$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PP199k7fblfcKGfEcyi5EmQ9Zug.roa File: PP199k7fblfcKGfEcyi5EmQ9Zug.roa (raw, json) Hash identifier: BcPYR7XMPtzddc6x5KWBRyaCx9w1K+CRmcE+rxeqw7I= Subject key identifier: 3C:FD:7D:F6:4E:DF:6E:57:DC:28:67:C4:73:28:B9:12:64:3D:66:E8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BFA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PP199k7fblfcKGfEcyi5EmQ9Zug.roa Signing time: Tue 01 Apr 2025 01:51:27 +0000 ROA not before: Tue 01 Apr 2025 01:51:27 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3066 (0xbfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:27 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=3CFD7DF64EDF6E57DC2867C47328B912643D66E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:22:54:29:93:9e:1f:d4:d6:7a:76:c4:90: fd:f1:fb:eb:6a:03:d0:93:10:52:64:eb:18:db:f7: 02:74:8b:ed:08:81:19:e4:00:cc:19:3a:66:70:44: 97:c2:e5:2a:95:cc:fb:36:f8:39:61:63:59:58:12: 93:64:4b:f5:5d:f3:16:f0:a0:67:33:d0:33:ad:fe: 36:84:19:09:0a:24:6e:ff:8d:b6:66:bd:a2:57:aa: 2a:ca:8d:19:c4:e7:51:ab:8a:4f:bd:32:1d:92:4e: 00:9d:43:0d:69:3b:37:ac:f0:46:25:62:d5:2e:74: 8c:1a:56:51:5f:02:9a:88:78:bb:8c:0c:2d:46:f5: 92:6f:8a:08:3f:3b:aa:0f:23:68:35:01:da:81:45: 46:72:2d:d3:c2:dc:71:cf:cc:a5:90:d0:18:4f:de: 25:30:af:5d:29:b9:3c:b4:6e:08:c0:61:8f:16:a8: f5:35:8f:d7:c3:d6:8e:77:86:9a:c1:88:ca:61:8a: 1d:24:ce:10:f5:23:8d:bf:ac:e1:14:5e:7a:be:5e: aa:e4:4e:21:8f:13:e3:53:0c:73:10:b4:8d:ae:11: 31:84:e9:a7:be:bc:67:c3:cb:78:99:c8:cf:19:cb: 45:6d:e6:bb:62:93:75:ab:f5:17:65:9d:58:82:23: 80:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FD:7D:F6:4E:DF:6E:57:DC:28:67:C4:73:28:B9:12:64:3D:66:E8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PP199k7fblfcKGfEcyi5EmQ9Zug.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.33.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:ea:e0:c2:ee:20:15:a9:aa:bc:3a:fa:e9:f1:4e:6f:c7:63: 0b:67:6c:5a:03:7f:70:bb:09:cd:e9:66:4f:8e:0f:67:30:f2: bd:74:41:46:cb:52:6a:b2:d6:9a:40:5e:67:9f:65:e5:eb:b5: 97:d8:53:5d:27:a8:a6:37:42:e3:10:75:3a:1d:5f:2d:4a:1d: 5c:7c:96:a4:cd:34:bc:85:ae:b3:d9:8b:0e:a5:76:38:3c:84: 86:9a:a8:5f:5a:b8:cc:a1:32:14:53:2a:da:fe:32:ca:d8:a3: b0:83:f0:bf:8e:ae:a3:bc:de:15:04:8f:ef:7b:e3:6e:2f:d3: 0e:c5:61:e5:aa:a9:f1:e3:52:20:50:c8:12:51:2e:59:e3:15: 51:eb:80:a0:f0:30:d6:ee:00:65:eb:ca:4f:09:ff:91:41:ce: a9:a6:b8:a7:0d:be:f7:7e:fc:75:eb:e9:87:a0:83:c3:dc:0b: 96:ca:c6:49:44:47:46:33:29:23:a8:9d:10:ed:08:76:1d:b7: 30:bf:f6:8a:b6:8b:09:8e:0a:95:c8:e4:25:06:0d:fd:51:60: a8:8d:38:a7:be:6b:01:ee:8a:ef:a4:66:c6:5c:63:d3:90:54: 98:eb:e6:28:46:c5:7c:d0:a1:81:d6:79:f0:f8:a3:2b:94:99: a5:14:00:23 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC/owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMjdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNDRkQ3REY2NEVERjZF NTdEQzI4NjdDNDczMjhCOTEyNjQzRDY2RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEMCJUKZOeH9TWenbEkP3x++tqA9CTEFJk6xjb9wJ0i+0IgRnk AMwZOmZwRJfC5SqVzPs2+DlhY1lYEpNkS/Vd8xbwoGcz0DOt/jaEGQkKJG7/jbZm vaJXqirKjRnE51Grik+9Mh2STgCdQw1pOzes8EYlYtUudIwaVlFfApqIeLuMDC1G 9ZJvigg/O6oPI2g1AdqBRUZyLdPC3HHPzKWQ0BhP3iUwr10puTy0bgjAYY8WqPU1 j9fD1o53hprBiMphih0kzhD1I42/rOEUXnq+XqrkTiGPE+NTDHMQtI2uETGE6ae+ vGfDy3iZyM8Zy0Vt5rtik3Wr9RdlnViCI4AZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPP199k7fblfcKGfEcyi5EmQ9ZugwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BQMTk5azdmYmxmY0tHZkVjeWk1RW1ROVp1Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaCEwDQYJKoZIhvcNAQELBQADggEBAIzq4MLuIBWpqrw6+unxTm/HYwtn bFoDf3C7Cc3pZk+OD2cw8r10QUbLUmqy1ppAXmefZeXrtZfYU10nqKY3QuMQdTod Xy1KHVx8lqTNNLyFrrPZiw6ldjg8hIaaqF9auMyhMhRTKtr+MsrYo7CD8L+OrqO8 3hUEj+97424v0w7FYeWqqfHjUiBQyBJRLlnjFVHrgKDwMNbuAGXryk8J/5FBzqmm uKcNvvd+/HXr6Yegg8PcC5bKxklER0YzKSOonRDtCHYdtzC/9oq2iwmOCpXI5CUG Df1RYKiNOKe+awHuiu+kZsZcY9OQVJjr5ihGxXzQoYHWefD4oyuUmaUUACM= -----END CERTIFICATE-----Generated at Sat Apr 5 17:41:57 2025 by rpki-client