$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RDnSMLUW7vfJjBAIzwAKDdoV1qk.roa File: RDnSMLUW7vfJjBAIzwAKDdoV1qk.roa (raw, json) Hash identifier: bLWPmseGPOBcIchL9Puewgsi0IsYSWTlYnIX2x4Y/z0= Subject key identifier: 44:39:D2:30:B5:16:EE:F7:C9:8C:10:08:CF:00:0A:0D:DA:15:D6:A9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B71 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RDnSMLUW7vfJjBAIzwAKDdoV1qk.roa Signing time: Tue 01 Apr 2025 01:36:45 +0000 ROA not before: Tue 01 Apr 2025 01:36:45 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.105.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2929 (0xb71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:36:45 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=4439D230B516EEF7C98C1008CF000A0DDA15D6A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:20:6f:a4:17:95:8c:d6:27:f2:73:ad:34:4c: 28:6d:4d:5a:7c:ad:18:c2:d6:51:61:09:9d:f7:2f: fa:cb:31:08:ef:cb:2a:86:28:d8:61:7d:73:2b:51: 7f:fe:11:af:cf:3d:70:c2:b6:8c:05:58:83:c3:ab: 13:15:1a:a5:f7:79:6a:11:cf:de:7e:fd:c4:99:91: 88:23:33:ca:78:7d:95:bf:58:dd:fb:67:00:df:e0: ad:72:6b:42:d1:e2:16:dd:f0:ec:bf:f9:93:4d:99: ef:ce:d2:21:1f:b8:44:e7:7c:c0:80:d7:59:93:3c: 93:67:a1:bc:8e:54:11:18:1e:f2:dc:74:90:3a:fc: c9:35:00:9e:9f:a9:13:91:ff:eb:c0:7d:e7:fc:c3: 9e:5f:dd:29:5b:55:be:90:0d:77:65:76:73:57:27: b0:50:47:d5:12:22:1a:9e:7c:7c:4f:dc:19:ed:43: 0a:ef:09:42:a8:74:70:71:81:1d:58:0b:46:5d:9e: 52:88:38:06:4b:f4:a3:04:af:ec:1e:4f:5f:e6:73: b2:21:f8:67:c1:bb:bc:3e:45:d9:38:54:66:16:03: bd:9c:80:72:24:e1:73:d8:d2:0b:f2:08:3b:ec:ed: 08:5f:e0:4a:ca:2c:4a:3b:91:00:d4:35:2f:34:1c: e4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:39:D2:30:B5:16:EE:F7:C9:8C:10:08:CF:00:0A:0D:DA:15:D6:A9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RDnSMLUW7vfJjBAIzwAKDdoV1qk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.76.0/23 Signature Algorithm: sha256WithRSAEncryption db:f9:c0:ca:a5:d9:b2:2f:2b:03:a6:af:79:0f:9c:a4:27:fe: 4d:46:c5:78:37:91:50:a9:33:35:71:c2:3a:c3:bc:55:3f:1a: 12:ce:2f:74:9f:d7:ea:7f:52:ef:56:ec:e3:a7:ec:1f:3a:51: 8b:95:91:1a:c3:fa:30:35:bf:48:3e:a3:69:bd:3e:d9:2b:0f: 6b:8f:20:1a:6f:11:f6:de:0a:8a:a1:af:70:f5:d4:e6:b1:69: 63:99:1d:31:29:9f:20:9d:8d:06:24:19:a8:8d:93:aa:5f:83: b9:8a:d2:1a:77:77:68:1e:0f:7a:97:38:5e:49:ae:4b:13:f3: a4:01:f5:61:f7:74:52:c4:60:01:ea:81:67:31:11:ae:6e:aa: 58:8d:d8:91:3b:53:bf:1d:cb:d4:ff:47:d0:c6:54:4f:c4:51: 3f:11:3c:7b:f5:a7:47:1f:c2:1d:8f:c5:b9:af:80:1e:57:9a: 48:48:f9:18:06:e7:06:d0:e7:d2:67:08:a1:b4:87:02:b6:2c: d3:9d:d5:b1:55:c9:5e:7c:b0:d8:2a:49:b0:10:fd:40:94:df: cb:8d:8d:b4:ff:d6:42:94:d5:25:a6:94:a1:0d:a4:ed:6d:7b: bb:c4:f3:25:8b:17:9a:76:2d:f1:13:6b:a9:ec:fe:4a:fd:c0: 77:49:1f:11 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC3EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM2NDVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ0MzlEMjMwQjUxNkVF RjdDOThDMTAwOENGMDAwQTBEREExNUQ2QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnIG+kF5WM1ifyc600TChtTVp8rRjC1lFhCZ33L/rLMQjvyyqG KNhhfXMrUX/+Ea/PPXDCtowFWIPDqxMVGqX3eWoRz95+/cSZkYgjM8p4fZW/WN37 ZwDf4K1ya0LR4hbd8Oy/+ZNNme/O0iEfuETnfMCA11mTPJNnobyOVBEYHvLcdJA6 /Mk1AJ6fqROR/+vAfef8w55f3SlbVb6QDXdldnNXJ7BQR9USIhqefHxP3BntQwrv CUKodHBxgR1YC0ZdnlKIOAZL9KMEr+weT1/mc7Ih+GfBu7w+Rdk4VGYWA72cgHIk 4XPY0gvyCDvs7Qhf4ErKLEo7kQDUNS80HORtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURDnSMLUW7vfJjBAIzwAKDdoV1qkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1JEblNNTFVXN3ZmSmpCQUl6d0FLRGRvVjFxay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaUwwDQYJKoZIhvcNAQELBQADggEBANv5wMql2bIvKwOmr3kPnKQn/k1G xXg3kVCpMzVxwjrDvFU/GhLOL3Sf1+p/Uu9W7OOn7B86UYuVkRrD+jA1v0g+o2m9 PtkrD2uPIBpvEfbeCoqhr3D11OaxaWOZHTEpnyCdjQYkGaiNk6pfg7mK0hp3d2ge D3qXOF5JrksT86QB9WH3dFLEYAHqgWcxEa5uqliN2JE7U78dy9T/R9DGVE/EUT8R PHv1p0cfwh2PxbmvgB5XmkhI+RgG5wbQ59JnCKG0hwK2LNOd1bFVyV58sNgqSbAQ /UCU38uNjbT/1kKU1SWmlKENpO1te7vE8yWLF5p2LfETa6ns/kr9wHdJHxE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:45:49 2025 by rpki-client