$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AYlPtoMuEDVuQDgSEieptD8h1TA.roa File: AYlPtoMuEDVuQDgSEieptD8h1TA.roa (raw, json) Hash identifier: KxAIENn1WLLBFTbcL2YplxK8gwtJTbv2n2ayRIMG9Uw= Subject key identifier: 01:89:4F:B6:83:2E:10:35:6E:40:38:12:12:27:A9:B4:3F:21:D5:30 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BFC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AYlPtoMuEDVuQDgSEieptD8h1TA.roa Signing time: Tue 01 Apr 2025 01:51:28 +0000 ROA not before: Tue 01 Apr 2025 01:51:28 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3068 (0xbfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:28 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=01894FB6832E10356E4038121227A9B43F21D530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:b6:74:a9:4d:90:62:79:73:83:c2:7d:b8: 48:8c:58:c3:8f:8a:34:fc:30:66:50:e1:8d:4d:e7: c9:51:7a:41:ea:3a:a2:56:3d:88:41:c0:f8:2f:7a: f7:12:66:1e:98:4c:2e:0e:24:6d:63:d8:e8:44:ff: 4b:c7:2c:d5:4c:19:96:18:64:69:dd:2b:de:f6:30: 0e:15:5d:94:a6:41:77:d9:a6:5b:97:82:b5:a5:da: 72:fc:64:35:d6:fe:50:3a:e6:2f:f3:99:b2:4c:43: a6:23:bc:11:ab:c1:ef:f8:ce:6a:2f:38:3c:40:66: 48:dc:f8:f2:dc:51:23:cb:93:2c:0c:43:5e:8d:dd: a1:e7:43:3e:4a:4b:7a:c7:29:f4:21:67:d1:e0:96: 3f:d6:a3:6a:64:a3:96:d2:cb:0e:36:ee:18:2d:f9: e6:e7:b4:3c:96:b7:01:f0:f6:a9:a6:2a:fe:12:3e: ef:59:d9:ad:93:2c:0d:25:2d:28:e2:10:fd:5e:07: 25:ec:51:e7:0c:24:94:e1:77:72:01:30:42:ff:05: ca:b1:1a:73:a5:02:fb:0d:c1:38:f7:d5:0a:b4:d9: 6c:b1:0e:bd:0f:a5:76:3e:de:91:98:a9:6f:03:0d: 48:10:4a:1f:cc:68:6c:73:6b:6d:14:6e:7c:03:18: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:89:4F:B6:83:2E:10:35:6E:40:38:12:12:27:A9:B4:3F:21:D5:30 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AYlPtoMuEDVuQDgSEieptD8h1TA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.136.0/22 Signature Algorithm: sha256WithRSAEncryption 90:ec:24:44:21:75:3b:48:42:1c:f9:f7:29:f1:be:27:2a:48: 3a:a8:0c:f3:da:0d:8d:50:94:6a:53:85:5f:c6:98:5d:20:51: de:40:f9:cd:9e:dd:b6:21:ce:cf:03:44:c7:c7:c9:81:56:fb: 86:82:30:25:70:4e:aa:24:3a:52:e0:56:e0:d8:2b:6c:cf:8c: a4:91:38:ae:72:09:ed:f6:56:e2:1c:f1:b0:8f:9e:17:63:67: a9:ba:ed:8b:f2:7f:1a:d9:16:0d:e1:be:8f:cf:5b:f5:d4:e7: dc:65:fb:fb:e0:af:37:1c:aa:d3:ac:fd:a2:0e:30:c1:a9:61: 12:8e:a9:f6:50:87:9c:85:72:43:9e:43:36:67:e4:c9:30:00: 35:80:f6:69:42:ef:16:95:84:15:29:1f:52:89:78:ed:46:81: ff:7a:e8:1d:1d:15:74:1f:56:0e:1d:40:6a:31:56:ab:1c:50: 34:34:d2:96:4c:0b:ba:36:c3:ba:22:6e:e1:0e:24:cf:33:e5: 98:74:08:a7:bc:32:8f:99:0d:4b:30:ac:e7:7a:0a:6c:23:40: 8d:ed:c7:c3:b2:e5:9d:ee:d7:b4:98:15:20:9d:4d:39:6a:05: 8b:8b:10:85:c1:09:65:15:b3:5a:f1:53:0c:15:b0:6e:d4:a5: 7a:d0:e8:84 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMjhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAxODk0RkI2ODMyRTEw MzU2RTQwMzgxMjEyMjdBOUI0M0YyMUQ1MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+6LZ0qU2QYnlzg8J9uEiMWMOPijT8MGZQ4Y1N58lRekHqOqJW PYhBwPgvevcSZh6YTC4OJG1j2OhE/0vHLNVMGZYYZGndK972MA4VXZSmQXfZpluX grWl2nL8ZDXW/lA65i/zmbJMQ6YjvBGrwe/4zmovODxAZkjc+PLcUSPLkywMQ16N 3aHnQz5KS3rHKfQhZ9Hglj/Wo2pko5bSyw427hgt+ebntDyWtwHw9qmmKv4SPu9Z 2a2TLA0lLSjiEP1eByXsUecMJJThd3IBMEL/BcqxGnOlAvsNwTj31Qq02WyxDr0P pXY+3pGYqW8DDUgQSh/MaGxza20UbnwDGNH3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUAYlPtoMuEDVuQDgSEieptD8h1TAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0FZbFB0b011RURWdVFEZ1NFaWVwdEQ4aDFUQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYogwDQYJKoZIhvcNAQELBQADggEBAJDsJEQhdTtIQhz59ynxvicqSDqo DPPaDY1QlGpThV/GmF0gUd5A+c2e3bYhzs8DRMfHyYFW+4aCMCVwTqokOlLgVuDY K2zPjKSROK5yCe32VuIc8bCPnhdjZ6m67YvyfxrZFg3hvo/PW/XU59xl+/vgrzcc qtOs/aIOMMGpYRKOqfZQh5yFckOeQzZn5MkwADWA9mlC7xaVhBUpH1KJeO1Ggf96 6B0dFXQfVg4dQGoxVqscUDQ00pZMC7o2w7oibuEOJM8z5Zh0CKe8Mo+ZDUswrOd6 CmwjQI3tx8Oy5Z3u17SYFSCdTTlqBYuLEIXBCWUVs1rxUwwVsG7UpXrQ6IQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:13 2025 by rpki-client