$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20231/3DXFxCDhA7ZpML14V2xkZp_1bM0.roa File: 3DXFxCDhA7ZpML14V2xkZp_1bM0.roa (raw, json) Hash identifier: njWfIXU9WnUjlIkE7u/GKMsXCDgX7AyHhcbi3b0iRMo= Subject key identifier: DC:35:C5:C4:20:E1:03:B6:69:30:BD:78:57:6C:64:66:9F:F5:6C:CD Certificate issuer: /CN=ED43E3F7806FB03A649076FB69D33752EC491522 Certificate serial: 02 Authority key identifier: ED:43:E3:F7:80:6F:B0:3A:64:90:76:FB:69:D3:37:52:EC:49:15:22 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7UPj94BvsDpkkHb7adM3UuxJFSI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/3DXFxCDhA7ZpML14V2xkZp_1bM0.roa Signing time: Mon 31 Mar 2025 05:24:15 +0000 ROA not before: Mon 31 Mar 2025 05:24:15 +0000 ROA not after: Tue 24 Mar 2026 00:46:39 +0000 asID: 63805 IP address blocks: 103.239.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7UPj94BvsDpkkHb7adM3UuxJFSI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 14:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED43E3F7806FB03A649076FB69D33752EC491522 Validity Not Before: Mar 31 05:24:15 2025 GMT Not After : Mar 24 00:46:39 2026 GMT Subject: CN=DC35C5C420E103B66930BD78576C64669FF56CCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:91:2b:98:2c:4a:fe:f1:07:b5:78:27:bf: 25:8b:c0:b0:a6:cf:c9:f1:5c:da:9d:82:aa:e4:9f: 85:a6:e8:11:2e:15:83:d6:8b:64:48:69:58:ff:2c: cd:c8:bf:57:75:36:b7:81:79:08:70:60:83:ee:79: 08:be:96:6f:16:a2:02:15:1a:99:11:5c:0a:d7:3a: 5e:59:2b:d5:26:05:4d:fc:3d:3b:44:b2:c4:0b:3c: 9f:f3:b7:4d:b8:e0:c6:66:19:a2:e1:7a:39:26:71: 12:4a:c6:f9:a4:e9:9e:92:d8:7d:e2:2c:dc:c5:34: 9b:ea:9c:1d:08:65:c7:ce:51:c7:26:19:c5:15:a3: 1b:c6:51:3d:85:7d:1b:88:30:02:b6:13:40:f2:3a: 1f:89:26:7e:36:ed:db:43:a2:b0:25:59:13:85:05: 35:ce:2b:94:3b:5f:15:74:70:bd:03:97:bd:86:ce: ce:df:c5:ee:9a:74:77:c2:41:bc:83:7b:b0:f0:29: 2a:d6:67:f1:62:86:ad:d2:8f:03:ea:16:6e:69:83: 2a:a2:0d:43:56:41:c0:48:43:ac:a2:9f:78:30:e7: 7e:54:30:0f:b9:4a:60:97:b4:3f:de:cb:b8:96:17: 83:11:6f:e2:dc:7b:00:6b:d5:3c:ee:fe:87:d3:5e: 69:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:35:C5:C4:20:E1:03:B6:69:30:BD:78:57:6C:64:66:9F:F5:6C:CD X509v3 Authority Key Identifier: keyid:ED:43:E3:F7:80:6F:B0:3A:64:90:76:FB:69:D3:37:52:EC:49:15:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7UPj94BvsDpkkHb7adM3UuxJFSI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/3DXFxCDhA7ZpML14V2xkZp_1bM0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.239.90.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:2e:48:cd:f0:df:96:53:29:ba:d2:dc:e2:70:24:b4:b3:28: be:78:d6:56:08:1d:70:cb:9a:e5:83:f5:a7:0c:59:72:92:ea: 6b:82:ed:ec:6c:3c:97:c9:16:ac:88:2e:70:b4:45:17:81:dc: 52:91:1c:d6:6b:1f:85:73:f0:b2:57:60:73:2c:b6:97:99:95: 0f:5e:36:ac:44:ab:8a:9a:cf:07:90:66:23:1a:f1:28:81:e8: a4:9e:1a:fa:f3:5d:fa:9a:47:53:7d:c3:df:f3:bd:40:98:53: c9:6b:0b:54:7f:11:18:a2:b0:f0:4a:96:ac:c7:fd:7e:c9:16: ef:fc:28:65:9f:36:1e:31:40:4e:cb:ae:24:5b:14:6c:2c:38: b6:82:c9:a8:af:f4:32:27:df:5d:f2:3a:03:56:ea:73:30:f4: 2b:2a:d4:65:80:1b:6b:7c:25:62:8e:6a:29:9c:bb:fe:d5:15: 44:6b:df:46:13:89:f3:f3:38:b0:e6:85:32:cc:e8:d5:f3:ff: 98:81:56:c2:07:a0:e5:e0:ef:0e:ee:5d:af:53:a9:2c:7f:fe: 19:de:99:c4:fe:55:82:23:23:11:8c:3e:aa:70:49:cb:06:94: 88:8c:eb:d0:67:b9:da:e9:a7:8a:40:e3:5c:b7:47:58:67:e1: cb:c9:7b:24 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRDQz RTNGNzgwNkZCMDNBNjQ5MDc2RkI2OUQzMzc1MkVDNDkxNTIyMB4XDTI1MDMzMTA1 MjQxNVoXDTI2MDMyNDAwNDYzOVowMzExMC8GA1UEAxMoREMzNUM1QzQyMEUxMDNC NjY5MzBCRDc4NTc2QzY0NjY5RkY1NkNDRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKD0kSuYLEr+8Qe1eCe/JYvAsKbPyfFc2p2CquSfhaboES4Vg9aL ZEhpWP8szci/V3U2t4F5CHBgg+55CL6WbxaiAhUamRFcCtc6Xlkr1SYFTfw9O0Sy xAs8n/O3TbjgxmYZouF6OSZxEkrG+aTpnpLYfeIs3MU0m+qcHQhlx85RxyYZxRWj G8ZRPYV9G4gwArYTQPI6H4kmfjbt20OisCVZE4UFNc4rlDtfFXRwvQOXvYbOzt/F 7pp0d8JBvIN7sPApKtZn8WKGrdKPA+oWbmmDKqINQ1ZBwEhDrKKfeDDnflQwD7lK YJe0P97LuJYXgxFv4tx7AGvVPO7+h9Neab0CAwEAAaOCAigwggIkMB0GA1UdDgQW BBTcNcXEIOEDtmkwvXhXbGRmn/VszTAfBgNVHSMEGDAWgBTtQ+P3gG+wOmSQdvtp 0zdS7EkVIjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyMzEvN1VQajk0QnZzRHBra0hiN2FkTTNVdXhKRlNJLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN1VQajk0QnZzRHBra0hiN2FkTTNV dXhKRlNJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjMxLzNEWEZ4Q0RoQTdacE1MMTRWMnhrWnBfMWJNMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFn71owDQYJKoZIhvcNAQELBQADggEBAH8uSM3w35ZTKbrS3OJwJLSz KL541lYIHXDLmuWD9acMWXKS6muC7exsPJfJFqyILnC0RReB3FKRHNZrH4Vz8LJX YHMstpeZlQ9eNqxEq4qazweQZiMa8SiB6KSeGvrzXfqaR1N9w9/zvUCYU8lrC1R/ ERiisPBKlqzH/X7JFu/8KGWfNh4xQE7LriRbFGwsOLaCyaiv9DIn313yOgNW6nMw 9Csq1GWAG2t8JWKOaimcu/7VFURr30YTifPzOLDmhTLM6NXz/5iBVsIHoOXg7w7u Xa9TqSx//hnemcT+VYIjIxGMPqpwScsGlIiM69Bnudrpp4pA41y3R1hn4cvJeyQ= -----END CERTIFICATE-----Generated at Fri Apr 11 23:34:23 2025 by rpki-client