$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5Wczuz0xh4CjSHoi2wU4qTb09ls.roa File: 5Wczuz0xh4CjSHoi2wU4qTb09ls.roa (raw, json) Hash identifier: 7iR0qMMA/djdqMLMnuwVZM0hI57IB7DyhaWD43d6Pr0= Subject key identifier: E5:67:33:BB:3D:31:87:80:A3:48:7A:22:DB:05:38:A9:36:F4:F6:5B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E33 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5Wczuz0xh4CjSHoi2wU4qTb09ls.roa Signing time: Tue 01 Apr 2025 02:33:35 +0000 ROA not before: Tue 01 Apr 2025 02:33:35 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3635 (0xe33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:33:35 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E56733BB3D318780A3487A22DB0538A936F4F65B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:18:fb:98:16:1b:c3:74:0a:4a:67:b0:b4: c4:06:ec:50:20:26:dc:d8:ab:8c:1e:5e:0f:9a:db: ef:65:d1:36:d1:4a:8a:c5:3b:0a:19:a5:f6:81:99: ce:f7:b9:25:56:e9:91:d6:e9:82:04:3a:39:7a:86: 44:f8:de:c5:4f:71:90:2b:4c:4f:2f:03:79:a9:18: 3e:87:e9:60:2e:c8:db:4f:60:4c:6f:fd:ef:5e:df: 6b:2d:c2:5d:d1:3d:38:59:04:5a:99:59:b4:86:4f: 27:a5:76:49:d4:af:15:d0:ff:52:d0:0f:78:91:ec: d5:5f:e8:9f:1a:76:45:d5:95:40:fe:ec:c7:c5:cb: 2f:17:a0:54:4f:dc:53:81:bb:e7:1b:21:96:f4:cd: 07:65:84:d1:14:80:f8:a2:ec:16:e5:68:cf:a2:03: 7d:82:db:eb:7a:04:18:31:f5:7d:3f:10:85:2c:c8: 18:ec:68:8f:4f:01:ff:45:d6:d1:74:9a:56:11:9b: 74:27:1b:c3:f3:93:55:d1:57:8f:83:42:7f:85:1c: 49:75:e3:bb:9e:74:ee:8d:4b:83:6d:9d:27:d4:d4: 42:a5:d3:87:da:8a:0a:77:b3:ff:e4:a0:7c:81:7b: d0:37:06:2b:cc:17:d8:19:5d:a3:c1:30:33:7f:68: a4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:67:33:BB:3D:31:87:80:A3:48:7A:22:DB:05:38:A9:36:F4:F6:5B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5Wczuz0xh4CjSHoi2wU4qTb09ls.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.144.0/23 Signature Algorithm: sha256WithRSAEncryption b0:52:b8:51:27:fd:4d:e5:e5:43:9d:2e:ec:72:8b:d9:90:32: f0:cb:4e:c1:8b:a9:28:0b:0b:ed:35:19:50:58:9e:b4:0d:61: 3f:34:88:e9:72:fb:9a:d1:0f:c7:af:f7:44:27:48:00:14:2e: 3b:b7:16:3e:46:23:69:1b:aa:ee:e9:05:0a:43:7c:4d:b1:70: 38:82:d5:72:a4:a9:00:34:cf:3f:34:6e:33:f1:67:b7:e0:0c: f6:95:08:95:4c:87:49:e8:3e:32:26:d6:d8:87:b8:6f:f5:05: a3:1c:35:cb:c7:27:66:b5:d7:2b:52:88:0c:fe:4d:06:75:aa: 93:3b:09:5a:7d:af:83:9c:ab:31:ac:33:e0:49:c6:d5:0e:0f: b2:b9:28:b4:2f:54:13:d6:85:07:9e:1a:df:1e:fc:b3:fd:5f: 36:14:84:c1:25:07:9e:5e:2b:ec:40:a9:f5:9a:54:30:6a:d9: 2c:a4:9d:86:02:6a:4e:dc:30:97:31:ba:35:bb:80:20:bb:63: f2:d9:25:7a:79:37:a3:7a:62:23:ac:11:0a:b5:0a:03:4c:3e: 5a:6f:ea:ff:53:90:71:d0:ff:a8:bd:36:f5:b2:3b:59:fd:24: ae:38:3d:be:0f:92:18:bc:c5:37:44:a1:af:69:80:d9:0f:9d: ff:2c:09:de -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDjMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMzMzVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU1NjczM0JCM0QzMTg3 ODBBMzQ4N0EyMkRCMDUzOEE5MzZGNEY2NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt4xj7mBYbw3QKSmewtMQG7FAgJtzYq4weXg+a2+9l0TbRSorF OwoZpfaBmc73uSVW6ZHW6YIEOjl6hkT43sVPcZArTE8vA3mpGD6H6WAuyNtPYExv /e9e32stwl3RPThZBFqZWbSGTyeldknUrxXQ/1LQD3iR7NVf6J8adkXVlUD+7MfF yy8XoFRP3FOBu+cbIZb0zQdlhNEUgPii7BblaM+iA32C2+t6BBgx9X0/EIUsyBjs aI9PAf9F1tF0mlYRm3QnG8Pzk1XRV4+DQn+FHEl147uedO6NS4NtnSfU1EKl04fa igp3s//koHyBe9A3BivMF9gZXaPBMDN/aKQvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU5Wczuz0xh4CjSHoi2wU4qTb09lswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzVXY3p1ejB4aDRDalNIb2kyd1U0cVRiMDlscy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYpAwDQYJKoZIhvcNAQELBQADggEBALBSuFEn/U3l5UOdLuxyi9mQMvDL TsGLqSgLC+01GVBYnrQNYT80iOly+5rRD8ev90QnSAAULju3Fj5GI2kbqu7pBQpD fE2xcDiC1XKkqQA0zz80bjPxZ7fgDPaVCJVMh0noPjIm1tiHuG/1BaMcNcvHJ2a1 1ytSiAz+TQZ1qpM7CVp9r4OcqzGsM+BJxtUOD7K5KLQvVBPWhQeeGt8e/LP9XzYU hMElB55eK+xAqfWaVDBq2SyknYYCak7cMJcxujW7gCC7Y/LZJXp5N6N6YiOsEQq1 CgNMPlpv6v9TkHHQ/6i9NvWyO1n9JK44Pb4Pkhi8xTdEoa9pgNkPnf8sCd4= -----END CERTIFICATE-----Generated at Sat Apr 5 17:47:53 2025 by rpki-client