$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AP1xuHMgus4rBnUIWhVWfg0obUU.roa File: AP1xuHMgus4rBnUIWhVWfg0obUU.roa (raw, json) Hash identifier: F2rgsc98+jrkeoejLu6h7SyyYlzts7fU7kIJHQiwG4Q= Subject key identifier: 00:FD:71:B8:73:20:BA:CE:2B:06:75:08:5A:15:56:7E:0D:28:6D:45 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FCA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AP1xuHMgus4rBnUIWhVWfg0obUU.roa Signing time: Tue 01 Jul 2025 01:36:13 +0000 ROA not before: Tue 01 Jul 2025 01:36:13 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 9605 IP address blocks: 49.109.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4042 (0xfca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 1 01:36:13 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=00FD71B87320BACE2B0675085A15567E0D286D45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:85:3e:64:c3:d8:d2:23:89:31:6d:fd:5e:e4: 8a:08:e4:a4:22:af:52:f9:0e:5a:dc:3c:a3:8b:b3: 79:91:dd:3b:ca:8a:c8:04:f0:ea:f0:05:4a:9f:da: 97:e5:fb:6d:7f:bd:f6:d6:5f:d5:06:a6:fb:f3:91: de:3e:39:33:6e:a2:af:28:de:59:6e:de:97:17:d5: f7:9f:7b:6d:40:9b:41:55:1e:d0:a1:20:32:01:38: 06:5b:a8:4f:2d:52:aa:4d:f5:09:35:84:2c:ac:c1: 61:4f:d3:12:ab:c8:bd:49:ba:45:e1:40:7c:e1:e9: 89:3d:e3:b8:8d:04:5e:b4:90:d0:15:69:7f:53:ee: fa:20:8a:8d:b6:44:68:f6:45:d8:44:7b:67:64:80: 89:88:0f:c2:9d:9c:fd:96:fd:23:ed:89:ee:87:93: de:f5:c2:d7:93:74:9a:f6:16:a5:56:63:cf:f5:95: f6:b8:cb:ec:66:89:4e:f7:c0:38:e8:03:a3:4a:20: 49:32:97:a5:99:27:6e:f8:96:d5:38:f6:27:0e:29: 5b:78:f1:94:1d:a5:8d:87:64:18:a7:b0:dd:80:f5: f9:22:cd:e6:0d:55:2f:a3:23:b5:6b:4c:da:58:22: 75:27:fa:30:d0:af:72:05:9f:9d:68:74:77:be:b7: 2f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FD:71:B8:73:20:BA:CE:2B:06:75:08:5A:15:56:7E:0D:28:6D:45 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AP1xuHMgus4rBnUIWhVWfg0obUU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.109.96.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:dd:05:15:5c:b5:ca:d0:df:7e:70:22:1d:57:0c:70:09:20: f8:11:17:ff:b9:dd:4d:fd:af:ad:28:aa:59:33:d1:5d:2a:9b: 9e:4f:25:66:0e:b0:50:21:f7:4f:2e:30:f5:83:03:55:fa:8e: 36:92:ec:ee:22:a8:ea:62:d9:62:2d:d7:37:03:b4:40:e8:08: e9:dc:42:e2:a4:ca:83:78:23:bd:8f:4b:de:1b:03:15:b5:80: 73:ba:a9:d1:0a:0e:d0:c9:ce:e6:26:74:59:b3:53:be:b1:9f: 9f:74:09:bf:41:eb:c9:43:79:d9:27:dc:1c:2c:98:6b:67:1f: f3:0f:8c:ef:8f:85:80:53:c4:e3:45:cf:e7:fb:93:e3:97:77: 7f:74:0f:d9:22:6e:2a:c9:a8:7f:6f:4f:ea:e9:0a:c2:f0:92: 00:3f:39:98:1c:3d:a8:52:6b:15:e9:de:f8:bb:93:51:db:a1: de:6f:73:71:64:ba:c6:84:88:20:76:e5:33:22:6b:11:52:d9: 84:56:c6:07:5d:83:5c:e3:64:80:c2:05:f9:39:cd:8c:c8:a5: a4:07:15:35:97:3e:f3:40:5c:e3:fa:18:44:69:20:49:99:20: 01:1b:d2:e0:b5:0d:10:3d:86:42:a6:bb:a0:c4:17:b2:8e:f3: 1c:0a:9f:7c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA3MDEw MTM2MTNaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAwRkQ3MUI4NzMyMEJB Q0UyQjA2NzUwODVBMTU1NjdFMEQyODZENDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAhT5kw9jSI4kxbf1e5IoI5KQir1L5DlrcPKOLs3mR3TvKisgE 8OrwBUqf2pfl+21/vfbWX9UGpvvzkd4+OTNuoq8o3llu3pcX1fefe21Am0FVHtCh IDIBOAZbqE8tUqpN9Qk1hCyswWFP0xKryL1JukXhQHzh6Yk947iNBF60kNAVaX9T 7vogio22RGj2RdhEe2dkgImID8KdnP2W/SPtie6Hk971wteTdJr2FqVWY8/1lfa4 y+xmiU73wDjoA6NKIEkyl6WZJ274ltU49icOKVt48ZQdpY2HZBinsN2A9fkizeYN VS+jI7VrTNpYInUn+jDQr3IFn51odHe+ty8RAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUAP1xuHMgus4rBnUIWhVWfg0obUUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0FQMXh1SE1ndXM0ckJuVUlXaFZXZmcwb2JVVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUxbWAwDQYJKoZIhvcNAQELBQADggEBAErdBRVctcrQ335wIh1XDHAJIPgR F/+53U39r60oqlkz0V0qm55PJWYOsFAh908uMPWDA1X6jjaS7O4iqOpi2WIt1zcD tEDoCOncQuKkyoN4I72PS94bAxW1gHO6qdEKDtDJzuYmdFmzU76xn590Cb9B68lD edkn3BwsmGtnH/MPjO+PhYBTxONFz+f7k+OXd390D9kibirJqH9vT+rpCsLwkgA/ OZgcPahSaxXp3vi7k1Hbod5vc3FkusaEiCB25TMiaxFS2YRWxgddg1zjZIDCBfk5 zYzIpaQHFTWXPvNAXOP6GERpIEmZIAEb0uC1DRA9hkKmu6DEF7KO8xwKn3w= -----END CERTIFICATE-----Generated at Thu Jul 3 18:42:47 2025 by rpki-client