$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3tj7t-c16MedPzw54P-wpBkpcWA.roa File: 3tj7t-c16MedPzw54P-wpBkpcWA.roa (raw, json) Hash identifier: OU0yYgutLtnVC03jI53jj8RHuFQ6Faz9c7PgmXaKiq4= Subject key identifier: DE:D8:FB:B7:E7:35:E8:C7:9D:3F:3C:39:E0:FF:B0:A4:19:29:71:60 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C46 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3tj7t-c16MedPzw54P-wpBkpcWA.roa Signing time: Tue 01 Apr 2025 01:57:19 +0000 ROA not before: Tue 01 Apr 2025 01:57:19 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.159.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:19 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=DED8FBB7E735E8C79D3F3C39E0FFB0A419297160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:0f:da:d9:ef:9b:37:bd:0c:d0:02:aa:87: ca:11:72:0f:0f:8c:36:18:70:8a:c5:16:c0:80:80: c1:4f:45:08:d9:04:98:3f:bb:3e:55:8d:7e:94:5a: a4:85:5e:fd:87:d2:32:76:86:6a:e5:40:e3:b5:99: bf:e9:2a:4c:1c:19:7c:96:53:db:8e:c0:40:ea:5c: 22:8a:9e:e9:b0:3a:fc:e8:d3:05:ca:52:88:69:33: a3:a1:32:cc:07:a4:53:c1:6e:84:d3:c7:52:c7:e8: 24:bb:ce:78:7e:dc:cf:19:5b:1d:43:e8:7e:a6:79: b4:fb:f5:2c:4c:79:71:36:e0:d4:97:1a:ea:ba:6e: 1d:ba:63:3e:a4:c2:22:19:98:ba:2e:d9:a2:73:4f: 25:93:3b:62:2d:90:73:38:21:d6:42:ff:10:12:ea: 45:96:ad:a7:e6:28:39:56:55:62:81:2f:c3:cc:c2: 7f:67:10:4e:e7:61:da:c6:54:06:bf:46:e8:f5:6e: ad:e4:52:48:67:3d:35:8a:1a:9e:f8:f2:01:d5:d5: e3:e5:c1:aa:44:26:41:21:fa:9e:4f:d9:8b:71:46: 62:da:9f:60:f1:ed:ab:32:e5:b1:0c:33:16:c7:c4: 78:99:87:11:be:c4:33:e8:68:de:3a:15:72:bd:c5: 39:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D8:FB:B7:E7:35:E8:C7:9D:3F:3C:39:E0:FF:B0:A4:19:29:71:60 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3tj7t-c16MedPzw54P-wpBkpcWA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.56.0/24 Signature Algorithm: sha256WithRSAEncryption c6:92:46:68:d3:8b:e8:28:d7:59:87:35:07:8e:ec:73:62:23: 2e:04:80:91:bd:5a:8b:31:37:65:58:8b:1e:07:eb:27:7f:27: b3:44:aa:db:4a:3b:3c:01:da:22:46:b6:30:c5:c5:aa:5c:a5: e6:fd:f6:8c:cb:84:d1:fb:30:cb:55:5a:0f:a6:eb:2e:60:e4: 5d:a4:cf:89:7b:53:21:ac:ef:c4:de:45:8e:3e:ba:8e:a6:52: bb:e0:6f:17:12:ed:bb:9e:e1:00:b7:f6:70:0f:bd:e1:de:dc: 3f:e8:3b:ec:1c:af:77:f3:0b:3e:8a:f2:17:8d:79:0f:d8:e7: 45:99:69:02:82:6a:1c:dc:38:8e:04:2e:82:e9:ea:30:55:cd: d4:5d:e6:30:9b:f4:fc:c9:77:c0:af:a9:a9:89:ab:b2:5a:9d: 2c:61:48:87:53:1d:48:a1:a4:a1:1e:73:c9:6d:f5:b7:77:ea: e7:a3:a6:e2:a3:d8:d2:27:53:2b:39:7d:d9:f4:3c:a0:08:f0: 7c:82:37:ef:2e:82:d6:2b:57:92:1d:3c:24:65:46:4c:fe:af: 0b:15:5a:93:7b:ba:a3:17:b8:52:1e:f8:de:80:4d:3d:95:3a: 2c:12:39:76:70:87:96:ab:ba:e8:23:f4:40:96:96:1c:f0:47: f2:55:e3:07 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MTlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERFRDhGQkI3RTczNUU4 Qzc5RDNGM0MzOUUwRkZCMEE0MTkyOTcxNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1sQ/a2e+bN70M0AKqh8oRcg8PjDYYcIrFFsCAgMFPRQjZBJg/ uz5VjX6UWqSFXv2H0jJ2hmrlQOO1mb/pKkwcGXyWU9uOwEDqXCKKnumwOvzo0wXK UohpM6OhMswHpFPBboTTx1LH6CS7znh+3M8ZWx1D6H6mebT79SxMeXE24NSXGuq6 bh26Yz6kwiIZmLou2aJzTyWTO2ItkHM4IdZC/xAS6kWWrafmKDlWVWKBL8PMwn9n EE7nYdrGVAa/Ruj1bq3kUkhnPTWKGp748gHV1ePlwapEJkEh+p5P2YtxRmLan2Dx 7asy5bEMMxbHxHiZhxG+xDPoaN46FXK9xTmnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3tj7t+c16MedPzw54P+wpBkpcWAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzN0ajd0LWMxNk1lZFB6dzU0UC13cEJrcGNXQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcnzgwDQYJKoZIhvcNAQELBQADggEBAMaSRmjTi+go11mHNQeO7HNiIy4E gJG9WosxN2VYix4H6yd/J7NEqttKOzwB2iJGtjDFxapcpeb99ozLhNH7MMtVWg+m 6y5g5F2kz4l7UyGs78TeRY4+uo6mUrvgbxcS7bue4QC39nAPveHe3D/oO+wcr3fz Cz6K8heNeQ/Y50WZaQKCahzcOI4ELoLp6jBVzdRd5jCb9PzJd8CvqamJq7JanSxh SIdTHUihpKEec8lt9bd36uejpuKj2NInUys5fdn0PKAI8HyCN+8ugtYrV5IdPCRl Rkz+rwsVWpN7uqMXuFIe+N6ATT2VOiwSOXZwh5aruugj9ECWlhzwR/JV4wc= -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:19 2025 by rpki-client