$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2yVUO1Kvtw4Ek8yeeZFFeTFw5Nc.roa File: 2yVUO1Kvtw4Ek8yeeZFFeTFw5Nc.roa (raw, json) Hash identifier: HtDgMk79UK4CnRilLOhBmnWeZdoVvxY1aGp77bIEKFI= Subject key identifier: DB:25:54:3B:52:AF:B7:0E:04:93:CC:9E:79:91:45:79:31:70:E4:D7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CEA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2yVUO1Kvtw4Ek8yeeZFFeTFw5Nc.roa Signing time: Tue 01 Apr 2025 02:09:23 +0000 ROA not before: Tue 01 Apr 2025 02:09:23 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3306 (0xcea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:23 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=DB25543B52AFB70E0493CC9E799145793170E4D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5d:b7:98:a8:18:a4:28:6d:72:5f:d4:fa:0e: 55:bf:5a:f8:ee:57:ce:3f:3c:fb:f2:e2:5d:35:e1: 7d:84:3e:cb:57:ad:ae:28:47:fa:d8:47:f1:8c:00: 59:eb:f4:ea:59:c2:ba:02:7b:35:53:29:a3:ef:ca: 55:f3:bc:ee:c5:1d:0b:6f:90:36:76:bd:95:14:88: 2d:d6:2c:ae:6f:99:d0:e6:a0:fd:84:44:57:82:cb: 09:70:3e:9b:60:f8:9b:02:ff:6b:67:a9:61:45:cf: e3:38:d2:f5:30:35:66:2f:a6:78:43:8b:59:cf:7d: 14:d2:3a:a3:90:cb:29:3f:6c:8b:85:18:a7:6f:05: 45:af:ba:de:f3:a9:04:72:2e:2e:a7:80:ab:69:b4: d8:ec:8e:e5:77:9f:3f:63:6c:1e:a6:b1:d7:c7:b5: f6:a6:ff:a8:6a:96:ae:a8:ff:0a:35:95:f6:3a:6f: a3:cb:47:8d:e1:27:d5:f5:a1:31:d7:dd:b3:94:75: 86:1c:73:3c:6b:1e:4e:ea:50:91:7b:44:22:6a:85: 07:b1:86:9e:be:ab:76:67:4b:3b:69:a7:d8:62:cb: 40:4f:4b:d8:a5:f8:a2:b8:52:f8:db:a8:0b:94:bc: 31:e6:58:98:2d:3e:18:4b:14:d7:e0:58:60:e8:d4: 32:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:25:54:3B:52:AF:B7:0E:04:93:CC:9E:79:91:45:79:31:70:E4:D7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2yVUO1Kvtw4Ek8yeeZFFeTFw5Nc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.48.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:19:9f:4f:ce:1f:bf:cd:8d:d8:4c:bf:18:55:77:48:37:74: 68:4d:bf:32:1f:f7:b1:50:3a:60:b8:5a:ed:04:9e:55:e8:a1: 39:73:94:a1:63:9c:9b:24:ff:7a:eb:49:7c:d3:b7:07:5d:c4: 35:0a:d7:a9:bd:10:00:78:09:84:70:0a:71:1d:7c:39:9a:a8: a8:fb:73:39:a9:7b:89:a1:ee:73:89:ce:f2:e9:fa:48:78:f8: 15:6f:3b:95:f5:d6:42:db:7b:99:50:9b:72:2f:b3:8f:64:d2: af:ab:d6:cf:65:c6:bb:33:f6:15:19:2f:9c:1a:7a:8c:cd:ee: 9d:10:96:90:b7:d6:32:02:e1:f4:e0:23:d4:99:80:e5:e1:f3: 29:5d:c5:17:95:24:38:0b:0d:bb:15:f0:70:a4:4f:08:4c:3e: 8a:51:ce:c4:da:a5:13:e5:d0:ec:03:6e:5d:f6:84:dc:f0:f2: bd:71:dc:9a:62:aa:dc:73:10:30:0c:4b:62:f0:25:cb:10:3f: 46:a3:bd:b0:fa:a5:9f:7e:cd:01:f1:fa:6f:bf:0c:d5:d0:ee: 60:82:c4:27:e9:ff:6d:fb:42:99:f1:66:2a:5b:3e:39:84:0d: 8b:f4:d4:6b:c8:67:c5:30:4c:31:81:e2:30:17:a0:5d:27:f8: 69:e6:07:69 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDOowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MjNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERCMjU1NDNCNTJBRkI3 MEUwNDkzQ0M5RTc5OTE0NTc5MzE3MEU0RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPXbeYqBikKG1yX9T6DlW/WvjuV84/PPvy4l014X2EPstXra4o R/rYR/GMAFnr9OpZwroCezVTKaPvylXzvO7FHQtvkDZ2vZUUiC3WLK5vmdDmoP2E RFeCywlwPptg+JsC/2tnqWFFz+M40vUwNWYvpnhDi1nPfRTSOqOQyyk/bIuFGKdv BUWvut7zqQRyLi6ngKtptNjsjuV3nz9jbB6msdfHtfam/6hqlq6o/wo1lfY6b6PL R43hJ9X1oTHX3bOUdYYcczxrHk7qUJF7RCJqhQexhp6+q3ZnSztpp9hiy0BPS9il +KK4UvjbqAuUvDHmWJgtPhhLFNfgWGDo1DJJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2yVUO1Kvtw4Ek8yeeZFFeTFw5NcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJ5VlVPMUt2dHc0RWs4eWVlWkZGZVRGdzVOYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaDAwDQYJKoZIhvcNAQELBQADggEBAC8Zn0/OH7/NjdhMvxhVd0g3dGhN vzIf97FQOmC4Wu0EnlXooTlzlKFjnJsk/3rrSXzTtwddxDUK16m9EAB4CYRwCnEd fDmaqKj7czmpe4mh7nOJzvLp+kh4+BVvO5X11kLbe5lQm3Ivs49k0q+r1s9lxrsz 9hUZL5waeozN7p0QlpC31jIC4fTgI9SZgOXh8yldxReVJDgLDbsV8HCkTwhMPopR zsTapRPl0OwDbl32hNzw8r1x3JpiqtxzEDAMS2LwJcsQP0ajvbD6pZ9+zQHx+m+/ DNXQ7mCCxCfp/237QpnxZipbPjmEDYv01GvIZ8UwTDGB4jAXoF0n+GnmB2k= -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:29 2025 by rpki-client