$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GOHBhwKCeRP9LSu6A3Fg3BV5Sw8.roa File: GOHBhwKCeRP9LSu6A3Fg3BV5Sw8.roa (raw, json) Hash identifier: /WBr5TGUSSwlo3MIp1tIp3NN5OAU7wqjKRJpcZgxnYc= Subject key identifier: 18:E1:C1:87:02:82:79:13:FD:2D:2B:BA:03:71:60:DC:15:79:4B:0F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C94 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GOHBhwKCeRP9LSu6A3Fg3BV5Sw8.roa Signing time: Tue 01 Apr 2025 02:03:23 +0000 ROA not before: Tue 01 Apr 2025 02:03:23 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3220 (0xc94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:23 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=18E1C18702827913FD2D2BBA037160DC15794B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:91:db:4a:d0:0c:a8:08:91:f9:14:25:98:14: 52:7c:e9:ed:4f:22:03:bf:da:82:07:b8:fa:b0:3d: df:12:14:2d:94:c0:11:cd:c7:5d:74:d6:28:a1:ce: c2:dd:ef:76:43:e0:52:20:70:51:93:eb:5d:3e:0e: 04:bf:c1:8e:e7:3d:dd:36:33:8d:b7:f8:61:9e:fb: d9:a2:12:04:c5:8c:fa:56:44:0e:3f:14:c6:bc:1f: 0e:e8:33:62:25:67:8f:09:ff:1c:11:08:11:2d:2a: 32:87:c7:c1:3c:19:1d:a8:c1:47:b9:15:44:6b:ae: 7c:89:d0:cc:e0:9e:b8:c8:0f:2a:ab:21:16:de:33: 99:58:04:99:32:21:80:62:f0:5b:9c:e9:57:13:d2: 0a:7a:ee:92:ad:94:e1:1c:c9:c2:3e:8a:07:66:26: c6:56:64:4b:54:d6:cb:f4:2e:01:a6:05:66:29:c8: 32:4b:ba:6d:b2:ba:58:f6:2b:10:e8:77:68:77:5e: d4:e3:1c:b4:3f:3d:07:7e:d1:f1:f8:19:77:3f:5a: c4:79:48:86:7a:7c:71:07:e6:24:8e:8e:9c:f1:1a: d5:ce:cd:17:a3:51:ea:7d:7c:c5:72:07:e2:26:1b: 72:3c:db:5e:88:f2:40:27:1a:59:47:9f:4e:97:8a: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E1:C1:87:02:82:79:13:FD:2D:2B:BA:03:71:60:DC:15:79:4B:0F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GOHBhwKCeRP9LSu6A3Fg3BV5Sw8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.92.0/22 Signature Algorithm: sha256WithRSAEncryption 39:e4:21:fc:d9:76:39:d7:13:9f:90:5b:43:af:4c:96:69:cd: 28:58:69:fd:1b:8f:25:53:9f:61:86:63:47:00:18:84:22:9a: a3:94:1a:e9:e1:25:d9:e8:0c:3b:49:a8:de:c9:77:2b:41:d3: dc:a9:6b:4c:46:64:26:bc:3e:a2:d2:a2:d2:c7:48:04:f2:5c: 84:a9:30:52:4a:28:82:8a:8c:70:21:d4:77:c8:c7:a0:58:5b: 07:07:b1:dc:5c:5c:e4:f5:89:93:ae:86:b5:98:8f:04:ce:8f: 96:c5:ef:6f:96:09:3e:f5:49:7f:25:5e:98:3f:53:1f:96:23: df:a1:7b:73:16:4f:d8:47:f7:3f:13:7b:a0:b2:49:76:9b:9a: 1c:9f:b1:de:7d:93:e9:b0:e7:7c:d7:20:69:97:ca:40:cb:c9: 1e:2e:ee:1a:73:9e:c4:75:50:85:9a:63:b3:5b:ea:d1:46:14: b8:ec:5f:2f:5f:3a:8a:3b:23:03:dc:71:e6:7f:d8:1a:66:ae: dc:62:76:c8:f2:e0:14:94:6c:3a:89:ae:56:b5:6b:9d:13:3b: 38:58:18:59:96:3e:4f:ba:32:b1:f4:af:ee:c6:16:d2:41:ae: dc:ca:cf:09:c4:89:46:e0:7e:8f:64:24:9c:88:a5:15:2d:4b: b6:1e:92:02 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMjNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE4RTFDMTg3MDI4Mjc5 MTNGRDJEMkJCQTAzNzE2MERDMTU3OTRCMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdkdtK0AyoCJH5FCWYFFJ86e1PIgO/2oIHuPqwPd8SFC2UwBHN x1101iihzsLd73ZD4FIgcFGT610+DgS/wY7nPd02M423+GGe+9miEgTFjPpWRA4/ FMa8Hw7oM2IlZ48J/xwRCBEtKjKHx8E8GR2owUe5FURrrnyJ0MzgnrjIDyqrIRbe M5lYBJkyIYBi8Fuc6VcT0gp67pKtlOEcycI+igdmJsZWZEtU1sv0LgGmBWYpyDJL um2yulj2KxDod2h3XtTjHLQ/PQd+0fH4GXc/WsR5SIZ6fHEH5iSOjpzxGtXOzRej Uep9fMVyB+ImG3I8216I8kAnGllHn06XihqxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGOHBhwKCeRP9LSu6A3Fg3BV5Sw8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0dPSEJod0tDZVJQOUxTdTZBM0ZnM0JWNVN3OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYlwwDQYJKoZIhvcNAQELBQADggEBADnkIfzZdjnXE5+QW0OvTJZpzShY af0bjyVTn2GGY0cAGIQimqOUGunhJdnoDDtJqN7JdytB09ypa0xGZCa8PqLSotLH SATyXISpMFJKKIKKjHAh1HfIx6BYWwcHsdxcXOT1iZOuhrWYjwTOj5bF72+WCT71 SX8lXpg/Ux+WI9+he3MWT9hH9z8Te6CySXabmhyfsd59k+mw53zXIGmXykDLyR4u 7hpznsR1UIWaY7Nb6tFGFLjsXy9fOoo7IwPcceZ/2Bpmrtxidsjy4BSUbDqJrla1 a50TOzhYGFmWPk+6MrH0r+7GFtJBrtzKzwnEiUbgfo9kJJyIpRUtS7YekgI= -----END CERTIFICATE-----Generated at Sat Apr 5 17:48:09 2025 by rpki-client