$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ErwP1oeFCs9kKsDoTi67NCiF5A.roa File: 2ErwP1oeFCs9kKsDoTi67NCiF5A.roa (raw, json) Hash identifier: BbtUuR4mEPEvtV7rlmaHol2h1rJJ0SzvHnR3Pch8mhg= Subject key identifier: D8:4A:F0:3F:5A:1E:14:2B:3D:90:AB:03:A1:38:BA:EC:D0:A2:17:90 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B93 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ErwP1oeFCs9kKsDoTi67NCiF5A.roa Signing time: Tue 01 Apr 2025 01:39:46 +0000 ROA not before: Tue 01 Apr 2025 01:39:46 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2963 (0xb93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:39:46 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D84AF03F5A1E142B3D90AB03A138BAECD0A21790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:fb:3c:56:7b:f5:fe:2c:ba:6a:26:d2:a9: 2a:f4:13:9e:de:79:d4:f7:2e:42:f0:3c:87:f8:a7: 79:34:1a:81:e7:dc:27:56:08:3f:a9:da:2e:97:e4: 6f:4a:ec:33:d5:e8:49:0b:e2:3d:bf:68:bb:61:0e: f8:ba:4b:96:e4:cf:4e:18:19:9a:17:7c:01:b7:00: fb:d1:c8:47:42:f5:22:70:45:38:76:2a:fc:19:38: 03:6e:83:af:f6:1a:b2:9d:06:39:e7:35:16:91:2a: e0:39:b1:eb:03:5e:a2:d3:86:a1:a3:4b:1d:77:95: 0e:bf:3b:ba:b0:06:2f:9e:d4:b1:25:8d:71:01:cf: 07:1c:70:be:d7:da:86:ab:f5:cd:40:93:14:9b:13: 8c:4b:c7:11:61:b9:e5:f2:96:e2:37:bd:e0:bb:4a: 3b:4a:d3:44:1d:9e:17:a4:62:fe:ab:50:d9:14:32: ef:c8:5d:b4:96:5c:2a:3c:3d:be:d8:b4:ae:c2:ce: 82:17:79:36:43:05:60:f5:e4:f2:16:79:c7:0a:a8: 3d:df:bf:af:56:37:70:f8:9e:08:dd:b2:be:d3:9b: e0:fe:2a:47:fa:20:f1:e0:cd:74:8e:ba:68:13:72: 24:7e:c8:c7:9c:ea:c6:61:61:ff:ae:ab:34:9d:f1: 4a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4A:F0:3F:5A:1E:14:2B:3D:90:AB:03:A1:38:BA:EC:D0:A2:17:90 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2ErwP1oeFCs9kKsDoTi67NCiF5A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.22.0/24 Signature Algorithm: sha256WithRSAEncryption d2:bf:82:95:86:92:1e:7f:b1:e4:0f:15:49:b1:e6:f5:0f:8f: 27:da:f1:78:dd:88:18:0d:a8:52:4e:cf:b9:dc:b4:0d:47:6c: fa:f5:6d:0c:2c:bb:5b:e2:08:01:51:eb:17:88:9f:3b:36:7f: 2e:07:b0:08:d5:5b:0d:bb:6a:89:db:a5:17:aa:10:f2:0c:df: 6e:a7:50:ec:09:8b:21:51:e4:c9:cc:e5:05:88:06:40:6d:ef: 14:e5:2e:03:1c:cc:65:01:99:f8:3e:b3:b8:22:3f:48:d4:b9: 89:be:30:28:7f:4b:0c:3e:13:5c:32:d2:0e:e0:9b:44:8d:47: 8d:81:b1:f9:47:db:49:f2:d1:3c:17:e7:d7:c7:2a:f9:b1:5f: 8c:ce:d6:92:b0:ce:83:17:a3:07:70:dc:08:a4:18:ea:72:21: 39:66:34:12:f3:8e:2b:88:dd:48:ca:f2:a0:ed:62:fc:e7:0b: 3d:52:bb:98:be:3a:a9:a5:50:dd:92:e2:ee:98:bf:a9:68:bc: e4:fd:38:39:89:f8:99:e9:6c:f7:83:1c:8e:83:e1:9d:b1:d6: 9b:b4:8c:1f:47:fb:26:d4:ef:28:31:aa:51:87:6a:0b:5b:5a: 19:31:03:a1:6a:53:39:0a:97:2e:22:ef:be:d9:a7:95:bc:db: 56:8c:98:4f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM5NDZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ4NEFGMDNGNUExRTE0 MkIzRDkwQUIwM0ExMzhCQUVDRDBBMjE3OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2wvs8Vnv1/iy6aibSqSr0E57eedT3LkLwPIf4p3k0GoHn3CdW CD+p2i6X5G9K7DPV6EkL4j2/aLthDvi6S5bkz04YGZoXfAG3APvRyEdC9SJwRTh2 KvwZOANug6/2GrKdBjnnNRaRKuA5sesDXqLThqGjSx13lQ6/O7qwBi+e1LEljXEB zwcccL7X2oar9c1AkxSbE4xLxxFhueXyluI3veC7SjtK00QdnhekYv6rUNkUMu/I XbSWXCo8Pb7YtK7CzoIXeTZDBWD15PIWeccKqD3fv69WN3D4ngjdsr7Tm+D+Kkf6 IPHgzXSOumgTciR+yMec6sZhYf+uqzSd8UoPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2ErwP1oeFCs9kKsDoTi67NCiF5AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJFcndQMW9lRkNzOWtLc0RvVGk2N05DaUY1QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaBYwDQYJKoZIhvcNAQELBQADggEBANK/gpWGkh5/seQPFUmx5vUPjyfa 8XjdiBgNqFJOz7nctA1HbPr1bQwsu1viCAFR6xeInzs2fy4HsAjVWw27aonbpReq EPIM326nUOwJiyFR5MnM5QWIBkBt7xTlLgMczGUBmfg+s7giP0jUuYm+MCh/Sww+ E1wy0g7gm0SNR42BsflH20ny0TwX59fHKvmxX4zO1pKwzoMXowdw3AikGOpyITlm NBLzjiuI3UjK8qDtYvznCz1Su5i+OqmlUN2S4u6Yv6lovOT9ODmJ+JnpbPeDHI6D 4Z2x1pu0jB9H+ybU7ygxqlGHagtbWhkxA6FqUzkKly4i777Zp5W821aMmE8= -----END CERTIFICATE-----Generated at Sat Apr 5 17:37:28 2025 by rpki-client