$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HFE9CUTQyycYsoI_KzpIECh6YEI.roa File: HFE9CUTQyycYsoI_KzpIECh6YEI.roa (raw, json) Hash identifier: Pg/ZanYqwf4s/N0RH5aQGyic7ymuEuxCEIDO9lZCQTs= Subject key identifier: 1C:51:3D:09:44:D0:CB:27:18:B2:82:3F:2B:3A:48:10:28:7A:60:42 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C8C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HFE9CUTQyycYsoI_KzpIECh6YEI.roa Signing time: Tue 01 Apr 2025 02:03:20 +0000 ROA not before: Tue 01 Apr 2025 02:03:20 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:20 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1C513D0944D0CB2718B2823F2B3A4810287A6042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:cb:ee:97:88:ff:c2:71:10:f6:f0:fb:e6: 18:82:fb:f7:b5:60:a9:d2:aa:af:09:8a:6b:46:6d: 78:82:0e:e2:ff:3b:d2:6f:bd:93:20:90:30:c7:69: 32:dd:5f:b5:13:72:03:90:4f:dc:2f:00:3c:18:9d: c0:b6:d2:12:e8:bf:9e:92:74:8a:6c:e1:66:90:60: 96:9f:a7:64:f0:d3:79:2f:f2:67:fb:3b:9c:c7:66: 54:75:7b:4e:da:83:c3:bb:e8:2b:60:5a:14:b8:a5: aa:6b:56:9a:e1:8e:dd:0f:82:dc:dd:4d:83:8e:85: 6c:7a:cf:b7:ce:d9:be:c8:df:20:61:15:4c:7c:89: ed:02:7a:47:e2:54:24:3d:fb:3c:b0:65:15:0a:28: 81:5a:05:e0:33:58:6c:3d:f3:62:41:3a:0d:05:2e: 07:bb:e3:da:b4:0f:24:1e:a3:86:ba:8a:69:3d:76: 43:68:0e:68:ef:72:d0:3e:b0:07:02:28:de:e0:cb: 63:aa:6a:56:ef:19:4c:31:27:84:22:67:e5:1a:b5: 00:cd:12:77:67:34:70:70:c3:5f:41:2b:78:f0:70: 1e:b6:c6:77:ab:58:5a:e2:b8:cb:33:dc:5b:d6:bd: 6f:1d:52:7f:75:c9:52:6e:95:62:42:d9:e0:3a:09: c2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:51:3D:09:44:D0:CB:27:18:B2:82:3F:2B:3A:48:10:28:7A:60:42 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HFE9CUTQyycYsoI_KzpIECh6YEI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.240.0/20 Signature Algorithm: sha256WithRSAEncryption 97:87:40:b9:7e:77:81:cb:60:be:a9:86:26:fe:d1:6e:02:19: c5:9a:f1:38:48:f7:92:60:25:ac:8e:73:2b:42:8e:fb:26:f9: d6:47:96:a8:aa:7e:fa:10:de:0a:a2:8b:94:7d:69:fd:79:cf: 8a:e2:02:31:e7:e1:56:26:ba:82:75:6d:38:aa:29:05:9f:25: b7:a3:24:86:cd:f7:f5:08:5c:b7:25:73:bd:35:c9:5b:ae:9c: c5:aa:51:67:ad:01:16:47:6c:c1:56:dc:f8:9f:4b:9c:4e:0a: b1:49:58:03:1a:fe:5f:05:60:ae:db:a9:e9:cc:cb:50:3d:6e: 56:ea:e9:e0:4b:be:9b:d8:3c:97:90:a0:72:30:e1:62:c5:c9: 82:5a:79:0e:33:15:4b:f6:c1:58:0c:ac:7a:67:c8:87:25:31: 6c:1b:f3:82:b2:13:9c:11:99:5b:d5:f0:2a:cf:92:c7:9a:d9: 95:7e:01:dc:7d:e7:14:72:77:16:b4:4a:70:b2:c1:f7:a6:10: a1:af:19:05:72:01:16:f6:3c:82:4b:38:aa:c7:c3:d5:fb:19: d5:f0:42:d3:49:1b:a1:b4:9e:14:5b:77:11:12:62:88:92:44: e0:84:89:09:5a:c9:c6:a1:26:bb:53:4c:11:04:d6:89:b6:2d: b6:5f:4b:95 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMjBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFDNTEzRDA5NDREMENC MjcxOEIyODIzRjJCM0E0ODEwMjg3QTYwNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7U8vul4j/wnEQ9vD75hiC+/e1YKnSqq8JimtGbXiCDuL/O9Jv vZMgkDDHaTLdX7UTcgOQT9wvADwYncC20hLov56SdIps4WaQYJafp2Tw03kv8mf7 O5zHZlR1e07ag8O76CtgWhS4paprVprhjt0PgtzdTYOOhWx6z7fO2b7I3yBhFUx8 ie0CekfiVCQ9+zywZRUKKIFaBeAzWGw982JBOg0FLge749q0DyQeo4a6imk9dkNo DmjvctA+sAcCKN7gy2OqalbvGUwxJ4QiZ+UatQDNEndnNHBww19BK3jwcB62xner WFriuMsz3FvWvW8dUn91yVJulWJC2eA6CcLfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHFE9CUTQyycYsoI/KzpIECh6YEIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hGRTlDVVRReXljWXNvSV9LenBJRUNoNllFSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQxYvAwDQYJKoZIhvcNAQELBQADggEBAJeHQLl+d4HLYL6phib+0W4CGcWa 8ThI95JgJayOcytCjvsm+dZHlqiqfvoQ3gqii5R9af15z4riAjHn4VYmuoJ1bTiq KQWfJbejJIbN9/UIXLclc701yVuunMWqUWetARZHbMFW3PifS5xOCrFJWAMa/l8F YK7bqenMy1A9blbq6eBLvpvYPJeQoHIw4WLFyYJaeQ4zFUv2wVgMrHpnyIclMWwb 84KyE5wRmVvV8CrPksea2ZV+Adx95xRydxa0SnCywfemEKGvGQVyARb2PIJLOKrH w9X7GdXwQtNJG6G0nhRbdxESYoiSROCEiQlaycahJrtTTBEE1om2LbZfS5U= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:21 2025 by rpki-client