$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OlJ62qmoozV7RaJLunwA_2iIzyM.roa File: OlJ62qmoozV7RaJLunwA_2iIzyM.roa (raw, json) Hash identifier: t28q9/i4AsqOsxTbP6OswnGvJbb6nXtzJL0kG71LFAI= Subject key identifier: 3A:52:7A:DA:A9:A8:A3:35:7B:45:A2:4B:BA:7C:00:FF:68:88:CF:23 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C10 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OlJ62qmoozV7RaJLunwA_2iIzyM.roa Signing time: Tue 01 Apr 2025 01:51:36 +0000 ROA not before: Tue 01 Apr 2025 01:51:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3088 (0xc10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=3A527ADAA9A8A3357B45A24BBA7C00FF6888CF23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:30:f7:bd:7e:41:97:0d:43:a0:1b:7a:f5:0d: 74:9f:74:ae:23:30:77:4f:38:2e:88:da:54:6e:fe: ea:bc:17:2e:73:77:53:91:0c:8a:fa:29:16:ff:9c: 0b:09:90:0d:32:30:1c:af:fe:d0:dd:1f:a0:03:eb: a3:1e:7c:86:32:bf:58:83:f2:9a:c6:57:09:36:08: 51:49:1d:3a:3b:77:e7:d1:e4:a2:36:90:e1:11:b1: 41:37:f2:5c:82:45:04:d5:53:21:3c:03:83:6a:f4: 7f:5e:0b:26:8f:33:d7:98:7e:28:b7:c9:91:1a:cf: a5:ce:2e:6c:16:56:04:e1:e3:21:f5:f6:66:4a:f8: 62:9b:e7:1e:fa:33:e4:ff:45:b1:68:4e:ef:8e:6f: 14:f6:06:13:bf:a0:ab:b1:23:67:e5:75:64:de:ca: de:43:f2:9a:f4:f9:02:9c:c8:52:14:52:1f:9e:fb: 65:22:10:25:e7:90:3d:b8:9a:9f:35:8d:51:9a:27: d4:d9:f9:2d:aa:47:6b:8f:13:3f:74:33:f8:1d:4e: 4f:93:f2:5a:6f:18:d9:5b:8e:1f:e7:fb:c6:cb:8c: a9:2b:15:67:8d:a5:f7:49:d1:8d:0e:8f:71:50:cc: d8:57:d8:74:fb:68:98:70:1e:5a:97:1b:31:0b:7e: d9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:52:7A:DA:A9:A8:A3:35:7B:45:A2:4B:BA:7C:00:FF:68:88:CF:23 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OlJ62qmoozV7RaJLunwA_2iIzyM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.34.0/23 Signature Algorithm: sha256WithRSAEncryption 82:3b:6f:ef:10:05:60:55:fa:a9:13:59:98:4f:75:48:4c:95: f6:fc:ce:17:ac:f2:e3:f3:8f:1c:05:87:1e:e8:53:b1:f7:66: 1d:75:21:2a:28:47:61:3d:2f:ec:e2:e5:3f:c5:64:a7:e1:02: 2e:72:20:5d:fd:65:3a:0b:19:da:89:1f:e4:40:8d:9c:92:9e: 49:f6:b2:c7:c6:96:48:db:5c:7f:72:35:6c:29:c9:98:c2:c9: c9:84:94:43:16:a5:9a:8a:bc:db:3e:36:4d:d8:f9:9c:d3:b8: f0:36:1a:d4:3e:fe:93:e8:b2:66:fb:da:df:3e:1a:65:38:c5: d3:56:3a:25:e1:2f:1d:44:0a:52:cc:81:77:7f:fc:cd:0b:ee: 0c:be:b1:ef:f9:1f:23:e8:df:00:ab:dc:28:62:1c:a9:65:00: 6c:b2:d6:2d:80:40:72:80:96:4c:28:c6:50:ec:4f:cc:97:b1: 09:cd:ae:74:5f:41:ba:56:3b:63:24:c5:31:6d:29:fd:dd:8d: 4f:76:b2:81:c9:c5:0c:d2:d4:e4:68:ab:4a:dd:14:de:4b:b3: 3f:bc:fd:ae:4a:d9:14:1a:21:b6:93:2d:43:56:14:d2:aa:15: 5b:7a:a3:8c:1f:47:56:24:33:fc:1c:16:27:27:e9:ae:9b:7f: 0c:a3:d8:08 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNBNTI3QURBQTlBOEEz MzU3QjQ1QTI0QkJBN0MwMEZGNjg4OENGMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhMPe9fkGXDUOgG3r1DXSfdK4jMHdPOC6I2lRu/uq8Fy5zd1OR DIr6KRb/nAsJkA0yMByv/tDdH6AD66MefIYyv1iD8prGVwk2CFFJHTo7d+fR5KI2 kOERsUE38lyCRQTVUyE8A4Nq9H9eCyaPM9eYfii3yZEaz6XOLmwWVgTh4yH19mZK +GKb5x76M+T/RbFoTu+ObxT2BhO/oKuxI2fldWTeyt5D8pr0+QKcyFIUUh+e+2Ui ECXnkD24mp81jVGaJ9TZ+S2qR2uPEz90M/gdTk+T8lpvGNlbjh/n+8bLjKkrFWeN pfdJ0Y0Oj3FQzNhX2HT7aJhwHlqXGzELftmjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOlJ62qmoozV7RaJLunwA/2iIzyMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09sSjYycW1vb3pWN1JhSkx1bndBXzJpSXp5TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYCIwDQYJKoZIhvcNAQELBQADggEBAII7b+8QBWBV+qkTWZhPdUhMlfb8 zhes8uPzjxwFhx7oU7H3Zh11ISooR2E9L+zi5T/FZKfhAi5yIF39ZToLGdqJH+RA jZySnkn2ssfGlkjbXH9yNWwpyZjCycmElEMWpZqKvNs+Nk3Y+ZzTuPA2GtQ+/pPo smb72t8+GmU4xdNWOiXhLx1EClLMgXd//M0L7gy+se/5HyPo3wCr3ChiHKllAGyy 1i2AQHKAlkwoxlDsT8yXsQnNrnRfQbpWO2MkxTFtKf3djU92soHJxQzS1ORoq0rd FN5Lsz+8/a5K2RQaIbaTLUNWFNKqFVt6o4wfR1YkM/wcFicn6a6bfwyj2Ag= -----END CERTIFICATE-----Generated at Sat Apr 5 17:47:48 2025 by rpki-client