$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/D7sEcylLmP95RzsRSVuSksV5TwA.roa File: D7sEcylLmP95RzsRSVuSksV5TwA.roa (raw, json) Hash identifier: dh72HtH/QYi2lYTU5vQdev5/AWlxLUTQeywAj6/nFNk= Subject key identifier: 0F:BB:04:73:29:4B:98:FF:79:47:3B:11:49:5B:92:92:C5:79:4F:00 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DF2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D7sEcylLmP95RzsRSVuSksV5TwA.roa Signing time: Tue 01 Apr 2025 02:29:07 +0000 ROA not before: Tue 01 Apr 2025 02:29:07 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3570 (0xdf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:29:07 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=0FBB0473294B98FF79473B11495B9292C5794F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:69:25:0f:fd:93:21:37:bd:5c:b2:44:f1:0c: 17:e4:94:2b:f8:5f:fe:b2:2c:d1:39:23:73:aa:68: 2e:b2:31:1f:87:be:de:e0:91:ac:a0:62:8a:71:f9: 83:4c:fc:40:f7:62:2a:e6:6c:0d:e3:36:10:c0:58: 09:6d:82:70:f2:8e:d3:b2:0e:6f:06:1c:d5:85:13: 52:d3:5a:f2:68:3f:79:a6:57:67:07:a4:91:d2:90: fb:d2:b0:fb:f6:e5:11:16:89:2c:9b:c3:d2:d0:8f: 7b:bc:b2:97:79:9d:0e:bb:89:6c:a2:ed:8c:db:26: e0:15:99:7e:01:0d:8d:72:39:af:6f:bf:29:c6:f5: b0:1a:de:cf:2c:e8:37:f6:2e:54:12:d7:93:06:62: 9b:e1:04:94:87:27:8f:df:44:69:7e:7a:29:aa:69: 28:0d:66:aa:17:ba:50:44:e1:46:08:85:a0:ae:24: ce:31:72:2f:1d:08:f7:ce:ae:23:de:18:17:a2:45: 87:f0:b5:ed:9b:8f:27:29:06:8b:a3:ca:00:2f:f8: 25:d5:04:62:e9:cd:fa:15:22:30:45:9b:18:ba:76: dd:0e:fc:0d:0b:29:26:57:17:2f:dc:08:5e:e9:9a: 5d:a4:92:0b:03:80:87:96:60:26:b4:fe:aa:63:4d: 01:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BB:04:73:29:4B:98:FF:79:47:3B:11:49:5B:92:92:C5:79:4F:00 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D7sEcylLmP95RzsRSVuSksV5TwA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.90.0/23 Signature Algorithm: sha256WithRSAEncryption 57:6f:35:ab:fc:43:f4:4c:a4:19:33:23:a9:cb:5a:61:72:e4: b4:4b:51:31:04:00:4a:41:fd:50:11:51:aa:a1:7d:95:4e:89: 9e:77:88:4a:c6:16:de:b9:c4:71:ca:d1:2f:af:ba:e3:59:bc: 63:fd:c7:d6:c2:f2:b1:8f:70:fc:fb:62:46:25:d3:e6:76:5d: 34:19:8f:e2:be:1c:70:cf:e4:fd:d4:9d:de:3f:eb:0d:fc:40: 60:6d:ac:a6:f7:3f:4d:ad:ee:c8:5d:08:e9:1c:58:13:6d:be: ad:3e:94:28:17:22:86:32:45:a1:43:c5:a3:1d:00:cd:fc:ce: a1:18:4a:d4:7c:81:06:78:c5:f4:10:83:9b:47:f7:08:68:bf: b8:34:7c:8d:25:55:fb:b8:da:1d:d2:7d:ba:aa:f4:7c:f2:d1: 14:01:90:96:0e:c7:94:24:a6:37:39:48:75:1f:80:41:18:9c: 96:63:f3:07:bf:b3:b3:ff:88:d9:94:5d:37:6c:eb:ff:3b:a7: 0b:97:21:e3:c2:69:fe:76:82:42:ff:27:f6:94:99:3f:f9:7e: e7:fe:27:b0:9b:d9:4a:b9:28:91:cf:34:47:d4:16:2c:f5:6c: d2:88:40:7c:10:33:be:71:fa:5d:94:51:7e:f7:ef:24:c3:ca: 94:a6:4b:59 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI5MDdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBGQkIwNDczMjk0Qjk4 RkY3OTQ3M0IxMTQ5NUI5MjkyQzU3OTRGMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsaSUP/ZMhN71cskTxDBfklCv4X/6yLNE5I3OqaC6yMR+Hvt7g kaygYopx+YNM/ED3YirmbA3jNhDAWAltgnDyjtOyDm8GHNWFE1LTWvJoP3mmV2cH pJHSkPvSsPv25REWiSybw9LQj3u8spd5nQ67iWyi7YzbJuAVmX4BDY1yOa9vvynG 9bAa3s8s6Df2LlQS15MGYpvhBJSHJ4/fRGl+eimqaSgNZqoXulBE4UYIhaCuJM4x ci8dCPfOriPeGBeiRYfwte2bjycpBoujygAv+CXVBGLpzfoVIjBFmxi6dt0O/A0L KSZXFy/cCF7pml2kkgsDgIeWYCa0/qpjTQGxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUD7sEcylLmP95RzsRSVuSksV5TwAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0Q3c0VjeWxMbVA5NVJ6c1JTVnVTa3NWNVR3QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYlowDQYJKoZIhvcNAQELBQADggEBAFdvNav8Q/RMpBkzI6nLWmFy5LRL UTEEAEpB/VARUaqhfZVOiZ53iErGFt65xHHK0S+vuuNZvGP9x9bC8rGPcPz7YkYl 0+Z2XTQZj+K+HHDP5P3Und4/6w38QGBtrKb3P02t7shdCOkcWBNtvq0+lCgXIoYy RaFDxaMdAM38zqEYStR8gQZ4xfQQg5tH9whov7g0fI0lVfu42h3Sfbqq9Hzy0RQB kJYOx5Qkpjc5SHUfgEEYnJZj8we/s7P/iNmUXTds6/87pwuXIePCaf52gkL/J/aU mT/5fuf+J7Cb2Uq5KJHPNEfUFiz1bNKIQHwQM75x+l2UUX737yTDypSmS1k= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:57 2025 by rpki-client