$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/A3IT69hbIRD1B7ChJhhvKNKptbc.roa File: A3IT69hbIRD1B7ChJhhvKNKptbc.roa (raw, json) Hash identifier: 0XzSOloczCEfkp9N3xwl84PuNew3+Qioq7yfZeLCCkY= Subject key identifier: 03:72:13:EB:D8:5B:21:10:F5:07:B0:A1:26:18:6F:28:D2:A9:B5:B7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D98 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A3IT69hbIRD1B7ChJhhvKNKptbc.roa Signing time: Tue 01 Apr 2025 02:21:38 +0000 ROA not before: Tue 01 Apr 2025 02:21:38 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3480 (0xd98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:21:38 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=037213EBD85B2110F507B0A126186F28D2A9B5B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0d:39:b2:68:fe:8b:fa:ce:2c:d3:1e:c6:35: 80:a0:71:bc:b9:74:e2:aa:61:14:60:40:eb:cf:1d: c5:a6:4e:e8:84:68:23:5f:1f:f1:b3:64:c9:a9:88: 6d:75:55:83:a2:59:a9:ba:5e:57:43:68:65:3a:6f: 14:28:0c:e5:75:70:b1:25:09:b4:47:d0:f7:75:29: 3f:3e:94:8e:b5:37:9b:46:0e:5f:e0:08:7d:df:fe: e3:57:cc:18:2d:ab:0d:e5:5b:4f:15:28:39:b7:02: 9e:0c:92:d7:3b:a0:72:14:a9:92:33:d4:d6:80:25: 41:53:3d:95:56:0d:6d:02:6e:3d:b1:89:55:2b:fc: e7:6b:6b:bc:7c:fa:df:2d:27:55:ba:15:31:a1:67: b1:30:9c:d9:77:76:b4:ca:c1:ea:9e:f8:ca:c3:18: 5b:9c:37:49:05:28:ad:c0:b0:6d:29:96:ea:83:38: fc:1d:97:10:e7:f1:fa:bf:dd:97:73:44:53:4f:e1: 79:e5:6e:e4:5a:8a:9d:65:f5:81:05:87:82:1b:27: ac:3c:57:91:de:a8:64:9a:87:20:e4:37:c8:fe:b5: d3:30:65:30:27:60:48:13:21:ec:aa:5c:c0:74:27: b4:eb:9a:36:65:4c:ad:63:b0:8e:55:df:d2:f5:be: 35:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:72:13:EB:D8:5B:21:10:F5:07:B0:A1:26:18:6F:28:D2:A9:B5:B7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A3IT69hbIRD1B7ChJhhvKNKptbc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.72.0/23 Signature Algorithm: sha256WithRSAEncryption b2:48:85:b4:c8:9f:e6:4e:53:3e:de:95:86:5f:3a:ab:c6:82: f5:04:03:1c:fb:bf:3b:41:e2:f7:9d:08:03:89:84:38:ce:ae: 63:54:c3:72:df:8c:9a:d0:d2:07:2c:3b:21:03:41:aa:d8:96: 1e:56:af:de:48:a8:2a:6c:22:d6:5d:64:2f:ef:17:da:c6:d9: b8:20:d7:fa:f3:19:09:55:36:42:36:e9:1a:ee:7c:5c:9b:f9: e0:bf:33:c7:03:2d:75:18:61:2b:b0:2d:71:38:82:cb:93:32: 03:e9:b5:8a:72:bd:a1:65:bb:70:fc:15:68:c9:20:6f:3c:34: ab:7e:c5:15:d9:e0:d7:17:38:f0:41:0b:34:d2:84:a5:c2:7e: 54:e2:93:05:42:8a:7a:09:a5:2a:03:d7:41:65:aa:89:ce:36: 86:39:e1:db:e3:9b:bf:78:3e:5c:37:78:bd:be:96:9a:d4:7f: f5:52:0a:b4:4b:08:45:e9:0b:ab:f2:b5:ae:bb:eb:89:dd:85: 3a:17:f7:29:39:91:04:90:e5:a5:34:5d:de:0f:d6:b0:8f:0c: 68:59:16:6e:f0:25:7b:2b:48:e9:d9:8d:85:df:b0:34:1a:53: d7:29:73:90:0f:7f:d4:aa:26:c6:97:b9:35:db:b4:5e:0d:a0: 51:1d:ee:74 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDZgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjIxMzhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAzNzIxM0VCRDg1QjIx MTBGNTA3QjBBMTI2MTg2RjI4RDJBOUI1QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtDTmyaP6L+s4s0x7GNYCgcby5dOKqYRRgQOvPHcWmTuiEaCNf H/GzZMmpiG11VYOiWam6XldDaGU6bxQoDOV1cLElCbRH0Pd1KT8+lI61N5tGDl/g CH3f/uNXzBgtqw3lW08VKDm3Ap4Mktc7oHIUqZIz1NaAJUFTPZVWDW0Cbj2xiVUr /Odra7x8+t8tJ1W6FTGhZ7EwnNl3drTKweqe+MrDGFucN0kFKK3AsG0pluqDOPwd lxDn8fq/3ZdzRFNP4XnlbuRaip1l9YEFh4IbJ6w8V5HeqGSahyDkN8j+tdMwZTAn YEgTIeyqXMB0J7TrmjZlTK1jsI5V39L1vjVjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUA3IT69hbIRD1B7ChJhhvKNKptbcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0EzSVQ2OWhiSVJEMUI3Q2hKaGh2S05LcHRiYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYkgwDQYJKoZIhvcNAQELBQADggEBALJIhbTIn+ZOUz7elYZfOqvGgvUE Axz7vztB4vedCAOJhDjOrmNUw3LfjJrQ0gcsOyEDQarYlh5Wr95IqCpsItZdZC/v F9rG2bgg1/rzGQlVNkI26RrufFyb+eC/M8cDLXUYYSuwLXE4gsuTMgPptYpyvaFl u3D8FWjJIG88NKt+xRXZ4NcXOPBBCzTShKXCflTikwVCinoJpSoD10FlqonONoY5 4dvjm794Plw3eL2+lprUf/VSCrRLCEXpC6vyta6764ndhToX9yk5kQSQ5aU0Xd4P 1rCPDGhZFm7wJXsrSOnZjYXfsDQaU9cpc5APf9SqJsaXuTXbtF4NoFEd7nQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:29 2025 by rpki-client