$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_ZCG2vCOu1tgVa7dYwu8TJvf4zE.roa File: _ZCG2vCOu1tgVa7dYwu8TJvf4zE.roa (raw, json) Hash identifier: 6lYIihA99UzoO8CRIdNlPxvFQ3FGDl0jkcbbooOVWjE= Subject key identifier: FD:90:86:DA:F0:8E:BB:5B:60:55:AE:DD:63:0B:BC:4C:9B:DF:E3:31 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CE4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_ZCG2vCOu1tgVa7dYwu8TJvf4zE.roa Signing time: Tue 01 Apr 2025 02:09:20 +0000 ROA not before: Tue 01 Apr 2025 02:09:20 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3300 (0xce4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:20 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=FD9086DAF08EBB5B6055AEDD630BBC4C9BDFE331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:90:63:4d:03:50:a1:1a:55:32:05:02:92: db:73:28:e0:7c:aa:62:c3:40:bc:ed:a8:67:17:58: 93:c2:ba:8b:c8:c4:96:b1:06:44:7c:4d:1f:7a:8c: 48:99:64:a4:00:dc:4c:8c:41:6a:22:07:04:d1:c2: 21:cc:15:d7:e1:d4:5a:cb:7e:73:9b:47:1b:2e:3f: bc:fe:0a:81:d9:9a:03:a7:1f:68:54:2f:1b:e4:a1: e1:47:1f:ae:dc:8c:d4:20:0e:ce:36:e3:84:34:24: 1e:d7:8d:6c:0c:79:9d:8a:0b:a5:39:9e:60:3d:50: 28:79:9f:63:56:69:f0:98:14:40:73:08:e8:d1:36: c9:01:8b:38:f0:93:14:53:d0:4f:3f:96:43:09:55: 49:dd:1c:17:40:c7:b0:50:a6:7e:4e:b3:2c:41:e9: ad:b9:d2:16:5b:e5:ad:a2:9b:33:2c:3f:f4:aa:c4: b3:86:f7:d5:ec:64:ad:60:e5:9e:87:e2:e1:98:24: c6:57:d7:b8:62:dc:1a:c2:66:a7:5c:94:ac:cc:88: 0a:b4:ad:06:81:dc:be:14:5b:d9:2d:c3:f8:20:e7: 43:dd:a9:4e:0a:79:28:d7:3d:b8:1d:86:df:8a:a5: f2:43:da:97:88:32:9c:62:37:bf:e9:34:3d:83:da: 0f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:90:86:DA:F0:8E:BB:5B:60:55:AE:DD:63:0B:BC:4C:9B:DF:E3:31 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_ZCG2vCOu1tgVa7dYwu8TJvf4zE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.14.0/23 Signature Algorithm: sha256WithRSAEncryption 60:a5:82:78:3d:8b:f5:b2:79:07:1f:6d:3a:56:6c:32:33:67: 59:9b:86:f6:d4:7c:07:78:7d:83:32:0d:2e:21:1d:22:c9:56: 7a:3e:7f:28:43:c3:38:ea:f2:3a:c9:95:33:eb:62:4c:b6:5f: c5:c4:0b:22:0d:57:5a:b6:08:39:1e:93:6c:7e:21:68:78:9b: e8:a3:1a:5e:26:f8:6d:ac:0f:99:86:59:d6:7d:5c:84:2b:54: 06:19:1d:5c:cf:b8:9b:91:20:70:cc:69:5e:74:17:c7:8c:4a: c8:12:b0:fd:f5:6c:e8:a1:bf:16:0c:fa:de:e4:c4:40:d9:a7: d9:eb:dc:6d:4b:2d:8f:1f:aa:a7:a9:cc:03:5f:22:5d:e9:1f: 7c:19:1b:fa:b2:9d:8f:8d:39:74:42:33:3e:c7:1d:c2:e1:4c: f3:2c:82:78:05:d8:28:0d:b6:11:6a:aa:84:62:34:2e:37:36: b0:15:35:2f:3b:64:35:36:83:a5:3a:b2:96:54:2e:8c:1c:8e: c7:01:e6:5d:f1:ea:0e:62:49:cc:2a:ec:da:25:a9:2d:05:59: d9:f6:9d:b1:be:63:ea:a2:83:67:c7:22:ad:f0:50:66:ba:ef: 2d:ff:c1:cb:5c:77:b0:39:50:d8:6f:b9:e4:cb:69:7a:19:36: 64:6e:ac:cb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MjBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEZEOTA4NkRBRjA4RUJC NUI2MDU1QUVERDYzMEJCQzRDOUJERkUzMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+mJBjTQNQoRpVMgUCkttzKOB8qmLDQLztqGcXWJPCuovIxJax BkR8TR96jEiZZKQA3EyMQWoiBwTRwiHMFdfh1FrLfnObRxsuP7z+CoHZmgOnH2hU LxvkoeFHH67cjNQgDs4244Q0JB7XjWwMeZ2KC6U5nmA9UCh5n2NWafCYFEBzCOjR NskBizjwkxRT0E8/lkMJVUndHBdAx7BQpn5OsyxB6a250hZb5a2imzMsP/SqxLOG 99XsZK1g5Z6H4uGYJMZX17hi3BrCZqdclKzMiAq0rQaB3L4UW9ktw/gg50PdqU4K eSjXPbgdht+KpfJD2peIMpxiN7/pND2D2g9RAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/ZCG2vCOu1tgVa7dYwu8TJvf4zEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L19aQ0cydkNPdTF0Z1ZhN2RZd3U4VEp2ZjR6RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYA4wDQYJKoZIhvcNAQELBQADggEBAGClgng9i/WyeQcfbTpWbDIzZ1mb hvbUfAd4fYMyDS4hHSLJVno+fyhDwzjq8jrJlTPrYky2X8XECyINV1q2CDkek2x+ IWh4m+ijGl4m+G2sD5mGWdZ9XIQrVAYZHVzPuJuRIHDMaV50F8eMSsgSsP31bOih vxYM+t7kxEDZp9nr3G1LLY8fqqepzANfIl3pH3wZG/qynY+NOXRCMz7HHcLhTPMs gngF2CgNthFqqoRiNC43NrAVNS87ZDU2g6U6spZULowcjscB5l3x6g5iScwq7Nol qS0FWdn2nbG+Y+qig2fHIq3wUGa67y3/wctcd7A5UNhvueTLaXoZNmRurMs= -----END CERTIFICATE-----Generated at Sat Apr 5 23:09:16 2025 by rpki-client