$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-N_nWwvSvdYWDU7ng3zdV9TblTo.roa File: -N_nWwvSvdYWDU7ng3zdV9TblTo.roa (raw, json) Hash identifier: lBnK6WkjNjTrgpAG9zjmZaWlVsMhaNpgGcpylmvdjmo= Subject key identifier: F8:DF:E7:5B:0B:D2:BD:D6:16:0D:4E:E7:83:7C:DD:57:D4:DB:95:3A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C09 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-N_nWwvSvdYWDU7ng3zdV9TblTo.roa Signing time: Tue 01 Apr 2025 01:51:33 +0000 ROA not before: Tue 01 Apr 2025 01:51:33 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3081 (0xc09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:33 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=F8DFE75B0BD2BDD6160D4EE7837CDD57D4DB953A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:58:91:35:8e:0c:01:04:ae:40:8b:47:18:c9: 8e:df:b8:8c:e5:8d:90:b3:22:c7:77:8b:1b:b7:26: 54:42:7b:c9:aa:10:be:2a:7c:31:9a:7d:8d:e0:79: cc:0c:9d:84:ab:0d:1c:9c:0d:23:80:aa:5f:32:d8: aa:3d:ec:bd:ab:04:2b:f2:b7:77:60:7d:96:2e:d8: 11:51:f9:03:db:6e:42:52:4b:1b:cd:2d:76:a0:fb: 4c:5e:8d:8c:42:a5:15:59:f3:7d:7d:03:2f:67:bf: 83:d2:ed:0d:43:91:4e:32:db:bd:7b:11:e4:09:d9: 47:d9:a5:e1:ab:f6:33:c3:64:a0:87:95:ae:3b:2c: 38:ce:19:58:ab:00:59:a3:51:9c:aa:ad:3c:28:52: 60:2a:92:42:93:81:06:ef:e2:e1:9e:e5:fe:e6:3c: 32:eb:db:c5:65:4a:52:a7:62:67:d6:2f:af:66:8c: fc:28:05:ea:24:0d:e9:e2:25:88:fa:4b:cf:9b:7d: b0:91:19:42:a4:45:0b:0f:a8:3d:dc:9c:c5:0b:70: ad:48:49:9e:cf:c1:f3:02:6b:37:7f:b7:52:6e:1f: 70:13:9b:54:d9:ec:96:4a:60:85:53:70:88:67:67: b5:ec:19:b1:a4:1d:60:a3:9a:78:f5:56:ab:ff:f4: 8b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DF:E7:5B:0B:D2:BD:D6:16:0D:4E:E7:83:7C:DD:57:D4:DB:95:3A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-N_nWwvSvdYWDU7ng3zdV9TblTo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.8.0/23 Signature Algorithm: sha256WithRSAEncryption 12:15:e2:fa:7a:2d:34:1e:e8:39:0d:5a:8b:af:80:fa:01:d3: 63:e2:6e:f6:56:3c:07:0c:d6:d4:11:4b:2a:b0:1a:ae:50:86: bf:1c:09:ca:ae:33:c2:a9:66:b7:39:ef:18:22:b0:3a:05:a3: b0:07:7e:01:c2:08:f0:3a:39:3c:27:66:22:47:46:cb:2c:96: fd:02:38:78:51:ec:88:13:28:7b:0d:66:13:1d:eb:10:d2:60: de:91:88:7d:f3:3e:a3:05:3b:1d:23:ef:93:5e:0c:b1:c8:63: e8:f5:f0:76:85:8b:1a:c2:9a:0e:5f:98:df:12:16:7d:6a:79: 8e:9d:10:c3:5c:99:23:85:c4:6f:b3:9a:4b:08:0c:bf:46:b0: 4c:3f:0f:e2:6c:7d:f2:77:e5:93:66:41:86:4c:c6:a0:47:fc: 6c:a7:51:c2:5a:c6:0d:6b:35:27:5f:e6:0a:a2:53:75:6c:17: a4:bc:b1:18:97:95:81:0a:02:10:0c:ec:5d:93:52:35:77:13: 45:3b:1a:71:43:d2:1f:8a:ba:91:62:83:a5:f9:13:93:5c:3f: ff:42:10:bd:ca:6d:f3:86:5a:4b:2e:13:b0:6c:d4:ab:50:36: fa:93:5e:1c:dc:1e:d0:9b:c6:eb:c1:4f:72:69:48:43:40:1b: c2:e7:af:f4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMzNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY4REZFNzVCMEJEMkJE RDYxNjBENEVFNzgzN0NERDU3RDREQjk1M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgWJE1jgwBBK5Ai0cYyY7fuIzljZCzIsd3ixu3JlRCe8mqEL4q fDGafY3gecwMnYSrDRycDSOAql8y2Ko97L2rBCvyt3dgfZYu2BFR+QPbbkJSSxvN LXag+0xejYxCpRVZ8319Ay9nv4PS7Q1DkU4y2717EeQJ2UfZpeGr9jPDZKCHla47 LDjOGVirAFmjUZyqrTwoUmAqkkKTgQbv4uGe5f7mPDLr28VlSlKnYmfWL69mjPwo BeokDeniJYj6S8+bfbCRGUKkRQsPqD3cnMULcK1ISZ7PwfMCazd/t1JuH3ATm1TZ 7JZKYIVTcIhnZ7XsGbGkHWCjmnj1Vqv/9It3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+N/nWwvSvdYWDU7ng3zdV9TblTowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Ly1OX25Xd3ZTdmRZV0RVN25nM3pkVjlUYmxUby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYAgwDQYJKoZIhvcNAQELBQADggEBABIV4vp6LTQe6DkNWouvgPoB02Pi bvZWPAcM1tQRSyqwGq5Qhr8cCcquM8KpZrc57xgisDoFo7AHfgHCCPA6OTwnZiJH Rssslv0COHhR7IgTKHsNZhMd6xDSYN6RiH3zPqMFOx0j75NeDLHIY+j18HaFixrC mg5fmN8SFn1qeY6dEMNcmSOFxG+zmksIDL9GsEw/D+JsffJ35ZNmQYZMxqBH/Gyn UcJaxg1rNSdf5gqiU3VsF6S8sRiXlYEKAhAM7F2TUjV3E0U7GnFD0h+KupFig6X5 E5NcP/9CEL3KbfOGWksuE7Bs1KtQNvqTXhzcHtCbxuvBT3JpSENAG8Lnr/Q= -----END CERTIFICATE-----Generated at Sat Apr 5 17:37:53 2025 by rpki-client