$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RBKIEphUYVVRip2TZ_mRxf_zFI.roa File: _RBKIEphUYVVRip2TZ_mRxf_zFI.roa (raw, json) Hash identifier: LPjSsuK6HjBSXjzwvQVgH8hU60XV88dwIyFo7aOAhbU= Subject key identifier: FD:10:4A:20:4A:61:51:85:55:46:2A:76:4D:9F:E6:47:17:FF:CC:52 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E17 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RBKIEphUYVVRip2TZ_mRxf_zFI.roa Signing time: Tue 01 Apr 2025 02:31:32 +0000 ROA not before: Tue 01 Apr 2025 02:31:32 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3607 (0xe17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:31:32 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=FD104A204A61518555462A764D9FE64717FFCC52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3a:6b:8d:fc:9a:72:b2:e3:e6:d4:b2:91:79: f4:91:f3:5b:73:4b:5e:27:2c:7b:36:c6:7e:4b:7a: 9f:76:5e:f0:d1:96:de:31:66:73:f2:25:29:65:13: c6:ef:08:1e:e7:19:c1:62:f5:e1:f5:bf:1a:e6:01: aa:38:38:52:cf:a1:20:bf:0b:ce:e4:bc:72:33:cb: b0:89:c0:53:83:b6:79:93:f1:eb:d1:1e:58:1c:ae: f1:1b:89:44:d9:d3:da:ba:85:54:86:5c:2e:bf:42: f1:07:1f:d4:2d:a2:42:6e:95:8c:bd:e3:69:a1:1c: 21:e0:c4:dd:4c:48:92:b3:3f:80:0a:52:c9:1b:2a: 47:c0:93:97:d0:74:4f:7a:ef:0e:ed:ad:84:e4:78: 3e:2b:11:cf:14:2f:56:4e:74:c3:cf:8b:7a:f5:98: d9:a4:8c:dc:6f:a4:ab:52:6a:6c:37:13:04:f6:7e: 2f:4a:61:c7:2f:f4:05:79:a5:81:49:ee:49:7a:e3: 1f:9a:8b:dc:9c:7d:19:94:71:d0:76:f6:ba:44:2d: 4a:79:df:fb:36:eb:6a:c8:ba:d0:21:73:f9:57:74: 97:d2:f2:0c:25:94:a0:f4:c6:e4:12:b2:3d:75:4d: 1d:95:de:a4:08:79:f2:54:f6:b0:6a:ea:33:55:3d: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:10:4A:20:4A:61:51:85:55:46:2A:76:4D:9F:E6:47:17:FF:CC:52 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RBKIEphUYVVRip2TZ_mRxf_zFI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.186.0/23 Signature Algorithm: sha256WithRSAEncryption 38:e0:07:4f:f6:5d:0f:ea:ff:bf:a7:66:a3:51:8a:c8:ff:7e: 66:89:c9:36:8e:18:59:8d:61:04:a9:1c:87:18:f6:76:3c:87: 96:fb:2a:f9:a9:1a:7d:11:17:a9:8b:b8:ec:98:13:b3:98:65: 80:47:61:c7:b2:c9:fe:d6:69:aa:cd:78:99:50:98:f4:f3:79: 4c:cf:51:d8:e3:2c:36:90:76:b3:51:4a:d2:ac:18:ab:2f:04: c5:fa:a0:74:d0:bb:bf:33:12:f7:eb:d2:35:4c:87:85:98:db: 92:07:12:83:2d:e8:b3:f6:8e:e7:2f:c5:c6:c9:74:08:a8:05: 57:93:37:0b:4a:ea:f8:2b:29:a9:41:c0:b2:e9:75:d6:4d:fd: eb:be:76:18:28:f4:b3:88:24:55:f9:73:14:f9:54:8a:74:78: 5c:31:1a:06:80:9b:6d:e3:8c:56:d4:1c:64:10:02:09:f6:e2: f8:99:11:4a:fe:d2:5b:6d:14:62:7c:53:0d:b8:0f:87:71:ff: 89:d9:b7:b7:76:87:36:bd:5a:1e:aa:5c:a2:3e:b4:d7:94:83: dd:23:10:62:36:22:59:6b:37:aa:72:23:3a:84:bb:77:a1:83: 93:b8:e9:cc:fd:41:fa:31:1e:9c:92:74:d7:c5:cb:76:b5:71: 2a:47:d2:3b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMxMzJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEZEMTA0QTIwNEE2MTUx ODU1NTQ2MkE3NjREOUZFNjQ3MTdGRkNDNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQOmuN/JpysuPm1LKRefSR81tzS14nLHs2xn5Lep92XvDRlt4x ZnPyJSllE8bvCB7nGcFi9eH1vxrmAao4OFLPoSC/C87kvHIzy7CJwFODtnmT8evR HlgcrvEbiUTZ09q6hVSGXC6/QvEHH9QtokJulYy942mhHCHgxN1MSJKzP4AKUskb KkfAk5fQdE967w7trYTkeD4rEc8UL1ZOdMPPi3r1mNmkjNxvpKtSamw3EwT2fi9K Yccv9AV5pYFJ7kl64x+ai9ycfRmUcdB29rpELUp53/s262rIutAhc/lXdJfS8gwl lKD0xuQSsj11TR2V3qQIefJU9rBq6jNVPfeBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/RBKIEphUYVVRip2TZ/mRxf/zFIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L19SQktJRXBoVVlWVlJpcDJUWl9tUnhmX3pGSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExarowDQYJKoZIhvcNAQELBQADggEBADjgB0/2XQ/q/7+nZqNRisj/fmaJ yTaOGFmNYQSpHIcY9nY8h5b7KvmpGn0RF6mLuOyYE7OYZYBHYceyyf7WaarNeJlQ mPTzeUzPUdjjLDaQdrNRStKsGKsvBMX6oHTQu78zEvfr0jVMh4WY25IHEoMt6LP2 jucvxcbJdAioBVeTNwtK6vgrKalBwLLpddZN/eu+dhgo9LOIJFX5cxT5VIp0eFwx GgaAm23jjFbUHGQQAgn24viZEUr+0lttFGJ8Uw24D4dx/4nZt7d2hza9Wh6qXKI+ tNeUg90jEGI2IllrN6pyIzqEu3ehg5O46cz9QfoxHpySdNfFy3a1cSpH0js= -----END CERTIFICATE-----Generated at Sat Apr 5 17:27:25 2025 by rpki-client