadO3L5NN8jpLF1Txv+FDVjs98Akof0jjpe4hxNE7lEv45i0tE8L6Pn3eBPNatUT b2TMUDF2ih8ROISD0ty+RMgaGOesF2Cequ3s8Z4ZQeo+CbeWXMPmyvA4FFGwkmjx 0cS8zgyCLJID+RTr1QNB1LT/9Zdf8fJhH/nTuM7c4rOweSBei/fhqnNon4RHsq56 8WN9cMEr8i9yAk5yi42y3tFZcXUJcVJfhQePAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2jZBbQvI6XNrrIfeFBebWrOr9G8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJqWkJiUXZJNlhOcnJJZmVGQmViV3JPcjlHOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxbUgwDQYJKoZIhvcNAQELBQADggEBAJ3mz5UhowYbfFeFfnLt8K8DXS/G R3vm7sS0IgwO8iUZeebL5oGZMMw1cQUky4/IVkT4ld3WsSlqHTg6br15+mGKIlgr 8kzH1BOW3Djom5QN8kG7P/t+NP3owKtixrIeZaREDH1EsUe4uKkZcmE5oIUmesHr jK/woxQHMz/EmlhLQ/yz083vBM2XleibJCR5bE4wiPBtP1SZmLLiPesSsGRuOLjj h6DVKe287YlhQWsSkgekzSB4eYWzuXnw6qKujhL9BbBBsWyU5qNWudRfiR9UxUWq nbpkv+K6ilaFAcFLXsfo1Ib8iDTZB01N7pVd+wgCjinMjOKxbYShti3tO68= -----END CERTIFICATE-----Generated at Fri Oct 24 13:47:58 2025 by rpki-client