$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZIsUFEauZBCwh6XcKwVSkoLyan0.roa File: ZIsUFEauZBCwh6XcKwVSkoLyan0.roa (raw, json) Hash identifier: MKxtbD4wyGjzh9AFY6WAT5ch0sIgGsrdjAsBi5f30qE= Subject key identifier: 64:8B:14:14:46:AE:64:10:B0:87:A5:DC:2B:05:52:92:82:F2:6A:7D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CB2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZIsUFEauZBCwh6XcKwVSkoLyan0.roa Signing time: Tue 01 Apr 2025 02:05:42 +0000 ROA not before: Tue 01 Apr 2025 02:05:42 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3250 (0xcb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:42 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=648B141446AE6410B087A5DC2B05529282F26A7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:90:ff:cc:8d:e5:90:f8:2a:b6:e9:47:a7: 44:b0:17:7a:87:33:47:1b:ed:91:62:db:26:51:69: 9d:ab:e6:4c:7d:62:30:61:c4:7a:5e:c7:de:a6:34: 36:31:45:12:2d:c0:2f:e2:ef:bb:3e:ab:0e:d0:47: e7:9e:28:be:03:b4:28:87:f8:da:a1:4e:4c:7f:ce: ac:38:96:43:8b:18:5c:0b:23:01:85:41:26:81:38: 89:30:41:b4:18:7c:2a:1c:b1:4e:cd:81:02:ea:2d: ef:3b:ac:cc:76:f8:2e:6b:7d:f7:58:66:c3:a0:76: 6b:3e:56:f1:c0:dd:c2:92:9a:55:49:65:27:06:0c: fa:88:98:0d:ce:24:27:96:88:8d:ac:b6:ba:9c:4f: 1d:48:fb:e7:31:84:52:0e:95:3e:c7:5a:78:1a:d6: a7:44:10:f7:ce:5b:76:b3:3a:43:8d:e5:26:2a:a7: 1d:a6:ad:3c:82:1b:fd:14:13:6e:15:68:48:e4:df: db:94:06:c9:24:c9:6d:88:94:a3:0e:3c:e5:40:16: b0:05:85:1a:ff:50:1f:04:95:64:08:74:bc:8b:78: 7a:10:7e:a3:d7:d0:d3:99:ce:d4:29:3b:bb:3f:05: 9d:c1:40:04:a9:38:bd:41:b5:75:81:fd:70:d5:38: e4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8B:14:14:46:AE:64:10:B0:87:A5:DC:2B:05:52:92:82:F2:6A:7D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZIsUFEauZBCwh6XcKwVSkoLyan0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.62.0/23 Signature Algorithm: sha256WithRSAEncryption 98:de:d5:1a:cc:f8:da:29:4f:f9:91:60:04:cf:ac:64:ac:2e: 67:e4:32:88:ed:24:22:26:f8:57:e5:34:5f:26:da:e7:e7:91: 95:96:67:11:e8:39:53:ea:bc:a7:20:65:d8:44:0f:67:1c:ff: 6e:80:e7:9d:9b:ba:bd:16:a7:50:b3:8a:8b:f9:cf:a2:a5:89: 1e:8e:6e:8b:6b:94:bb:15:0f:32:ed:f9:f6:c6:d1:67:a6:4f: e7:a6:d2:80:9d:09:94:28:9f:cf:f1:71:c8:76:48:34:1c:f4: 1b:f3:b4:42:62:e9:02:ec:ec:63:b0:fb:14:be:41:5f:80:03: 19:b5:3d:58:f6:25:00:84:18:c6:a0:cb:c6:db:27:05:7c:24: ef:66:cf:7d:45:5e:78:e8:4d:f2:e4:c7:10:2a:c1:b0:8a:bf: a4:8b:5d:c0:68:ee:32:c5:18:35:25:b5:5a:36:13:20:c1:49: 22:5b:ec:42:3d:20:36:0f:a7:fe:87:68:64:bd:74:dd:a5:78: 9f:ed:8f:91:d1:2e:d6:81:d5:a8:b5:2f:10:de:4e:e8:41:4d: 82:e8:7b:a1:c4:14:c5:4a:0f:ec:a1:75:b1:6c:9c:fe:a6:41: 30:e5:84:72:45:fe:b5:6e:6a:30:65:d6:29:ae:e7:9b:7d:c6: b3:91:4c:17 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY0OEIxNDE0NDZBRTY0 MTBCMDg3QTVEQzJCMDU1MjkyODJGMjZBN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh6ZD/zI3lkPgqtulHp0SwF3qHM0cb7ZFi2yZRaZ2r5kx9YjBh xHpex96mNDYxRRItwC/i77s+qw7QR+eeKL4DtCiH+NqhTkx/zqw4lkOLGFwLIwGF QSaBOIkwQbQYfCocsU7NgQLqLe87rMx2+C5rffdYZsOgdms+VvHA3cKSmlVJZScG DPqImA3OJCeWiI2strqcTx1I++cxhFIOlT7HWnga1qdEEPfOW3azOkON5SYqpx2m rTyCG/0UE24VaEjk39uUBskkyW2IlKMOPOVAFrAFhRr/UB8ElWQIdLyLeHoQfqPX 0NOZztQpO7s/BZ3BQASpOL1BtXWB/XDVOOSxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZIsUFEauZBCwh6XcKwVSkoLyan0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pJc1VGRWF1WkJDd2g2WGNLd1ZTa29MeWFuMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYj4wDQYJKoZIhvcNAQELBQADggEBAJje1RrM+NopT/mRYATPrGSsLmfk MojtJCIm+FflNF8m2ufnkZWWZxHoOVPqvKcgZdhED2cc/26A552bur0Wp1Cziov5 z6KliR6ObotrlLsVDzLt+fbG0WemT+em0oCdCZQon8/xcch2SDQc9BvztEJi6QLs 7GOw+xS+QV+AAxm1PVj2JQCEGMagy8bbJwV8JO9mz31FXnjoTfLkxxAqwbCKv6SL XcBo7jLFGDUltVo2EyDBSSJb7EI9IDYPp/6HaGS9dN2leJ/tj5HRLtaB1ai1LxDe TuhBTYLoe6HEFMVKD+yhdbFsnP6mQTDlhHJF/rVuajBl1imu55t9xrORTBc= -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:34 2025 by rpki-client