$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jzybfxj2Gd6nRvpwlErYdJVF_CU.roa File: Jzybfxj2Gd6nRvpwlErYdJVF_CU.roa (raw, json) Hash identifier: zjog7luAPztYtNclfZgdkWGOJnXkiiAqoFNrA86RUSY= Subject key identifier: 27:3C:9B:7F:18:F6:19:DE:A7:46:FA:70:94:4A:D8:74:95:45:FC:25 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E10 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jzybfxj2Gd6nRvpwlErYdJVF_CU.roa Signing time: Tue 01 Apr 2025 02:31:28 +0000 ROA not before: Tue 01 Apr 2025 02:31:28 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3600 (0xe10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:31:28 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=273C9B7F18F619DEA746FA70944AD8749545FC25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:51:0e:94:91:e0:49:ae:98:3e:73:b9:51:10: 72:b5:cd:63:85:b4:a3:ef:0a:83:f6:51:03:5c:20: 38:a5:b8:a5:19:5c:ce:75:24:fa:80:d7:8d:4f:1a: 47:3f:01:01:90:88:63:0e:11:df:f9:cd:28:f9:57: de:67:4d:95:fd:65:b3:91:4d:0d:c1:6f:ac:72:6a: b7:12:6e:dc:ab:55:0b:47:16:fc:37:f8:0b:a5:4b: ae:e1:55:8b:4a:aa:7c:bf:a3:43:70:b5:49:a1:fd: 9a:9f:91:1b:0f:ed:f9:17:31:c0:fb:d5:69:46:f7: b4:05:33:5f:c8:23:da:da:8d:07:fd:24:f1:e8:b0: f5:ce:c9:92:a2:93:a4:8e:3d:af:48:06:f0:c0:2e: 9f:14:da:d9:a8:10:80:fc:37:fb:7b:dc:6d:59:1e: 2b:b4:93:41:f8:b7:d6:fd:ef:1e:b7:57:f6:93:69: 47:dd:51:1e:f1:ce:eb:8c:97:14:ea:3d:4c:65:f4: 40:4b:24:b8:9d:73:67:c1:46:41:98:4e:f0:0b:ae: 4b:49:e7:38:02:96:c3:9c:62:a9:8c:af:cd:a0:b9: c9:55:ad:84:66:b1:a7:8e:56:ba:1e:16:1e:9b:c5: 16:8e:b6:8b:cb:b0:f6:6d:27:97:11:61:80:a1:ef: e9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3C:9B:7F:18:F6:19:DE:A7:46:FA:70:94:4A:D8:74:95:45:FC:25 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jzybfxj2Gd6nRvpwlErYdJVF_CU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.28.0/22 Signature Algorithm: sha256WithRSAEncryption 54:6d:4c:79:60:fc:2b:2c:b6:ca:d4:83:e8:aa:77:d1:7b:1e: de:76:1e:0e:f4:1b:d9:f9:1f:cf:ba:20:ff:97:84:74:e3:a0: e1:7c:3a:35:aa:a9:ad:f2:03:6d:34:34:b9:64:6d:e0:9d:8b: 10:d8:1a:c6:f8:60:a1:69:35:fe:0d:21:76:ce:6f:01:eb:d0: f5:83:88:34:7a:e4:6f:60:98:a9:ee:b2:eb:7a:15:7a:e9:39: 9a:e4:9c:fc:4d:27:4e:70:0f:99:5e:d9:5c:76:cc:0f:a1:8f: cc:bb:84:79:00:d0:86:9a:7a:ac:73:4c:0f:18:3d:d9:a5:8d: 6f:11:4b:f1:c0:34:df:b8:2b:2e:19:a0:4b:6d:7b:8a:10:f7: 26:be:a3:7a:ce:5c:d5:64:84:39:db:f2:f5:6e:2d:e1:d4:fa: 7a:aa:7d:6d:e5:75:30:17:a7:ac:0b:29:54:5d:9b:73:8d:84: ae:b7:7d:75:c0:66:85:05:14:d0:db:88:b4:f7:fa:ee:43:c5: 4f:7c:6e:e6:84:08:9d:7c:5b:7e:80:72:9f:76:ae:65:26:f9: 86:50:c7:ed:d7:7e:f1:7b:15:46:1c:a5:cd:42:f7:eb:30:a8: 4f:7f:b5:b3:f3:ed:7e:3e:d4:f6:4b:3e:ce:fd:b7:12:92:0d: e7:94:c1:11 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDhAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMxMjhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI3M0M5QjdGMThGNjE5 REVBNzQ2RkE3MDk0NEFEODc0OTU0NUZDMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRUQ6UkeBJrpg+c7lREHK1zWOFtKPvCoP2UQNcIDiluKUZXM51 JPqA141PGkc/AQGQiGMOEd/5zSj5V95nTZX9ZbORTQ3Bb6xyarcSbtyrVQtHFvw3 +AulS67hVYtKqny/o0NwtUmh/ZqfkRsP7fkXMcD71WlG97QFM1/II9rajQf9JPHo sPXOyZKik6SOPa9IBvDALp8U2tmoEID8N/t73G1ZHiu0k0H4t9b97x63V/aTaUfd UR7xzuuMlxTqPUxl9EBLJLidc2fBRkGYTvALrktJ5zgClsOcYqmMr82guclVrYRm saeOVroeFh6bxRaOtovLsPZtJ5cRYYCh7+k/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJzybfxj2Gd6nRvpwlErYdJVF/CUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0p6eWJmeGoyR2Q2blJ2cHdsRXJZZEpWRl9DVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxaBwwDQYJKoZIhvcNAQELBQADggEBAFRtTHlg/CsstsrUg+iqd9F7Ht52 Hg70G9n5H8+6IP+XhHTjoOF8OjWqqa3yA200NLlkbeCdixDYGsb4YKFpNf4NIXbO bwHr0PWDiDR65G9gmKnusut6FXrpOZrknPxNJ05wD5le2Vx2zA+hj8y7hHkA0Iaa eqxzTA8YPdmljW8RS/HANN+4Ky4ZoEtte4oQ9ya+o3rOXNVkhDnb8vVuLeHU+nqq fW3ldTAXp6wLKVRdm3ONhK63fXXAZoUFFNDbiLT3+u5DxU98buaECJ18W36Acp92 rmUm+YZQx+3XfvF7FUYcpc1C9+swqE9/tbPz7X4+1PZLPs79txKSDeeUwRE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:31 2025 by rpki-client