$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/L-mHY6jQn1G9zgwJd_YJ3392EqU.roa File: L-mHY6jQn1G9zgwJd_YJ3392EqU.roa (raw, json) Hash identifier: 07Ppb2V9hAeqJcIjdSXC+d3rQuheMaL/XsOkX1qu+j8= Subject key identifier: 2F:E9:87:63:A8:D0:9F:51:BD:CE:0C:09:77:F6:09:DF:7F:76:12:A5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C42 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L-mHY6jQn1G9zgwJd_YJ3392EqU.roa Signing time: Tue 01 Apr 2025 01:57:17 +0000 ROA not before: Tue 01 Apr 2025 01:57:17 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3138 (0xc42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:17 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=2FE98763A8D09F51BDCE0C0977F609DF7F7612A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:72:ad:04:12:5a:54:b4:52:bc:4a:f3:c4: 70:08:18:2b:78:7f:d3:1f:56:3f:82:ff:de:cf:0f: 63:18:1b:63:3b:70:71:1b:ed:f0:1d:d7:27:e8:66: 86:04:ce:db:c4:a6:64:fe:9a:2d:da:aa:d5:2f:f8: 7a:b1:16:24:cb:ef:dc:da:96:f3:79:eb:d3:79:56: 70:81:75:a4:0d:f6:08:24:39:b4:ea:d7:55:5e:1e: 28:fe:15:69:52:1d:65:88:6e:32:5c:00:fc:2d:21: 5b:40:5c:a8:57:4c:fd:7f:46:11:80:90:d2:96:e4: 7e:b8:a7:4d:bd:79:4f:e3:66:ac:a9:f1:19:67:7a: f0:8f:91:69:af:8c:7c:40:39:db:43:80:a3:b8:e1: 82:1c:bb:bc:e1:0d:b2:d0:d5:f9:43:11:d9:bb:74: 7d:ea:2f:28:2a:66:9f:8a:33:77:19:54:74:e3:e2: cb:d2:0e:c3:85:6a:55:f6:b7:73:45:17:04:ef:17: 09:2a:f1:22:97:a7:fb:70:9c:bf:4a:c3:68:56:a7: 92:20:c4:e0:bd:42:5f:ae:f6:c5:4d:13:50:51:f9: 32:63:8d:da:36:0a:a8:3c:50:39:5e:fc:ba:3a:44: 48:47:cf:41:91:f6:39:8b:8e:37:56:c7:0a:1e:1a: 9e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E9:87:63:A8:D0:9F:51:BD:CE:0C:09:77:F6:09:DF:7F:76:12:A5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L-mHY6jQn1G9zgwJd_YJ3392EqU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.44.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:0f:c5:63:0d:7c:2c:90:08:9b:ac:7b:45:e3:74:e3:c9:b4: cc:46:de:46:94:3a:5a:fd:8d:03:19:fa:26:b0:f8:46:f0:10: ff:52:5e:ee:46:de:26:11:1d:26:5e:26:4e:c2:81:dc:a1:98: c2:f3:c7:74:81:03:50:d2:d3:80:40:60:d6:02:77:84:37:cc: 02:7b:c6:fb:e1:8e:96:63:9e:80:ad:86:fc:ec:ab:22:cc:4b: 7a:60:25:1b:9a:85:30:dd:fc:1a:d8:31:d4:50:24:31:95:aa: 83:73:21:b6:5c:c2:91:25:b0:a9:58:10:01:92:f9:d6:66:74: 29:9b:4a:c7:05:ce:68:63:e4:b7:47:b7:c2:a3:43:c4:13:c1: d4:8b:87:0b:66:a5:83:85:7b:f8:60:bc:f9:9b:d3:4c:54:c2: 4f:aa:a3:d7:d7:8e:3f:4e:62:3f:7a:4f:35:14:a2:33:be:3c: d5:7d:22:1f:31:35:e1:24:ac:31:16:a9:c8:a6:69:c9:b1:42: 86:51:2a:b9:4e:e0:79:cf:be:01:9e:8e:11:ac:cd:b0:45:da: a3:87:2e:9a:b8:36:0d:fd:63:c6:1b:70:86:df:11:8c:be:36: 32:fe:81:82:5f:a5:dd:15:a4:be:2c:fa:f8:1a:35:af:29:94: 6c:0b:7a:bc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MTdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJGRTk4NzYzQThEMDlG NTFCRENFMEMwOTc3RjYwOURGN0Y3NjEyQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpS3KtBBJaVLRSvErzxHAIGCt4f9MfVj+C/97PD2MYG2M7cHEb 7fAd1yfoZoYEztvEpmT+mi3aqtUv+HqxFiTL79zalvN569N5VnCBdaQN9ggkObTq 11VeHij+FWlSHWWIbjJcAPwtIVtAXKhXTP1/RhGAkNKW5H64p029eU/jZqyp8Rln evCPkWmvjHxAOdtDgKO44YIcu7zhDbLQ1flDEdm7dH3qLygqZp+KM3cZVHTj4svS DsOFalX2t3NFFwTvFwkq8SKXp/twnL9Kw2hWp5IgxOC9Ql+u9sVNE1BR+TJjjdo2 Cqg8UDle/Lo6REhHz0GR9jmLjjdWxwoeGp7VAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUL+mHY6jQn1G9zgwJd/YJ3392EqUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0wtbUhZNmpRbjFHOXpnd0pkX1lKMzM5MkVxVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYCwwDQYJKoZIhvcNAQELBQADggEBAE0PxWMNfCyQCJuse0XjdOPJtMxG 3kaUOlr9jQMZ+iaw+EbwEP9SXu5G3iYRHSZeJk7CgdyhmMLzx3SBA1DS04BAYNYC d4Q3zAJ7xvvhjpZjnoCthvzsqyLMS3pgJRuahTDd/BrYMdRQJDGVqoNzIbZcwpEl sKlYEAGS+dZmdCmbSscFzmhj5LdHt8KjQ8QTwdSLhwtmpYOFe/hgvPmb00xUwk+q o9fXjj9OYj96TzUUojO+PNV9Ih8xNeEkrDEWqcimacmxQoZRKrlO4HnPvgGejhGs zbBF2qOHLpq4Ng39Y8YbcIbfEYy+NjL+gYJfpd0VpL4s+vgaNa8plGwLerw= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:17 2025 by rpki-client