$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/P7oVjpm5IlJkdaG-ldr9WoYcOmc.roa File: P7oVjpm5IlJkdaG-ldr9WoYcOmc.roa (raw, json) Hash identifier: GpsaJMgT4qVZO4iWHveKtOl/OVgKlYT4EcgU4b+KzBU= Subject key identifier: 3F:BA:15:8E:99:B9:22:52:64:75:A1:BE:95:DA:FD:5A:86:1C:3A:67 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BEA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/P7oVjpm5IlJkdaG-ldr9WoYcOmc.roa Signing time: Tue 01 Apr 2025 01:47:43 +0000 ROA not before: Tue 01 Apr 2025 01:47:43 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3050 (0xbea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:47:43 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=3FBA158E99B922526475A1BE95DAFD5A861C3A67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ce:a0:24:f7:77:37:73:e6:86:60:46:9c:4e: 45:6a:f3:05:ce:69:ab:4b:87:8e:3f:05:e0:3a:d1: 6c:ca:9a:0d:4d:34:dc:a8:ac:12:e5:06:09:a6:42: a3:35:05:68:08:da:c1:00:ea:1a:fc:3a:17:ff:5a: ed:7d:84:70:8e:12:86:1e:c7:27:1f:7a:6c:d6:b5: 36:e2:e2:83:5b:55:29:4b:3d:07:d3:de:2c:06:26: f6:96:dc:40:7e:2e:ef:6c:5b:60:51:a2:0e:c9:93: 85:83:08:24:67:db:23:a8:55:6f:98:17:7f:a9:72: e5:e0:83:b9:53:ce:d2:d9:0b:35:ee:76:e3:94:89: 82:4c:bc:26:18:cb:02:a6:b2:3f:74:e7:15:24:3f: dc:87:b4:f7:a9:38:61:8b:b8:e1:44:60:85:15:25: 4c:66:a9:c2:97:d5:eb:64:0d:0a:18:04:e8:5f:07: 65:21:62:dc:f9:ca:69:44:42:74:c6:c7:e5:aa:42: 63:9c:d7:ac:77:02:41:1c:10:2f:b4:df:13:fc:c3: bf:9e:f1:d9:be:a4:e0:68:a9:36:d1:ff:41:be:bf: 04:25:ed:dd:3f:be:f0:a9:28:29:3c:83:20:0e:bd: 60:70:10:e8:54:fb:be:d9:6c:68:66:28:30:1a:58: 11:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BA:15:8E:99:B9:22:52:64:75:A1:BE:95:DA:FD:5A:86:1C:3A:67 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/P7oVjpm5IlJkdaG-ldr9WoYcOmc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.254.0/23 Signature Algorithm: sha256WithRSAEncryption da:1e:0f:c0:9c:6d:d4:6b:0f:f5:2b:48:63:52:e4:9b:4a:1f: 2b:4f:7f:87:29:15:ea:e4:f8:fe:fd:f0:f2:67:55:6f:7f:4b: 96:b7:f8:5a:a2:45:77:b6:f8:ca:0e:dd:02:24:61:5a:f7:a6: db:b7:e2:33:00:b4:95:b7:37:fe:91:c4:d7:dc:44:0a:e6:9e: cc:e8:37:ed:d0:80:9d:98:ba:e4:64:e3:dd:72:39:9c:3e:8a: c2:07:b5:b4:29:af:8e:b7:cb:05:bf:cf:f9:ea:b5:06:6b:c4: 20:17:30:08:59:30:e1:2a:1b:0d:07:6d:73:db:58:40:c8:60: 82:3b:6d:89:35:6b:76:84:3c:b1:2b:45:26:f1:30:7e:da:6d: 3e:a4:f9:54:f2:bb:85:b1:5c:f0:f2:25:65:8e:f7:21:ff:d8: bc:a4:81:9c:d4:14:05:3a:0f:9d:1b:84:af:4e:d6:c0:b1:46: ed:ef:4e:7e:b9:67:85:7f:95:60:bb:48:37:ca:78:34:38:58: a0:e1:35:be:48:70:3f:e9:31:09:19:3b:df:8e:d3:eb:6c:16: 23:48:b1:fc:b6:9e:ed:01:6b:61:a3:f0:0d:fc:ac:e3:24:52: 35:ec:d2:ae:7b:2f:3f:f3:ec:40:8a:3b:b4:1d:25:cd:39:e8: e7:87:d0:4f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC+owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQ3NDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNGQkExNThFOTlCOTIy NTI2NDc1QTFCRTk1REFGRDVBODYxQzNBNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrzqAk93c3c+aGYEacTkVq8wXOaatLh44/BeA60WzKmg1NNNyo rBLlBgmmQqM1BWgI2sEA6hr8Ohf/Wu19hHCOEoYexycfemzWtTbi4oNbVSlLPQfT 3iwGJvaW3EB+Lu9sW2BRog7Jk4WDCCRn2yOoVW+YF3+pcuXgg7lTztLZCzXuduOU iYJMvCYYywKmsj905xUkP9yHtPepOGGLuOFEYIUVJUxmqcKX1etkDQoYBOhfB2Uh Ytz5ymlEQnTGx+WqQmOc16x3AkEcEC+03xP8w7+e8dm+pOBoqTbR/0G+vwQl7d0/ vvCpKCk8gyAOvWBwEOhU+77ZbGhmKDAaWBEJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUP7oVjpm5IlJkdaG+ldr9WoYcOmcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1A3b1ZqcG01SWxKa2RhRy1sZHI5V29ZY09tYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYP4wDQYJKoZIhvcNAQELBQADggEBANoeD8CcbdRrD/UrSGNS5JtKHytP f4cpFerk+P798PJnVW9/S5a3+FqiRXe2+MoO3QIkYVr3ptu34jMAtJW3N/6RxNfc RArmnszoN+3QgJ2YuuRk491yOZw+isIHtbQpr463ywW/z/nqtQZrxCAXMAhZMOEq Gw0HbXPbWEDIYII7bYk1a3aEPLErRSbxMH7abT6k+VTyu4WxXPDyJWWO9yH/2Lyk gZzUFAU6D50bhK9O1sCxRu3vTn65Z4V/lWC7SDfKeDQ4WKDhNb5IcD/pMQkZO9+O 0+tsFiNIsfy2nu0Ba2Gj8A38rOMkUjXs0q57Lz/z7ECKO7QdJc056OeH0E8= -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:29 2025 by rpki-client