$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MDZJwD2kYQoktuN8GOYCa3scKAU.roa File: MDZJwD2kYQoktuN8GOYCa3scKAU.roa (raw, json) Hash identifier: ZNUT09LhKvmrZTJP0lcxzxXquSMQpX1Q4j25ebrBcFk= Subject key identifier: 30:36:49:C0:3D:A4:61:0A:24:B6:E3:7C:18:E6:02:6B:7B:1C:28:05 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D12 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MDZJwD2kYQoktuN8GOYCa3scKAU.roa Signing time: Tue 01 Apr 2025 02:11:44 +0000 ROA not before: Tue 01 Apr 2025 02:11:44 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.110.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3346 (0xd12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:44 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=303649C03DA4610A24B6E37C18E6026B7B1C2805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:4d:ee:74:14:94:3f:25:d8:26:a2:32:4a: 46:d8:4b:92:81:6e:e3:f4:82:8d:58:77:5c:ad:73: 1c:79:04:0a:d1:dc:db:f5:5d:df:7b:c5:6f:db:63: af:c6:05:64:a4:c0:85:ac:c4:de:14:6e:dd:ec:c8: f4:8a:8f:9d:78:af:c4:41:9e:6e:16:b7:8b:27:f6: e8:32:7b:ae:e6:d3:6c:fb:a4:70:21:12:3b:1b:12: c7:4c:15:c6:f7:4b:a7:fb:71:69:c9:78:e6:b4:f8: 9c:04:73:42:d7:43:dc:40:05:8e:d6:45:4d:20:7c: 87:cb:a3:c5:b4:6a:22:23:c9:43:0b:44:87:18:7b: fc:db:ac:c1:e6:9c:90:70:07:35:22:e7:26:42:bd: 11:c1:f5:de:4c:61:0f:de:e8:6b:f1:fa:b5:03:1b: e0:1f:d9:22:b4:a9:34:80:c4:6c:3c:af:a2:3d:8e: dd:45:19:6a:6b:ab:62:cc:36:7c:de:2c:ee:5b:d5: a3:05:c9:5f:0d:6d:d5:7b:3d:81:30:51:f7:c5:1a: ac:3d:21:11:81:68:59:d9:a5:1c:f8:d2:0f:a4:df: f8:ae:66:c0:18:b7:ab:24:c2:57:aa:ff:b8:c2:ca: 28:06:a6:06:d4:89:b1:52:dd:d4:ab:1c:4f:57:93: 44:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:36:49:C0:3D:A4:61:0A:24:B6:E3:7C:18:E6:02:6B:7B:1C:28:05 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MDZJwD2kYQoktuN8GOYCa3scKAU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.110.0.0/18 Signature Algorithm: sha256WithRSAEncryption b9:e5:8b:b0:66:07:43:85:7f:ea:e6:26:93:bb:5d:ab:81:1d: 58:e0:88:58:8e:a1:6e:0f:33:f9:73:4b:9c:62:bf:36:d1:c6: cf:b8:5f:83:34:d3:9a:ff:e5:dc:d6:ae:b6:ee:8e:d6:4b:b1: d4:3b:64:b8:b2:be:60:1d:1e:53:bf:bb:d2:85:b3:95:87:29: 55:fb:f3:f1:d2:e9:b0:39:17:a0:75:a9:e2:39:e7:b0:52:1f: 97:fd:6a:1f:bc:e3:a2:97:7d:62:84:0b:35:eb:19:07:8b:af: 08:98:2b:64:d6:97:06:ba:a6:57:3e:b6:49:1f:30:56:41:27: 76:a7:45:af:8b:c2:49:b1:59:0d:4a:21:5b:1d:c1:ef:ea:83: 83:0e:88:93:e6:79:c7:4f:db:1c:19:2c:7d:3b:1e:69:01:1b: bb:ac:8a:7e:6a:ef:6c:82:02:f1:36:b4:0e:a6:7c:a9:84:83: 04:81:4f:cc:9e:18:47:1c:a4:19:07:82:53:7a:b9:45:a5:ca: 73:92:18:22:83:35:f0:97:9d:e1:50:38:9f:d4:58:10:0c:77: c8:fb:ec:bd:73:e2:e1:19:af:7b:e4:9b:b6:91:09:c6:77:4a: f3:5c:a4:f1:c0:03:63:12:ed:3b:cd:f0:fa:95:17:1d:5d:b6: d6:53:a6:f5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExNDRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMwMzY0OUMwM0RBNDYx MEEyNEI2RTM3QzE4RTYwMjZCN0IxQzI4MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZj03udBSUPyXYJqIySkbYS5KBbuP0go1Yd1ytcxx5BArR3Nv1 Xd97xW/bY6/GBWSkwIWsxN4Ubt3syPSKj514r8RBnm4Wt4sn9ugye67m02z7pHAh EjsbEsdMFcb3S6f7cWnJeOa0+JwEc0LXQ9xABY7WRU0gfIfLo8W0aiIjyUMLRIcY e/zbrMHmnJBwBzUi5yZCvRHB9d5MYQ/e6Gvx+rUDG+Af2SK0qTSAxGw8r6I9jt1F GWprq2LMNnzeLO5b1aMFyV8NbdV7PYEwUffFGqw9IRGBaFnZpRz40g+k3/iuZsAY t6skwleq/7jCyigGpgbUibFS3dSrHE9Xk0SDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMDZJwD2kYQoktuN8GOYCa3scKAUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L01EWkp3RDJrWVFva3R1TjhHT1lDYTNzY0tBVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYxbgAwDQYJKoZIhvcNAQELBQADggEBALnli7BmB0OFf+rmJpO7XauBHVjg iFiOoW4PM/lzS5xivzbRxs+4X4M005r/5dzWrrbujtZLsdQ7ZLiyvmAdHlO/u9KF s5WHKVX78/HS6bA5F6B1qeI557BSH5f9ah+846KXfWKECzXrGQeLrwiYK2TWlwa6 plc+tkkfMFZBJ3anRa+LwkmxWQ1KIVsdwe/qg4MOiJPmecdP2xwZLH07HmkBG7us in5q72yCAvE2tA6mfKmEgwSBT8yeGEccpBkHglN6uUWlynOSGCKDNfCXneFQOJ/U WBAMd8j77L1z4uEZr3vkm7aRCcZ3SvNcpPHAA2MS7TvN8PqVFx1dttZTpvU= -----END CERTIFICATE-----Generated at Sat Apr 5 17:36:00 2025 by rpki-client