$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AEYw64CJ7egZ__S98QZOLp2M7JU.roa File: AEYw64CJ7egZ__S98QZOLp2M7JU.roa (raw, json) Hash identifier: dKWQetdSgnp2h2QbPdwH8p06qNQc32vDzsTEsRhPLA4= Subject key identifier: 00:46:30:EB:80:89:ED:E8:19:FF:F4:BD:F1:06:4E:2E:9D:8C:EC:95 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C43 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AEYw64CJ7egZ__S98QZOLp2M7JU.roa Signing time: Tue 01 Apr 2025 01:57:18 +0000 ROA not before: Tue 01 Apr 2025 01:57:18 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3139 (0xc43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:18 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=004630EB8089EDE819FFF4BDF1064E2E9D8CEC95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:c5:c2:fb:93:f8:90:24:81:67:d5:65:db: dd:c2:59:f7:e9:5e:5d:47:8d:96:20:d4:24:82:e7: 87:6b:74:cd:20:fa:52:e9:21:7f:f6:11:79:46:f8: 89:d0:e7:15:72:1c:aa:4c:5e:47:b9:13:74:d9:a8: f4:44:88:3c:28:e5:4a:d2:cd:59:44:33:f6:49:f0: bb:6b:99:40:34:b9:4e:bf:a5:7e:2b:e6:7d:a7:02: b3:20:a1:41:b1:c8:83:c1:34:86:79:da:03:ca:90: 7e:4f:51:d0:f8:b4:ce:1c:22:94:38:28:51:0b:6c: a4:3c:6b:f6:e8:14:29:c7:c3:2d:b7:0c:5f:bc:5f: c5:90:65:0b:dd:0a:f3:4a:47:d9:96:a9:43:c5:a8: 5a:4d:03:4c:6e:11:81:b4:26:57:ae:2c:1c:58:35: 0e:2a:36:a4:40:ce:af:56:c9:6b:81:6e:73:06:f2: 2b:13:df:1d:52:1c:31:15:60:50:e2:b7:30:a1:de: 62:8d:ca:31:c5:ca:56:29:94:ef:fe:71:2f:47:23: 39:9d:4f:1b:08:cf:b3:f0:95:c4:54:02:b3:15:1a: 82:80:e8:46:7c:a5:08:e1:fc:30:52:10:ad:90:af: d2:77:4f:6a:04:bf:4c:cc:f6:4f:85:38:86:75:7b: c8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:46:30:EB:80:89:ED:E8:19:FF:F4:BD:F1:06:4E:2E:9D:8C:EC:95 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AEYw64CJ7egZ__S98QZOLp2M7JU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.12.0/23 Signature Algorithm: sha256WithRSAEncryption 47:a8:4d:40:21:3c:03:58:b7:57:0e:46:09:97:58:c0:fc:73: d9:06:74:e2:77:09:a7:80:72:ed:a6:5c:c6:b2:6e:15:4b:e0: 11:a5:7b:9a:95:08:be:dd:04:e0:9d:82:dc:c7:d9:2f:64:55: d9:4f:55:b6:0d:46:74:59:d9:fc:ad:dc:95:39:db:6c:f3:62: 54:31:b5:c8:07:32:4d:a5:5d:1a:8c:a3:6b:b7:98:54:0f:6d: 63:87:58:6c:be:10:87:be:b9:b2:e1:cc:49:67:d7:25:ec:43: 03:53:f0:3f:7a:84:37:95:a5:1b:bc:be:9e:fe:6b:55:29:2e: 79:e6:a5:32:56:1f:bc:30:d8:4e:b1:b6:94:b4:a3:9e:96:ef: b3:93:f0:55:3f:f9:4a:76:d6:86:ea:0a:39:af:c7:b2:33:49: 08:61:4b:f1:48:64:3b:ff:7c:9c:6c:fb:e7:a7:bf:c1:70:85: 32:63:90:17:53:99:3c:4d:85:61:61:a8:c7:b4:a5:1f:ee:ef: e7:2d:5e:cb:8d:d9:e1:3b:3b:05:46:29:96:48:96:7c:09:8d: f9:f4:b0:f7:6a:2e:56:78:1c:6a:c8:1e:76:08:8b:bf:5f:a4: 65:0e:4a:e7:dd:67:75:98:bb:5e:c0:6c:01:a3:a3:56:ac:eb: dd:2d:f8:b1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MThaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAwNDYzMEVCODA4OUVE RTgxOUZGRjRCREYxMDY0RTJFOUQ4Q0VDOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFisXC+5P4kCSBZ9Vl293CWffpXl1HjZYg1CSC54drdM0g+lLp IX/2EXlG+InQ5xVyHKpMXke5E3TZqPREiDwo5UrSzVlEM/ZJ8LtrmUA0uU6/pX4r 5n2nArMgoUGxyIPBNIZ52gPKkH5PUdD4tM4cIpQ4KFELbKQ8a/boFCnHwy23DF+8 X8WQZQvdCvNKR9mWqUPFqFpNA0xuEYG0JleuLBxYNQ4qNqRAzq9WyWuBbnMG8isT 3x1SHDEVYFDitzCh3mKNyjHFylYplO/+cS9HIzmdTxsIz7PwlcRUArMVGoKA6EZ8 pQjh/DBSEK2Qr9J3T2oEv0zM9k+FOIZ1e8hdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUAEYw64CJ7egZ//S98QZOLp2M7JUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0FFWXc2NENKN2VnWl9fUzk4UVpPTHAyTTdKVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaAwwDQYJKoZIhvcNAQELBQADggEBAEeoTUAhPANYt1cORgmXWMD8c9kG dOJ3CaeAcu2mXMaybhVL4BGle5qVCL7dBOCdgtzH2S9kVdlPVbYNRnRZ2fyt3JU5 22zzYlQxtcgHMk2lXRqMo2u3mFQPbWOHWGy+EIe+ubLhzEln1yXsQwNT8D96hDeV pRu8vp7+a1UpLnnmpTJWH7ww2E6xtpS0o56W77OT8FU/+Up21obqCjmvx7IzSQhh S/FIZDv/fJxs++env8FwhTJjkBdTmTxNhWFhqMe0pR/u7+ctXsuN2eE7OwVGKZZI lnwJjfn0sPdqLlZ4HGrIHnYIi79fpGUOSufdZ3WYu17AbAGjo1as690t+LE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:09 2025 by rpki-client