$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TKv9i5wD-tAHsBIRZ6_UUNK7FRY.roa File: TKv9i5wD-tAHsBIRZ6_UUNK7FRY.roa (raw, json) Hash identifier: u9vc42Wwyxc60PPio0X98BKTxX5ASGJQ3sGhk2xD6go= Subject key identifier: 4C:AB:FD:8B:9C:03:FA:D0:07:B0:12:11:67:AF:D4:50:D2:BB:15:16 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D56 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TKv9i5wD-tAHsBIRZ6_UUNK7FRY.roa Signing time: Tue 01 Apr 2025 02:17:16 +0000 ROA not before: Tue 01 Apr 2025 02:17:16 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3414 (0xd56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:17:16 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=4CABFD8B9C03FAD007B0121167AFD450D2BB1516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:fa:c8:6d:06:36:9e:74:cd:9f:e8:3e:9f: 56:bd:27:9a:d5:af:46:74:8e:71:a4:51:65:98:12: 02:1a:5f:50:b1:df:63:c3:a9:a8:f3:3c:7a:8e:95: bf:30:5d:dc:53:80:1d:8f:e8:80:f2:04:58:f0:28: 47:bc:1f:b2:50:0e:c3:40:b8:9d:b1:f2:44:61:3b: 62:9b:a2:4b:8a:b2:54:b0:c3:94:25:e7:b9:ea:90: c5:4f:98:2e:73:41:14:8b:2f:61:87:49:1f:8c:4e: 3d:10:3c:c8:b8:46:26:9c:50:b0:44:4c:15:d1:3a: 7e:80:f6:65:10:2c:e9:82:96:a1:f3:2d:28:1c:28: ec:36:26:06:35:3b:25:b3:10:b1:0c:3e:45:35:fa: 00:d9:c7:79:a4:88:0e:86:5a:02:82:b5:ef:80:09: eb:63:81:19:b3:74:a0:19:9b:4f:cc:43:3a:0b:2b: 79:61:88:52:1b:52:19:74:94:2c:7e:49:96:d4:ae: 11:21:00:b3:37:07:92:9d:cd:2e:e2:45:6b:ff:6a: 3d:6a:ed:8c:6c:84:f8:22:0e:d6:c8:51:07:a9:66: f7:10:75:df:06:95:f0:bd:c8:eb:87:ec:0f:2b:d9: cb:c9:a4:c1:63:bb:9a:4e:bf:29:b4:53:14:fa:77: ea:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AB:FD:8B:9C:03:FA:D0:07:B0:12:11:67:AF:D4:50:D2:BB:15:16 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TKv9i5wD-tAHsBIRZ6_UUNK7FRY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.35.0/24 Signature Algorithm: sha256WithRSAEncryption a7:0a:d3:ae:43:ad:ea:af:79:70:68:a9:d5:f0:3b:40:fb:18: 56:84:d8:db:a7:b9:89:d9:49:eb:b5:eb:47:f6:25:c8:99:d4: 7b:e9:fd:df:4d:11:7a:73:78:c8:71:df:51:4e:67:ea:58:82: 0a:f0:05:2b:10:ac:46:b0:20:96:29:90:24:80:36:02:68:bc: 63:43:34:d6:10:7b:cc:cd:06:34:a5:1d:f4:ad:74:f5:b8:76: ff:d7:9b:47:4e:be:3c:13:c7:05:9d:55:38:9b:b3:81:09:7b: 08:c0:61:f1:7d:6c:77:fe:49:6c:d9:44:0c:1f:dd:70:24:58: 3d:ec:7b:92:ae:65:4b:b7:b6:ac:51:86:69:95:61:8d:f5:dc: 50:17:bd:8e:21:d6:61:d9:21:42:5b:f2:4c:30:fe:77:05:55: fb:8d:9a:51:e3:8e:c6:53:ff:21:95:91:24:4b:40:3a:a6:d3: cd:8a:67:fa:be:1d:b3:02:27:31:f9:ec:51:65:4d:4b:43:3a: 0f:f3:b4:05:02:4c:27:02:b6:8d:0c:4f:27:ec:ca:e6:c7:cb: 45:a6:13:82:02:cb:9f:44:b4:12:20:ab:ab:df:06:01:b1:73: c0:1a:98:61:e9:e8:4e:e1:39:b5:4a:06:0a:68:0a:19:4a:53: 2f:0c:09:4d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE3MTZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRDQUJGRDhCOUMwM0ZB RDAwN0IwMTIxMTY3QUZENDUwRDJCQjE1MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0j/rIbQY2nnTNn+g+n1a9J5rVr0Z0jnGkUWWYEgIaX1Cx32PD qajzPHqOlb8wXdxTgB2P6IDyBFjwKEe8H7JQDsNAuJ2x8kRhO2KbokuKslSww5Ql 57nqkMVPmC5zQRSLL2GHSR+MTj0QPMi4RiacULBETBXROn6A9mUQLOmClqHzLSgc KOw2JgY1OyWzELEMPkU1+gDZx3mkiA6GWgKCte+ACetjgRmzdKAZm0/MQzoLK3lh iFIbUhl0lCx+SZbUrhEhALM3B5KdzS7iRWv/aj1q7YxshPgiDtbIUQepZvcQdd8G lfC9yOuH7A8r2cvJpMFju5pOvym0UxT6d+r5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTKv9i5wD+tAHsBIRZ6/UUNK7FRYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RLdjlpNXdELXRBSHNCSVJaNl9VVU5LN0ZSWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaCMwDQYJKoZIhvcNAQELBQADggEBAKcK065DreqveXBoqdXwO0D7GFaE 2NunuYnZSeu160f2JciZ1Hvp/d9NEXpzeMhx31FOZ+pYggrwBSsQrEawIJYpkCSA NgJovGNDNNYQe8zNBjSlHfStdPW4dv/Xm0dOvjwTxwWdVTibs4EJewjAYfF9bHf+ SWzZRAwf3XAkWD3se5KuZUu3tqxRhmmVYY313FAXvY4h1mHZIUJb8kww/ncFVfuN mlHjjsZT/yGVkSRLQDqm082KZ/q+HbMCJzH57FFlTUtDOg/ztAUCTCcCto0MTyfs yubHy0WmE4ICy59EtBIgq6vfBgGxc8AamGHp6E7hObVKBgpoChlKUy8MCU0= -----END CERTIFICATE-----Generated at Sat Apr 5 17:41:53 2025 by rpki-client