$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/9yBOsLxpzwDo5Or4vjEXoU5RfQU.roa File: 9yBOsLxpzwDo5Or4vjEXoU5RfQU.roa (raw, json) Hash identifier: Huwy0k+8yLn5DtmWHxkU4wKySUSWPYbaL3Pouy2kEfY= Subject key identifier: F7:20:4E:B0:BC:69:CF:00:E8:E4:EA:F8:BE:31:17:A1:4E:51:7D:05 Certificate issuer: /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Certificate serial: 3B Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/9yBOsLxpzwDo5Or4vjEXoU5RfQU.roa Signing time: Tue 01 Apr 2025 01:30:46 +0000 ROA not before: Tue 01 Apr 2025 01:30:46 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 63803 IP address blocks: 2401:d20:2fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Validity Not Before: Apr 1 01:30:46 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=F7204EB0BC69CF00E8E4EAF8BE3117A14E517D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:4d:61:92:34:f7:8c:b6:17:b0:d6:24:55: e5:85:a8:e0:23:f5:66:46:52:20:0f:9b:0c:fa:14: 24:ee:ae:90:c0:e7:15:31:fa:6f:59:28:61:6a:46: 63:25:34:5a:91:36:a7:d9:c0:12:a8:98:47:b5:7b: 11:e5:f8:91:28:4c:87:47:62:87:67:5a:73:18:10: 51:e1:f0:5b:5e:09:1d:b6:65:8c:5d:da:93:88:32: a6:3c:93:72:c8:9d:4d:08:fb:91:0a:6f:2a:b6:24: a4:05:49:2b:e5:80:97:12:0d:9f:3a:71:a8:55:cc: 3c:9d:d6:41:8f:15:0e:24:2d:f2:9b:fc:6f:ee:45: 64:cb:01:a8:fe:3f:6b:92:fd:c7:c4:9f:52:5b:67: 71:e7:ac:0f:6c:1f:d8:5f:ae:3b:7f:a2:e1:8e:72: f4:ae:7d:db:e0:5d:0d:c5:67:9c:9c:f4:e5:30:c5: 6d:39:f7:80:49:a2:91:f8:1a:02:d3:3d:82:4a:8d: cc:49:66:93:1e:9a:2e:08:1e:3c:45:ec:3a:4e:ad: 88:31:4a:c7:f3:e9:32:b3:d4:71:59:44:a2:c1:d4: 3d:ee:36:e7:e2:40:11:57:1a:a9:59:77:4f:3f:96: 91:62:27:6c:e0:44:75:cf:95:31:0d:62:23:78:7c: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:20:4E:B0:BC:69:CF:00:E8:E4:EA:F8:BE:31:17:A1:4E:51:7D:05 X509v3 Authority Key Identifier: keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/9yBOsLxpzwDo5Or4vjEXoU5RfQU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:d20:2fff::/48 Signature Algorithm: sha256WithRSAEncryption 8a:d5:7d:5c:73:37:fd:ef:81:cf:c0:d1:39:4c:7b:74:82:24: 63:82:c5:28:46:60:94:43:f3:0e:f1:4a:d4:d0:2e:2e:34:ef: f9:18:2c:28:df:bb:5d:cd:16:e2:a9:3f:cf:8e:4c:92:8f:15: 1a:1c:83:fc:6e:28:39:6b:60:07:66:28:4b:0b:75:d4:d9:8c: 4e:45:aa:6f:3a:2c:0c:8e:f6:9a:d3:93:65:04:2e:8f:ac:50: da:54:f7:9a:59:1e:bd:9a:99:b8:37:0a:48:99:ca:50:4e:e4: fa:80:25:36:88:38:29:7e:b3:b1:fb:4c:d2:ed:4a:a8:ca:cf: 2b:45:df:f3:31:dc:e6:83:d7:f2:0d:c7:b4:68:6f:8b:b5:f6: af:fa:b6:bf:98:26:08:6e:b4:35:fe:44:b7:b6:87:16:9d:f5: aa:fe:c5:71:02:f8:70:6b:8d:a1:3c:f2:0f:8f:19:8d:f4:fd: aa:a6:6c:ff:91:fe:ae:21:0a:24:61:4e:90:ac:b9:30:f9:e1: e1:88:fc:ee:64:06:bf:61:8d:8d:fd:a2:47:85:9c:5d:2b:de: a3:c2:d6:cb:e6:99:b4:1d:88:0f:b6:a4:2e:e5:d2:60:01:d5: f5:f7:a3:62:e5:42:d6:49:ee:11:22:10:9a:e2:c8:1b:ab:ee: 01:5e:a8:58 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTI1MDQwMTAx MzA0NloXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRjcyMDRFQjBCQzY5Q0Yw MEU4RTRFQUY4QkUzMTE3QTE0RTUxN0QwNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMMLTWGSNPeMthew1iRV5YWo4CP1ZkZSIA+bDPoUJO6ukMDnFTH6 b1koYWpGYyU0WpE2p9nAEqiYR7V7EeX4kShMh0dih2dacxgQUeHwW14JHbZljF3a k4gypjyTcsidTQj7kQpvKrYkpAVJK+WAlxINnzpxqFXMPJ3WQY8VDiQt8pv8b+5F ZMsBqP4/a5L9x8SfUltnceesD2wf2F+uO3+i4Y5y9K592+BdDcVnnJz05TDFbTn3 gEmikfgaAtM9gkqNzElmkx6aLggePEXsOk6tiDFKx/PpMrPUcVlEosHUPe425+JA EVcaqVl3Tz+WkWInbOBEdc+VMQ1iI3h8vSUCAwEAAaOCAiswggInMB0GA1UdDgQW BBT3IE6wvGnPAOjk6vi+MRehTlF9BTAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDIzLzl5Qk9zTHhwendEbzVPcjR2akVYb1U1UmZRVS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkAQ0gL/8wDQYJKoZIhvcNAQELBQADggEBAIrVfVxzN/3vgc/A0TlM e3SCJGOCxShGYJRD8w7xStTQLi407/kYLCjfu13NFuKpP8+OTJKPFRocg/xuKDlr YAdmKEsLddTZjE5Fqm86LAyO9prTk2UELo+sUNpU95pZHr2ambg3CkiZylBO5PqA JTaIOCl+s7H7TNLtSqjKzytF3/Mx3OaD1/INx7Rob4u19q/6tr+YJghutDX+RLe2 hxad9ar+xXEC+HBrjaE88g+PGY30/aqmbP+R/q4hCiRhTpCsuTD54eGI/O5kBr9h jY39okeFnF0r3qPC1svmmbQdiA+2pC7l0mAB1fX3o2LlQtZJ7hEiEJriyBur7gFe qFg= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:47 2025 by rpki-client