$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WkYxennkU8Pv5mB0OKRan-CAht0.roa File: WkYxennkU8Pv5mB0OKRan-CAht0.roa (raw, json) Hash identifier: TW/7fI4BqOTU5TdGgtYd9We+18ob/Cubg/Nt/x77NAM= Subject key identifier: 5A:46:31:7A:79:E4:53:C3:EF:E6:60:74:38:A4:5A:9F:E0:80:86:DD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BF9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WkYxennkU8Pv5mB0OKRan-CAht0.roa Signing time: Tue 01 Apr 2025 01:51:27 +0000 ROA not before: Tue 01 Apr 2025 01:51:27 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.97.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3065 (0xbf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:27 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=5A46317A79E453C3EFE6607438A45A9FE08086DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:de:e7:66:f0:1c:e0:27:ac:d1:5f:9a:ee: 8b:6d:f0:2f:54:26:c2:15:41:5b:4e:b2:cd:a8:2f: 04:9d:5a:0b:60:97:bf:36:96:ab:1a:d0:ad:92:75: 1e:ed:79:6b:f7:35:2d:27:a3:69:9a:87:ef:82:6e: cf:fa:94:04:93:c6:51:fd:73:82:77:b0:7e:e9:cd: 1e:f7:a6:b5:25:bd:a4:2a:3a:ff:a7:9d:53:06:2f: c0:69:78:ce:54:57:0d:02:42:84:e1:34:db:9a:0a: ee:8d:b6:47:66:8c:66:11:bf:c0:77:52:22:3e:af: 36:9f:da:bb:a2:a0:15:ea:00:9d:c0:fd:3b:d3:1f: 2f:8f:ef:e9:a2:56:42:90:9c:d8:03:4d:df:9a:4f: 96:a3:6f:a7:83:7d:cb:10:8c:d0:59:3e:a0:83:ba: 3e:a1:7d:6c:74:0c:9c:9c:f4:cd:ee:85:ab:5f:c3: b6:24:95:51:b9:49:0c:c2:57:91:50:61:b9:02:f4: 0e:46:1f:13:85:87:68:00:e1:07:c1:ea:a6:4c:86: 15:24:7f:a4:76:67:66:d5:48:ba:3c:a9:7c:8e:ab: db:85:4c:0c:02:26:92:e9:71:42:a5:ce:d4:19:6e: f9:99:64:e8:82:a8:90:33:41:66:dd:ca:95:f3:ab: 0c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:31:7A:79:E4:53:C3:EF:E6:60:74:38:A4:5A:9F:E0:80:86:DD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WkYxennkU8Pv5mB0OKRan-CAht0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.97.30.0/24 Signature Algorithm: sha256WithRSAEncryption 40:3a:56:5e:c2:4b:90:96:c0:18:0b:19:15:a0:c8:89:5d:46: 94:08:d4:f7:54:f8:a5:5e:c3:45:94:30:7d:b7:e0:94:6f:0b: 00:4e:63:71:1e:e0:43:6c:48:f5:f9:b2:e4:d3:25:97:ce:fc: a7:de:03:90:96:71:29:e6:ba:22:d7:73:34:e1:61:83:d2:17: f5:a0:27:14:ad:94:e2:7d:c0:bc:62:69:65:56:b2:1b:a9:c9: 6c:1b:a2:1d:94:19:49:f3:91:1e:2b:bd:c0:eb:b6:54:03:12: fc:b6:8b:01:ba:ac:c2:b9:71:40:8d:ad:b6:a6:c6:24:20:f3: 82:67:de:17:a3:ef:87:41:e6:40:34:a4:98:7b:49:38:66:8b: 35:a8:45:58:b1:86:ff:8e:e7:3c:cf:cf:25:c9:ea:3b:f3:61: 3d:f5:c0:f3:2c:c3:6b:e6:ac:39:3c:4d:39:86:f1:c9:5b:79: 65:e6:81:97:2f:6d:d6:ca:51:f1:fa:ad:ab:75:54:8c:e2:dd: b9:b5:e1:41:68:3e:61:97:43:55:f7:99:78:db:10:a0:8c:59: 5c:ec:da:0b:e0:38:98:5d:4d:d5:0d:19:f1:c7:f2:1e:76:16: d4:b2:8c:9c:ce:6f:d6:27:6e:52:c6:92:3b:4b:50:91:83:14: 05:f1:52:9b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC/kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMjdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVBNDYzMTdBNzlFNDUz QzNFRkU2NjA3NDM4QTQ1QTlGRTA4MDg2REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcT97nZvAc4Ces0V+a7ott8C9UJsIVQVtOss2oLwSdWgtgl782 lqsa0K2SdR7teWv3NS0no2mah++Cbs/6lASTxlH9c4J3sH7pzR73prUlvaQqOv+n nVMGL8BpeM5UVw0CQoThNNuaCu6NtkdmjGYRv8B3UiI+rzaf2ruioBXqAJ3A/TvT Hy+P7+miVkKQnNgDTd+aT5ajb6eDfcsQjNBZPqCDuj6hfWx0DJyc9M3uhatfw7Yk lVG5SQzCV5FQYbkC9A5GHxOFh2gA4QfB6qZMhhUkf6R2Z2bVSLo8qXyOq9uFTAwC JpLpcUKlztQZbvmZZOiCqJAzQWbdypXzqwz5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWkYxennkU8Pv5mB0OKRan+CAht0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1drWXhlbm5rVThQdjVtQjBPS1Jhbi1DQWh0MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYR4wDQYJKoZIhvcNAQELBQADggEBAEA6Vl7CS5CWwBgLGRWgyIldRpQI 1PdU+KVew0WUMH234JRvCwBOY3Ee4ENsSPX5suTTJZfO/KfeA5CWcSnmuiLXczTh YYPSF/WgJxStlOJ9wLxiaWVWshupyWwboh2UGUnzkR4rvcDrtlQDEvy2iwG6rMK5 cUCNrbamxiQg84Jn3hej74dB5kA0pJh7SThmizWoRVixhv+O5zzPzyXJ6jvzYT31 wPMsw2vmrDk8TTmG8clbeWXmgZcvbdbKUfH6rat1VIzi3bm14UFoPmGXQ1X3mXjb EKCMWVzs2gvgOJhdTdUNGfHH8h52FtSyjJzOb9YnblLGkjtLUJGDFAXxUps= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:18 2025 by rpki-client