$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2b-eJtfPfGOQ3iHy3ucJQgRVn0Q.roa File: 2b-eJtfPfGOQ3iHy3ucJQgRVn0Q.roa (raw, json) Hash identifier: AaiytUHaNAOJy6Qje7uzj/fOB422yY6NK7QxEpBCYy8= Subject key identifier: D9:BF:9E:26:D7:CF:7C:63:90:DE:21:F2:DE:E7:09:42:04:55:9F:44 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B7F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2b-eJtfPfGOQ3iHy3ucJQgRVn0Q.roa Signing time: Tue 01 Apr 2025 01:36:50 +0000 ROA not before: Tue 01 Apr 2025 01:36:50 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2943 (0xb7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:36:50 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D9BF9E26D7CF7C6390DE21F2DEE7094204559F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:54:e4:84:b4:73:c7:8e:58:29:4c:34:b5: 32:e0:92:26:6b:ed:4b:19:9c:d3:30:f3:b7:da:8d: a6:d2:4b:e8:83:f7:1c:dd:07:5a:79:9f:3c:76:70: c8:f6:5e:a1:f7:da:1e:30:46:44:c8:8c:f6:85:c8: ff:dd:b2:72:a8:41:ca:88:7a:92:d2:ac:8d:35:01: 10:39:b9:ae:7a:53:8b:01:fb:90:d7:01:6e:0f:d6: a2:d6:e2:28:b1:a8:7f:48:7b:38:2c:66:a5:b4:d6: 4a:ae:db:37:ac:e9:12:72:54:9f:f0:c4:3a:af:10: 7f:43:05:cf:1d:59:e4:c0:ce:8b:c6:5a:6c:1c:b8: 5d:65:f0:5c:58:2d:d7:c7:eb:fb:5d:f1:fd:86:1e: d1:94:da:32:82:d1:1c:41:47:4b:60:ed:6d:52:af: 44:d2:8d:da:fe:28:0d:40:61:51:a9:be:65:ab:ff: 68:45:d6:32:df:b5:62:98:c5:4e:8f:af:67:a4:9f: 14:54:bc:fd:48:d9:4a:0f:0e:bc:b9:da:23:7b:53: e4:a2:0d:e5:f1:4b:fe:5b:12:e0:96:f0:98:a8:8f: e2:42:ce:93:05:68:6a:c0:90:04:13:f2:86:da:45: f9:57:34:34:6c:a9:3f:37:5f:0b:65:c2:0b:3a:97: 8d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BF:9E:26:D7:CF:7C:63:90:DE:21:F2:DE:E7:09:42:04:55:9F:44 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2b-eJtfPfGOQ3iHy3ucJQgRVn0Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.48.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:a9:84:b1:fc:5c:bd:95:fd:f5:e9:b2:be:c0:fb:43:49:a1: 63:3a:a8:a5:6b:f5:f1:c8:5b:63:f4:7b:b1:82:b8:68:82:77: 4a:0c:9e:b7:7b:ea:2f:ae:6e:a7:9b:a7:5b:cd:a3:d9:5b:81: bc:53:a6:54:4e:14:75:41:e3:84:18:52:a3:91:53:20:03:a8: ef:f1:be:b3:fe:82:a1:97:2d:9f:2d:38:3d:79:e9:8d:af:c7: 2f:78:f6:2f:be:28:56:57:54:7a:ac:d4:4b:ce:78:1a:76:b2: 9d:b0:a2:df:65:22:33:82:20:c9:e1:82:f5:57:5f:51:d3:7b: 2b:84:10:a3:b7:02:2e:fe:c5:36:25:02:5d:d1:2b:dd:6a:ce: 9b:35:42:36:d4:83:bb:0a:0f:39:c9:b5:92:82:ff:9d:b5:8f: a6:18:b4:e5:2f:db:bb:0d:01:c5:f8:81:b2:54:3b:fd:3b:16: 33:e0:07:b3:95:30:bf:26:14:b6:c2:4d:33:66:e8:01:bb:70: 5a:df:ab:a1:62:fe:e6:f0:68:a5:82:bf:87:dd:59:ad:d4:48: de:0f:5a:8f:76:fd:b9:ce:a3:2b:54:ff:ef:bb:5d:ed:8d:d4: bd:c6:3c:ab:7e:b1:da:3c:79:15:5a:74:06:5a:c4:4b:be:16: 2a:a8:a8:3a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC38wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM2NTBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ5QkY5RTI2RDdDRjdD NjM5MERFMjFGMkRFRTcwOTQyMDQ1NTlGNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+7FTkhLRzx45YKUw0tTLgkiZr7UsZnNMw87fajabSS+iD9xzd B1p5nzx2cMj2XqH32h4wRkTIjPaFyP/dsnKoQcqIepLSrI01ARA5ua56U4sB+5DX AW4P1qLW4iixqH9IezgsZqW01kqu2zes6RJyVJ/wxDqvEH9DBc8dWeTAzovGWmwc uF1l8FxYLdfH6/td8f2GHtGU2jKC0RxBR0tg7W1Sr0TSjdr+KA1AYVGpvmWr/2hF 1jLftWKYxU6Pr2eknxRUvP1I2UoPDry52iN7U+SiDeXxS/5bEuCW8Jioj+JCzpMF aGrAkAQT8obaRflXNDRsqT83Xwtlwgs6l43/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2b+eJtfPfGOQ3iHy3ucJQgRVn0QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJiLWVKdGZQZkdPUTNpSHkzdWNKUWdSVm4wUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYDAwDQYJKoZIhvcNAQELBQADggEBAD6phLH8XL2V/fXpsr7A+0NJoWM6 qKVr9fHIW2P0e7GCuGiCd0oMnrd76i+ubqebp1vNo9lbgbxTplROFHVB44QYUqOR UyADqO/xvrP+gqGXLZ8tOD156Y2vxy949i++KFZXVHqs1EvOeBp2sp2wot9lIjOC IMnhgvVXX1HTeyuEEKO3Ai7+xTYlAl3RK91qzps1QjbUg7sKDznJtZKC/521j6YY tOUv27sNAcX4gbJUO/07FjPgB7OVML8mFLbCTTNm6AG7cFrfq6Fi/ubwaKWCv4fd Wa3USN4PWo92/bnOoytU/++7Xe2N1L3GPKt+sdo8eRVadAZaxEu+FiqoqDo= -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:35 2025 by rpki-client