$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RxcRq1XGiPYTo09SVvH65z8wjXY.roa File: RxcRq1XGiPYTo09SVvH65z8wjXY.roa (raw, json) Hash identifier: rs3A6sJafHCBR9uetlqaAP6xZ7T1laeKzKdU55kCpJ4= Subject key identifier: 47:17:11:AB:55:C6:88:F6:13:A3:4F:52:56:F1:FA:E7:3F:30:8D:76 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D7D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RxcRq1XGiPYTo09SVvH65z8wjXY.roa Signing time: Tue 01 Apr 2025 02:21:26 +0000 ROA not before: Tue 01 Apr 2025 02:21:26 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3453 (0xd7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:21:26 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=471711AB55C688F613A34F5256F1FAE73F308D76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:77:b3:12:ad:4b:56:b4:15:76:78:a4:73: 08:4c:07:46:69:ea:4a:b1:71:cf:a0:30:b2:c5:7b: 68:5b:aa:81:c8:e0:d0:12:86:81:e9:9d:9d:a8:ad: a3:08:cd:3e:55:c1:72:da:e7:9e:f6:7e:7c:a4:e0: 34:3f:28:aa:e1:79:a7:e4:7d:b0:90:5c:37:48:dd: 60:1c:33:72:34:b8:f7:5e:a0:0e:b5:a3:9c:41:13: a7:ca:c4:c7:24:e9:a4:4d:67:59:3e:9f:6c:80:e3: eb:22:84:14:19:cf:57:94:5b:36:cf:6c:39:50:55: bf:44:19:79:44:54:93:a0:15:6b:5b:5f:a6:71:a0: e5:35:98:f5:6c:e9:59:e2:f3:60:d9:1d:06:71:ec: 6c:0b:84:ba:ba:7e:2c:d3:25:ce:db:8e:6b:d6:20: 26:55:1d:0c:00:f7:94:7a:88:fc:c6:ac:ad:f5:ed: 60:ea:02:f5:00:85:94:11:95:75:af:9d:8e:64:a6: 8b:6e:dd:71:bc:69:1f:81:00:15:63:7e:b3:22:63: 02:0a:ed:43:7f:e6:7c:d8:11:ec:56:d9:8f:25:9c: 3b:a0:ce:fe:ce:a4:9c:6a:28:6a:8f:9d:d4:55:2d: ce:59:b3:6e:68:b7:14:bc:bd:59:be:df:93:43:c7: d4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:17:11:AB:55:C6:88:F6:13:A3:4F:52:56:F1:FA:E7:3F:30:8D:76 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RxcRq1XGiPYTo09SVvH65z8wjXY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.102.0/23 Signature Algorithm: sha256WithRSAEncryption 33:44:04:45:84:33:f3:1a:d9:0f:9c:63:a2:7e:af:b6:9c:75: ef:1c:24:6d:39:6f:ee:c9:09:24:5f:ae:d1:51:17:1d:a8:b2: 72:55:ef:3b:ba:dc:46:4f:ef:ea:4b:77:c9:78:25:e6:c6:84: 07:3b:ff:cd:a2:f0:32:6a:e8:34:34:b9:6d:27:5e:78:94:2c: a6:e8:ed:5a:af:a9:b2:b8:5b:c1:ed:fe:59:60:5d:b9:ab:22: 54:09:8f:b9:2f:3c:50:f5:37:5e:da:31:18:3f:4a:98:a4:2b: 2c:90:24:63:6e:7f:ce:a0:8a:78:22:b4:6e:d7:7f:c8:49:f1: 01:70:c4:4e:bb:7b:06:a2:a2:32:40:0b:10:04:45:b8:cd:e5: 81:f5:4a:0f:19:c1:72:9e:c4:b7:dd:75:79:c0:8d:b4:2b:aa: 4d:50:bd:d1:af:f5:99:51:ff:90:0b:52:7b:59:43:89:83:36: 32:86:12:25:61:06:9c:e8:c2:e0:f5:5e:23:a3:64:b5:86:8f: 1a:36:e1:98:36:af:41:8c:c4:1c:fa:db:21:b2:22:2a:c6:09: b0:a5:0c:f0:a6:01:f0:b5:e9:a5:79:60:24:76:a8:50:2a:08: 53:fc:ad:9c:0d:b9:98:b6:53:2c:db:04:9c:92:d9:2d:75:72: 5f:3d:56:f7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjIxMjZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ3MTcxMUFCNTVDNjg4 RjYxM0EzNEY1MjU2RjFGQUU3M0YzMDhENzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8VHezEq1LVrQVdnikcwhMB0Zp6kqxcc+gMLLFe2hbqoHI4NAS hoHpnZ2oraMIzT5VwXLa5572fnyk4DQ/KKrheafkfbCQXDdI3WAcM3I0uPdeoA61 o5xBE6fKxMck6aRNZ1k+n2yA4+sihBQZz1eUWzbPbDlQVb9EGXlEVJOgFWtbX6Zx oOU1mPVs6Vni82DZHQZx7GwLhLq6fizTJc7bjmvWICZVHQwA95R6iPzGrK317WDq AvUAhZQRlXWvnY5kpotu3XG8aR+BABVjfrMiYwIK7UN/5nzYEexW2Y8lnDugzv7O pJxqKGqPndRVLc5Zs25otxS8vVm+35NDx9QvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURxcRq1XGiPYTo09SVvH65z8wjXYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1J4Y1JxMVhHaVBZVG8wOVNWdkg2NXo4d2pYWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExamYwDQYJKoZIhvcNAQELBQADggEBADNEBEWEM/Ma2Q+cY6J+r7acde8c JG05b+7JCSRfrtFRFx2osnJV7zu63EZP7+pLd8l4JebGhAc7/82i8DJq6DQ0uW0n XniULKbo7VqvqbK4W8Ht/llgXbmrIlQJj7kvPFD1N17aMRg/SpikKyyQJGNuf86g ingitG7Xf8hJ8QFwxE67ewaiojJACxAERbjN5YH1Sg8ZwXKexLfddXnAjbQrqk1Q vdGv9ZlR/5ALUntZQ4mDNjKGEiVhBpzowuD1XiOjZLWGjxo24Zg2r0GMxBz62yGy IirGCbClDPCmAfC16aV5YCR2qFAqCFP8rZwNuZi2UyzbBJyS2S11cl89Vvc= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:45 2025 by rpki-client