$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9_3WWpTIcszbRnC-RBM6YEkVBCc.roa File: 9_3WWpTIcszbRnC-RBM6YEkVBCc.roa (raw, json) Hash identifier: w28sa3Rl7hTSIuEvZF45Jp3BM1NtWf6aDZTuWzt7Z/w= Subject key identifier: F7:FD:D6:5A:94:C8:72:CC:DB:46:70:BE:44:13:3A:60:49:15:04:27 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D2B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9_3WWpTIcszbRnC-RBM6YEkVBCc.roa Signing time: Tue 01 Apr 2025 02:13:52 +0000 ROA not before: Tue 01 Apr 2025 02:13:52 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3371 (0xd2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:13:52 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=F7FDD65A94C872CCDB4670BE44133A6049150427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e1:5f:25:c3:92:5c:4e:6f:a4:02:e6:3d:98: 41:a4:fd:4d:c4:49:af:45:aa:22:91:08:8e:11:16: f2:4b:58:9c:e8:41:d2:0b:ae:3c:d6:0e:c0:9f:df: cc:0b:a6:2a:01:dc:a6:29:5a:49:2d:08:d8:7a:0a: 1b:45:69:f8:ff:65:ec:2f:94:c4:34:a7:63:da:66: ce:ea:30:4c:60:6a:ab:9e:02:b4:af:44:3f:a8:7c: 95:d1:13:50:b7:ad:05:1b:56:72:8d:db:05:ff:00: 68:55:ef:28:1a:3b:cc:b3:f6:73:e5:e2:3f:df:06: 03:04:23:ba:e5:01:3c:01:80:35:46:44:16:56:7a: 0f:d7:c6:2a:18:00:61:47:0b:8d:e4:e6:f6:1d:ad: 4c:5a:78:08:cd:5c:30:8f:b6:6c:4a:e8:01:16:3c: 28:af:74:f1:bd:39:8f:0a:78:bb:06:86:ca:ee:6b: f0:2f:13:6a:c9:cd:21:1d:70:b3:e9:09:97:7a:f0: 21:39:7d:ea:1f:23:bd:0b:3f:50:0e:b0:44:f0:f4: 6c:6f:50:91:ab:52:a5:f8:e9:a7:ee:90:0b:47:fd: bb:e3:45:d6:f5:2d:b0:39:2c:da:d2:1a:ad:3d:0e: 5d:10:7e:60:3b:eb:33:c6:00:38:8a:0e:ea:72:20: e6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FD:D6:5A:94:C8:72:CC:DB:46:70:BE:44:13:3A:60:49:15:04:27 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9_3WWpTIcszbRnC-RBM6YEkVBCc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.24.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:b6:67:5a:f0:e7:60:4f:d9:66:f5:d2:24:1f:94:2c:79:47: 69:d3:d2:43:64:80:0a:7e:49:2e:73:54:ad:99:12:b1:dd:48: 22:13:f0:e5:b1:32:33:5d:03:f8:37:12:73:67:10:c0:ab:88: f3:5a:fd:15:59:2f:a6:b1:ab:b4:8f:26:bb:22:2b:32:6a:d0: 98:56:08:85:e1:da:5b:4b:2a:68:78:25:f7:8e:37:2a:bf:ed: 2c:f4:10:98:a8:30:f8:85:62:4d:b3:75:9b:4e:b4:34:9a:05: f5:fa:ac:b3:d9:a2:26:13:74:7b:ce:4a:b6:e4:8a:d9:09:f8: aa:8e:52:8a:82:63:5f:c9:43:8e:21:a6:04:09:47:e4:98:68: d6:45:8c:f9:6e:62:8e:0e:95:34:96:31:a5:72:c2:94:ad:51: e7:19:a3:66:19:c0:87:17:44:73:7e:bb:dd:91:3e:41:94:5c: 71:f5:42:8c:41:ec:2f:02:61:52:47:21:f5:05:e0:26:03:c1: 9e:37:19:59:c2:87:03:ce:18:d9:f6:a9:58:c8:46:20:d5:73: 43:c0:dc:2a:85:d8:11:dd:b6:0b:a0:59:d8:98:99:6b:95:c7: 51:a0:d4:54:e4:eb:5b:6c:56:b3:c2:db:ea:5f:9a:fe:00:a9: 90:05:58:bb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDSswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjEzNTJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY3RkRENjVBOTRDODcy Q0NEQjQ2NzBCRTQ0MTMzQTYwNDkxNTA0MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW4V8lw5JcTm+kAuY9mEGk/U3ESa9FqiKRCI4RFvJLWJzoQdIL rjzWDsCf38wLpioB3KYpWkktCNh6ChtFafj/ZewvlMQ0p2PaZs7qMExgaqueArSv RD+ofJXRE1C3rQUbVnKN2wX/AGhV7ygaO8yz9nPl4j/fBgMEI7rlATwBgDVGRBZW eg/XxioYAGFHC43k5vYdrUxaeAjNXDCPtmxK6AEWPCivdPG9OY8KeLsGhsrua/Av E2rJzSEdcLPpCZd68CE5feofI70LP1AOsETw9GxvUJGrUqX46afukAtH/bvjRdb1 LbA5LNrSGq09Dl0QfmA76zPGADiKDupyIOZNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU9/3WWpTIcszbRnC+RBM6YEkVBCcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzlfM1dXcFRJY3N6YlJuQy1SQk02WUVrVkJDYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaBgwDQYJKoZIhvcNAQELBQADggEBACu2Z1rw52BP2Wb10iQflCx5R2nT 0kNkgAp+SS5zVK2ZErHdSCIT8OWxMjNdA/g3EnNnEMCriPNa/RVZL6axq7SPJrsi KzJq0JhWCIXh2ltLKmh4JfeONyq/7Sz0EJioMPiFYk2zdZtOtDSaBfX6rLPZoiYT dHvOSrbkitkJ+KqOUoqCY1/JQ44hpgQJR+SYaNZFjPluYo4OlTSWMaVywpStUecZ o2YZwIcXRHN+u92RPkGUXHH1QoxB7C8CYVJHIfUF4CYDwZ43GVnChwPOGNn2qVjI RiDVc0PA3CqF2BHdtgugWdiYmWuVx1Gg1FTk61tsVrPC2+pfmv4AqZAFWLs= -----END CERTIFICATE-----Generated at Sat Apr 5 17:28:08 2025 by rpki-client