$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DzuTfAVEhUE9tg14xNILvYaJ6yQ.roa File: DzuTfAVEhUE9tg14xNILvYaJ6yQ.roa (raw, json) Hash identifier: NtU00HQadEVlj+nzUqdcdfVq3/zgum8MGxqiJEKgEy4= Subject key identifier: 0F:3B:93:7C:05:44:85:41:3D:B6:0D:78:C4:D2:0B:BD:86:89:EB:24 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BA0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DzuTfAVEhUE9tg14xNILvYaJ6yQ.roa Signing time: Tue 01 Apr 2025 01:39:53 +0000 ROA not before: Tue 01 Apr 2025 01:39:53 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2976 (0xba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:39:53 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=0F3B937C054485413DB60D78C4D20BBD8689EB24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1e:3b:a6:25:68:07:45:6a:0f:ec:6c:2f:fd: 40:4e:73:e8:88:b9:61:be:bf:1f:f8:60:e6:e5:d6: e4:4a:03:05:b9:b7:70:69:ad:cd:c4:6b:41:09:ae: a4:4e:7a:07:c7:10:87:97:c0:c2:11:fc:15:e7:8e: 23:7b:16:29:bc:fa:28:3f:5c:96:b0:d9:48:58:4e: fe:71:f0:5f:bc:36:e2:ac:b7:25:36:dd:45:9b:d4: 90:21:59:75:09:cc:c1:c6:05:1f:0b:51:ff:71:6d: 86:86:cc:fe:b1:4c:d0:5c:45:95:19:5e:48:85:16: 23:07:fa:e5:cf:29:61:5f:31:cf:6f:25:1b:4f:db: 76:c1:d9:e9:b7:02:92:e9:53:0e:42:f5:dd:0d:13: 12:f4:2c:98:8f:d4:5b:83:7b:95:d3:93:a3:a8:c9: d2:9d:4d:ed:a8:68:4a:a5:3c:e4:98:45:c2:fd:17: 46:cd:fb:83:ba:ca:50:61:6a:19:98:8d:0f:ec:ce: 80:45:2f:02:03:e4:76:8c:04:63:fd:83:d1:d5:43: 92:2a:c9:87:65:73:59:a2:80:d2:9a:19:f4:68:19: 87:60:aa:fb:36:44:c3:bb:e5:b7:0d:45:7d:f0:3c: 5a:41:bc:59:66:0c:61:82:b2:40:66:f1:df:4d:92: 15:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3B:93:7C:05:44:85:41:3D:B6:0D:78:C4:D2:0B:BD:86:89:EB:24 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DzuTfAVEhUE9tg14xNILvYaJ6yQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.217.0/24 Signature Algorithm: sha256WithRSAEncryption a2:15:36:22:e8:24:d3:74:6d:ed:ff:82:13:f2:c9:4a:f4:3d: 85:b5:2f:25:27:03:79:9b:bf:da:2e:ab:fc:9e:df:38:7a:bf: 59:a2:ff:4a:ba:d6:21:d3:85:cc:43:bb:93:60:72:1d:7e:35: 01:b5:1e:3d:2e:c4:27:ed:80:dd:b7:ce:83:42:a6:ce:d8:a7: 2c:63:67:ec:20:fc:8f:13:08:b4:94:ec:ab:6c:63:0f:51:7f: dc:8d:db:c4:05:04:c5:b4:7e:3d:e5:89:02:19:d4:67:ca:83: 8e:ef:2f:5f:ee:a4:e6:02:9f:0d:a5:cb:9c:47:41:db:12:66: cc:61:49:17:b9:4a:cd:72:35:60:cf:6f:49:93:26:f1:af:43: 59:38:e6:1f:2b:25:67:23:2e:d8:51:bd:a2:55:c4:05:8d:25: 5a:97:4c:5a:a6:56:8f:34:9b:ae:06:fc:9c:e5:52:31:7a:7f: b5:bd:e5:ee:3e:4f:e9:ba:d5:aa:88:7d:48:c4:b1:6c:79:c9: 46:68:18:b4:42:1a:41:19:38:e7:28:27:4a:6a:55:88:97:70: 9f:77:b9:98:bb:b8:ac:b5:27:9f:95:0e:bc:3f:d0:9b:62:7b: c9:9b:d4:7b:8a:e9:72:ed:3d:0d:3c:4c:d3:5d:ed:fc:46:ec: 43:14:f5:d4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM5NTNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBGM0I5MzdDMDU0NDg1 NDEzREI2MEQ3OEM0RDIwQkJEODY4OUVCMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuHjumJWgHRWoP7Gwv/UBOc+iIuWG+vx/4YObl1uRKAwW5t3Bp rc3Ea0EJrqROegfHEIeXwMIR/BXnjiN7Fim8+ig/XJaw2UhYTv5x8F+8NuKstyU2 3UWb1JAhWXUJzMHGBR8LUf9xbYaGzP6xTNBcRZUZXkiFFiMH+uXPKWFfMc9vJRtP 23bB2em3ApLpUw5C9d0NExL0LJiP1FuDe5XTk6OoydKdTe2oaEqlPOSYRcL9F0bN +4O6ylBhahmYjQ/szoBFLwID5HaMBGP9g9HVQ5IqyYdlc1migNKaGfRoGYdgqvs2 RMO75bcNRX3wPFpBvFlmDGGCskBm8d9NkhWtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDzuTfAVEhUE9tg14xNILvYaJ6yQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0R6dVRmQVZFaFVFOXRnMTR4TklMdllhSjZ5US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxatkwDQYJKoZIhvcNAQELBQADggEBAKIVNiLoJNN0be3/ghPyyUr0PYW1 LyUnA3mbv9ouq/ye3zh6v1mi/0q61iHThcxDu5Ngch1+NQG1Hj0uxCftgN23zoNC ps7YpyxjZ+wg/I8TCLSU7KtsYw9Rf9yN28QFBMW0fj3liQIZ1GfKg47vL1/upOYC nw2ly5xHQdsSZsxhSRe5Ss1yNWDPb0mTJvGvQ1k45h8rJWcjLthRvaJVxAWNJVqX TFqmVo80m64G/JzlUjF6f7W95e4+T+m61aqIfUjEsWx5yUZoGLRCGkEZOOcoJ0pq VYiXcJ93uZi7uKy1J5+VDrw/0Jtie8mb1HuK6XLtPQ08TNNd7fxG7EMU9dQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:36 2025 by rpki-client