$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5ffZBFnjpvXBg5SEr_vbtXYYcUY.roa File: 5ffZBFnjpvXBg5SEr_vbtXYYcUY.roa (raw, json) Hash identifier: Cq0mTTyqiGWn7AMIzNhJ8XqICvCWJB05oNTywmjzPH0= Subject key identifier: E5:F7:D9:04:59:E3:A6:F5:C1:83:94:84:AF:FB:DB:B5:76:18:71:46 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CB8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5ffZBFnjpvXBg5SEr_vbtXYYcUY.roa Signing time: Tue 01 Apr 2025 02:05:45 +0000 ROA not before: Tue 01 Apr 2025 02:05:45 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3256 (0xcb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:45 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E5F7D90459E3A6F5C1839484AFFBDBB576187146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:2b:9e:e5:3e:a6:05:d4:7f:e1:6b:68:e4: cc:ac:56:29:28:95:10:fd:6d:ec:57:cc:7f:8d:60: 72:20:f4:86:d9:fc:d7:b0:6f:84:ce:40:63:3b:37: 45:85:3b:be:58:60:e4:0e:93:6c:30:f3:ff:37:6b: ca:66:af:fd:10:f4:41:b8:e6:ef:11:67:5c:10:04: 3e:44:9f:22:96:04:20:22:b0:d7:36:c4:08:4b:d9: 2d:76:d4:54:2e:9b:c1:4a:10:41:a1:ac:d4:fb:13: 31:7b:85:fd:86:fc:13:94:25:39:f7:5f:97:b1:f0: c3:4d:5a:93:cd:12:85:96:62:3c:74:ec:24:08:04: b7:d7:ac:e4:c8:60:ea:8d:bb:93:1e:d4:ce:02:df: 65:24:b1:d4:3b:23:36:0d:a6:92:f2:95:81:f0:52: b4:9b:50:d3:ff:6c:f3:c3:1a:f8:2d:85:69:95:4d: 25:67:44:6f:b7:31:ad:b6:db:96:a0:ec:27:c3:b4: 1c:6e:aa:27:51:c8:75:8a:8f:74:04:5b:33:c0:db: 1d:59:1a:56:51:97:3d:78:b7:3e:73:0a:ee:63:d1: 1b:b8:b9:bf:71:bf:ff:57:0f:9e:a7:57:30:b1:21: 2a:d9:5c:79:b5:aa:03:4f:40:9a:bc:7a:79:84:61: 69:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F7:D9:04:59:E3:A6:F5:C1:83:94:84:AF:FB:DB:B5:76:18:71:46 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5ffZBFnjpvXBg5SEr_vbtXYYcUY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.192.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:15:ac:66:78:07:d7:f3:4b:08:d4:97:f1:a0:5a:09:9c:b3: 7d:47:f4:c9:5d:26:c8:91:27:99:da:c9:1d:84:f8:d9:70:56: ea:95:ef:50:c8:c8:a6:d2:48:46:48:6a:08:ad:33:0e:a2:0a: 70:50:04:00:12:04:b6:21:70:04:5a:b4:94:71:b3:ad:eb:9b: 4f:fa:86:dc:26:b4:e4:53:76:c0:bf:c7:ab:d2:89:87:f3:d0: 9b:c6:1e:6e:92:41:b1:2d:7d:05:b8:34:2f:39:cb:63:d8:3b: 9c:51:68:4d:a3:d4:95:91:7c:0b:71:08:7c:c5:b8:56:7d:9d: d4:67:e2:2c:cf:a3:a1:5f:51:9f:3b:2b:a1:43:c5:b5:93:26: a8:55:48:b9:e8:93:d4:34:c3:12:6e:89:8f:01:1c:1a:4d:ea: 93:76:38:10:11:db:0b:35:b7:4b:1e:b2:60:dc:da:ab:17:7d: 4c:28:92:43:89:71:46:b2:d9:d1:34:b6:2d:f8:8a:62:13:12: 81:bb:3f:d6:ea:33:4f:6f:a0:8a:50:8b:9d:cf:8b:28:d8:67: f9:97:54:f2:68:31:e1:e4:06:ef:36:0e:b5:a1:26:86:ad:ca: 86:52:fa:a4:01:28:c9:8d:30:75:77:d1:e5:39:a4:3c:33:f2: e2:c7:e1:f7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDLgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU1RjdEOTA0NTlFM0E2 RjVDMTgzOTQ4NEFGRkJEQkI1NzYxODcxNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC76Cue5T6mBdR/4Wto5MysVikolRD9bexXzH+NYHIg9IbZ/New b4TOQGM7N0WFO75YYOQOk2ww8/83a8pmr/0Q9EG45u8RZ1wQBD5EnyKWBCAisNc2 xAhL2S121FQum8FKEEGhrNT7EzF7hf2G/BOUJTn3X5ex8MNNWpPNEoWWYjx07CQI BLfXrOTIYOqNu5Me1M4C32UksdQ7IzYNppLylYHwUrSbUNP/bPPDGvgthWmVTSVn RG+3Ma2225ag7CfDtBxuqidRyHWKj3QEWzPA2x1ZGlZRlz14tz5zCu5j0Ru4ub9x v/9XD56nVzCxISrZXHm1qgNPQJq8enmEYWn1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU5ffZBFnjpvXBg5SEr/vbtXYYcUYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzVmZlpCRm5qcHZYQmc1U0VyX3ZidFhZWWNVWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxasAwDQYJKoZIhvcNAQELBQADggEBAA0VrGZ4B9fzSwjUl/GgWgmcs31H 9MldJsiRJ5nayR2E+NlwVuqV71DIyKbSSEZIagitMw6iCnBQBAASBLYhcARatJRx s63rm0/6htwmtORTdsC/x6vSiYfz0JvGHm6SQbEtfQW4NC85y2PYO5xRaE2j1JWR fAtxCHzFuFZ9ndRn4izPo6FfUZ87K6FDxbWTJqhVSLnok9Q0wxJuiY8BHBpN6pN2 OBAR2ws1t0sesmDc2qsXfUwokkOJcUay2dE0ti34imITEoG7P9bqM09voIpQi53P iyjYZ/mXVPJoMeHkBu82DrWhJoatyoZS+qQBKMmNMHV30eU5pDwz8uLH4fc= -----END CERTIFICATE-----Generated at Sat Apr 5 17:30:57 2025 by rpki-client