$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TN3HeA1oXzylU1kQXlX9XXM95M4.roa File: TN3HeA1oXzylU1kQXlX9XXM95M4.roa (raw, json) Hash identifier: OhIGpguu+yDldfRuMtI/THGc13kojtpp2fwvk5L/yMg= Subject key identifier: 4C:DD:C7:78:0D:68:5F:3C:A5:53:59:10:5E:55:FD:5D:73:3D:E4:CE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D0A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TN3HeA1oXzylU1kQXlX9XXM95M4.roa Signing time: Tue 01 Apr 2025 02:11:41 +0000 ROA not before: Tue 01 Apr 2025 02:11:41 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3338 (0xd0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:41 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=4CDDC7780D685F3CA55359105E55FD5D733DE4CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:42:39:0c:21:4c:5c:97:7b:03:40:0f:a8: ff:d8:43:f9:4b:f3:3f:b4:fa:3a:c5:d7:64:19:7a: c9:03:63:10:94:02:3a:3e:d5:16:fb:b2:34:1c:dd: 06:05:c2:41:82:d0:5f:d8:47:06:2f:c9:17:4a:4b: fb:7a:f5:41:78:b4:e8:d9:2f:98:ee:7d:2f:36:b6: c1:ab:8f:6e:b0:f5:27:cc:e6:c9:21:55:da:40:2d: e2:f9:1a:bd:b3:94:a9:ab:68:93:1b:1d:10:d0:b2: 81:80:46:59:13:b7:72:96:ca:a9:6f:ed:b2:08:89: c7:98:f0:50:31:5a:8c:0b:d9:5b:a1:48:24:ec:41: 02:47:9a:e7:c2:22:42:76:c3:13:a3:a1:14:e0:a2: 3d:0a:18:28:0d:58:97:55:97:f6:54:8e:15:bd:20: 75:24:77:1a:70:15:ea:14:5a:1d:52:be:c0:a2:b7: e6:4d:a1:b9:eb:f2:81:50:aa:68:37:f9:bc:f4:ec: e2:50:f4:65:a7:f3:37:94:98:0b:9c:12:a6:84:7c: b4:72:39:10:6a:3e:34:e0:91:e9:3e:f4:6f:ed:7a: 1e:d3:d3:f8:c0:49:48:0b:c3:2f:a9:38:2c:69:f8: ef:2b:8a:bf:98:d6:81:ec:97:a2:80:4d:1e:09:d8: 6e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DD:C7:78:0D:68:5F:3C:A5:53:59:10:5E:55:FD:5D:73:3D:E4:CE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TN3HeA1oXzylU1kQXlX9XXM95M4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.90.0/24 Signature Algorithm: sha256WithRSAEncryption de:00:56:e8:db:20:2b:3b:74:9f:a4:c8:be:e7:7a:6f:fb:42: b8:2b:e0:01:03:f7:17:d8:b7:16:ad:69:fd:b7:8e:19:2e:21: f3:9a:7f:96:3b:8a:d4:6c:85:b6:e1:69:4e:4b:f4:48:17:29: 7c:77:87:8f:a8:af:db:1d:28:3b:10:30:58:cb:7c:c5:81:e7: 99:6c:9f:f8:3f:ed:49:f1:5d:d2:cf:14:a5:77:52:7b:78:09: d2:05:76:26:bb:49:aa:91:bb:4e:93:0b:1b:7c:38:3d:ca:ed: 3e:c3:15:6b:7e:c3:62:f2:4e:c8:37:8f:49:a3:23:7c:07:42: 7e:d5:f7:3a:5b:12:78:e0:e5:c3:cc:e9:5e:a5:58:7f:d9:78: b4:81:90:62:65:10:1f:36:34:02:b8:b9:00:21:c5:db:42:34: 8c:5d:b2:e1:57:f4:c2:cd:cc:39:09:e4:32:91:b2:a5:c1:04: 87:91:22:db:ae:57:9c:fa:e7:72:3d:7b:3a:d8:a3:61:61:90: 2f:07:dd:0b:9e:a5:37:8e:0e:f0:37:56:52:1e:02:cd:80:17: 45:fe:fc:9a:25:5e:e3:e2:c9:1f:49:70:66:56:28:a6:f7:88: da:3c:e4:b2:a5:ca:3a:48:14:ed:25:91:d1:98:a8:10:c4:c8: b2:c0:0c:c3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExNDFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRDRERDNzc4MEQ2ODVG M0NBNTUzNTkxMDVFNTVGRDVENzMzREU0Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCys0I5DCFMXJd7A0APqP/YQ/lL8z+0+jrF12QZeskDYxCUAjo+ 1Rb7sjQc3QYFwkGC0F/YRwYvyRdKS/t69UF4tOjZL5jufS82tsGrj26w9SfM5skh VdpALeL5Gr2zlKmraJMbHRDQsoGARlkTt3KWyqlv7bIIiceY8FAxWowL2VuhSCTs QQJHmufCIkJ2wxOjoRTgoj0KGCgNWJdVl/ZUjhW9IHUkdxpwFeoUWh1SvsCit+ZN obnr8oFQqmg3+bz07OJQ9GWn8zeUmAucEqaEfLRyORBqPjTgkek+9G/teh7T0/jA SUgLwy+pOCxp+O8rir+Y1oHsl6KATR4J2G5pAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTN3HeA1oXzylU1kQXlX9XXM95M4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ROM0hlQTFvWHp5bFUxa1FYbFg5WFhNOTVNNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxalowDQYJKoZIhvcNAQELBQADggEBAN4AVujbICs7dJ+kyL7nem/7Qrgr 4AED9xfYtxataf23jhkuIfOaf5Y7itRshbbhaU5L9EgXKXx3h4+or9sdKDsQMFjL fMWB55lsn/g/7UnxXdLPFKV3Unt4CdIFdia7SaqRu06TCxt8OD3K7T7DFWt+w2Ly Tsg3j0mjI3wHQn7V9zpbEnjg5cPM6V6lWH/ZeLSBkGJlEB82NAK4uQAhxdtCNIxd suFX9MLNzDkJ5DKRsqXBBIeRItuuV5z653I9ezrYo2FhkC8H3QuepTeODvA3VlIe As2AF0X+/JolXuPiyR9JcGZWKKb3iNo85LKlyjpIFO0lkdGYqBDEyLLADMM= -----END CERTIFICATE-----Generated at Sat Apr 5 17:48:22 2025 by rpki-client