$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7w7NnFMUTuJMMTdVThXQoeuNudo.roa File: 7w7NnFMUTuJMMTdVThXQoeuNudo.roa (raw, json) Hash identifier: x8bAi/BCn2bkAcdUnFRA/WgrVw17iNNjQ/u7iI8kfQQ= Subject key identifier: EF:0E:CD:9C:53:14:4E:E2:4C:31:37:55:4E:15:D0:A1:EB:8D:B9:DA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E2E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7w7NnFMUTuJMMTdVThXQoeuNudo.roa Signing time: Tue 01 Apr 2025 02:33:33 +0000 ROA not before: Tue 01 Apr 2025 02:33:33 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3630 (0xe2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:33:33 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=EF0ECD9C53144EE24C3137554E15D0A1EB8DB9DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ad:a7:ff:60:ef:16:ce:22:97:92:96:39:12: f1:18:41:3d:b5:40:80:9a:e1:d4:6f:be:90:25:16: 3d:97:90:a0:d2:2a:a7:1e:ec:bd:39:bf:fc:7a:fd: ae:68:e1:10:f1:2d:f4:c1:7c:eb:b8:63:73:81:e3: cf:d0:87:4d:9d:6a:9c:0a:d6:71:c9:cb:e3:8e:15: 20:55:02:c0:23:c9:14:9c:73:00:4d:03:48:85:46: e6:e9:b9:22:e9:37:ab:56:45:af:b5:c9:87:48:7a: d9:09:67:0d:94:da:dc:33:58:f0:cf:e4:c4:27:35: d6:04:17:71:95:45:0d:7a:42:a2:29:f8:38:d5:70: 91:49:c9:8d:85:1a:86:45:e7:71:f4:56:30:13:f4: 59:23:2f:e1:7a:6c:23:8b:6f:2c:8c:90:f0:4a:e4: ce:08:76:07:82:97:a8:ad:b1:58:aa:3c:9d:f3:26: 07:18:24:4d:3f:29:ba:fc:db:26:a9:06:f5:46:97: c3:35:90:1a:42:4b:25:f3:21:25:62:5e:4a:af:6e: 94:a3:72:6d:28:7f:4f:02:f2:1c:da:b3:8f:82:a1: ff:54:8f:e8:e0:32:3d:f6:49:3b:e7:f2:78:b0:f3: 7d:3d:34:cd:0d:a1:82:42:f0:c8:09:16:e6:24:74: 1e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0E:CD:9C:53:14:4E:E2:4C:31:37:55:4E:15:D0:A1:EB:8D:B9:DA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7w7NnFMUTuJMMTdVThXQoeuNudo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.56.0/21 Signature Algorithm: sha256WithRSAEncryption e3:93:5d:7c:f8:37:0b:fd:64:bd:ac:09:33:db:d5:77:f6:85: bc:42:71:5e:d5:f0:d7:7d:4e:76:21:2d:f1:03:43:68:cd:46: ec:ff:82:b5:ce:e8:02:a3:ca:c3:01:97:47:cd:9b:d4:44:42: 06:e4:d9:9e:74:30:cc:3f:5f:ac:8f:f1:2b:9a:a1:d2:0d:b8: 25:b2:2f:f8:eb:94:f2:e0:ef:8d:99:cd:a6:2f:66:1e:5a:68: af:df:ae:db:88:5e:59:f2:e4:c7:b3:dc:cb:d9:f8:b2:c8:da: 4f:fc:ca:11:5f:63:9f:1e:00:3e:9c:ff:3e:a9:fc:91:d2:ca: 31:0e:d4:23:41:a0:b6:10:4d:70:14:95:e9:07:f2:10:4d:4c: 5f:c5:f7:52:38:d6:fe:5e:2f:db:83:34:e2:35:5e:36:d7:72: 79:ae:cd:2e:a1:c3:bf:1a:18:43:c1:ed:2a:d1:b8:1e:a2:9d: 9f:99:1b:f5:fa:3d:0b:30:f2:48:cc:e7:c2:75:f1:b6:e6:c6: e6:f6:ca:9b:e2:55:71:c7:f3:7f:c3:53:62:d6:b8:f9:0a:fa: dc:fb:65:d8:34:a9:e1:82:7b:64:c6:23:e1:b8:1b:4e:7d:9c: 6c:9e:47:17:d3:93:e8:d5:e1:64:69:8f:00:12:24:71:1b:77: b9:7c:e2:88 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDi4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMzMzNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVGMEVDRDlDNTMxNDRF RTI0QzMxMzc1NTRFMTVEMEExRUI4REI5REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbraf/YO8WziKXkpY5EvEYQT21QICa4dRvvpAlFj2XkKDSKqce 7L05v/x6/a5o4RDxLfTBfOu4Y3OB48/Qh02dapwK1nHJy+OOFSBVAsAjyRSccwBN A0iFRubpuSLpN6tWRa+1yYdIetkJZw2U2twzWPDP5MQnNdYEF3GVRQ16QqIp+DjV cJFJyY2FGoZF53H0VjAT9FkjL+F6bCOLbyyMkPBK5M4IdgeCl6itsViqPJ3zJgcY JE0/Kbr82yapBvVGl8M1kBpCSyXzISViXkqvbpSjcm0of08C8hzas4+Cof9Uj+jg Mj32STvn8niw8309NM0NoYJC8MgJFuYkdB5BAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU7w7NnFMUTuJMMTdVThXQoeuNudowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Lzd3N05uRk1VVHVKTU1UZFZUaFhRb2V1TnVkby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMxaDgwDQYJKoZIhvcNAQELBQADggEBAOOTXXz4Nwv9ZL2sCTPb1Xf2hbxC cV7V8Nd9TnYhLfEDQ2jNRuz/grXO6AKjysMBl0fNm9REQgbk2Z50MMw/X6yP8Sua odINuCWyL/jrlPLg742ZzaYvZh5aaK/frtuIXlny5Mez3MvZ+LLI2k/8yhFfY58e AD6c/z6p/JHSyjEO1CNBoLYQTXAUlekH8hBNTF/F91I41v5eL9uDNOI1XjbXcnmu zS6hw78aGEPB7SrRuB6inZ+ZG/X6PQsw8kjM58J18bbmxub2ypviVXHH83/DU2LW uPkK+tz7Zdg0qeGCe2TGI+G4G059nGyeRxfTk+jV4WRpjwASJHEbd7l84og= -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:01 2025 by rpki-client