$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_dSbjb-1Ql0AT8Dx0KQfDIiH24Q.roa File: _dSbjb-1Ql0AT8Dx0KQfDIiH24Q.roa (raw, json) Hash identifier: nuMGnVGPAWyOhQtV/O6mEC1pqmUQQe04oI6geu4ltk4= Subject key identifier: FD:D4:9B:8D:BF:B5:42:5D:00:4F:C0:F1:D0:A4:1F:0C:88:87:DB:84 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C6E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_dSbjb-1Ql0AT8Dx0KQfDIiH24Q.roa Signing time: Tue 01 Apr 2025 02:00:33 +0000 ROA not before: Tue 01 Apr 2025 02:00:33 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3182 (0xc6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:00:33 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=FDD49B8DBFB5425D004FC0F1D0A41F0C8887DB84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0c:84:41:b4:dc:d4:eb:04:4a:e4:f9:b2:d2: f7:da:46:3c:24:7a:4c:7f:cd:6d:a0:41:15:93:a8: 9d:e4:f3:b1:d1:03:b5:ab:bf:d9:ca:c9:01:09:80: 50:8a:29:1e:c8:7b:ad:6e:de:b6:e6:bc:fb:59:ad: 22:da:c3:f2:41:ac:cf:b3:8e:a6:9e:a5:00:ca:2a: 66:95:56:30:d2:35:04:ad:41:1c:8f:49:bf:d9:53: 99:8a:97:e8:6f:78:8c:6b:ac:6d:b0:00:44:77:a3: f2:4d:3f:49:16:9f:2d:ce:b3:55:15:1e:1a:21:30: ed:dd:02:8f:74:5b:d0:c9:80:66:30:67:8b:fc:c7: 83:e6:3f:c2:02:b5:92:fb:d7:26:20:03:49:2f:d8: 8e:90:94:ba:e4:6c:21:5b:b9:79:0d:31:c3:70:62: 60:24:9e:d1:52:bf:0c:97:43:6c:6e:73:1a:58:ad: 87:d9:cb:0e:9f:75:84:33:d3:85:70:98:76:d4:4a: cc:42:a3:c9:ff:1e:00:dd:07:e6:0f:25:4d:05:07: 45:4b:ce:87:b5:a5:7f:89:4e:06:d2:c0:e1:6a:73: 94:fb:23:b1:92:0d:f1:7a:cb:74:e0:89:8d:7f:2a: a7:b6:5a:f2:0b:bb:e8:d2:6d:73:b0:53:27:69:95: cf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D4:9B:8D:BF:B5:42:5D:00:4F:C0:F1:D0:A4:1F:0C:88:87:DB:84 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_dSbjb-1Ql0AT8Dx0KQfDIiH24Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.118.0/23 Signature Algorithm: sha256WithRSAEncryption c8:12:ea:90:13:36:24:32:ce:93:f1:e3:7b:98:70:12:63:f6: 8e:43:ed:12:fe:33:48:5e:d0:b3:16:3f:f7:f6:9d:72:2f:d3: 8f:95:df:9f:31:9a:df:cf:9e:e6:f5:29:39:80:a2:97:b9:74: 39:ef:8d:08:3e:b2:a9:17:1e:f3:7d:b6:fa:e1:bf:cd:28:4e: 3b:2b:c5:8e:fe:e1:d2:12:46:02:07:18:fd:1c:2e:cb:c4:93: 91:0b:8b:61:6b:2e:f9:5b:06:d9:69:c7:4e:cd:03:b3:9d:74: 8f:fe:d0:73:62:19:d3:92:1a:1d:41:01:24:5f:ce:d2:e5:85: 9f:1e:f0:93:55:8a:60:be:43:e2:ae:0d:dc:89:57:a4:f0:b4: 60:08:98:26:06:c6:a5:1a:e6:0e:04:22:25:c0:5b:95:c1:2f: 29:a0:9f:98:5b:43:3d:2d:39:c5:63:f1:42:c8:ab:21:44:08: 27:20:80:25:ea:14:98:4d:83:60:92:70:0b:84:6e:59:af:ec: 68:7b:9d:83:75:33:26:29:39:d1:98:3f:45:ed:bf:b8:db:6e: 6b:a9:9c:29:cf:26:1a:28:fb:3f:75:7f:fd:2e:43:fc:54:be: eb:e4:11:db:9f:d5:04:49:06:f6:ba:12:b0:08:ea:e4:d7:c8: 64:2c:5a:be -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAwMzNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEZERDQ5QjhEQkZCNTQy NUQwMDRGQzBGMUQwQTQxRjBDODg4N0RCODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgDIRBtNzU6wRK5Pmy0vfaRjwkekx/zW2gQRWTqJ3k87HRA7Wr v9nKyQEJgFCKKR7Ie61u3rbmvPtZrSLaw/JBrM+zjqaepQDKKmaVVjDSNQStQRyP Sb/ZU5mKl+hveIxrrG2wAER3o/JNP0kWny3Os1UVHhohMO3dAo90W9DJgGYwZ4v8 x4PmP8ICtZL71yYgA0kv2I6QlLrkbCFbuXkNMcNwYmAkntFSvwyXQ2xucxpYrYfZ yw6fdYQz04VwmHbUSsxCo8n/HgDdB+YPJU0FB0VLzoe1pX+JTgbSwOFqc5T7I7GS DfF6y3TgiY1/Kqe2WvILu+jSbXOwUydplc8PAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/dSbjb+1Ql0AT8Dx0KQfDIiH24QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L19kU2JqYi0xUWwwQVQ4RHgwS1FmRElpSDI0US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYnYwDQYJKoZIhvcNAQELBQADggEBAMgS6pATNiQyzpPx43uYcBJj9o5D 7RL+M0he0LMWP/f2nXIv04+V358xmt/Pnub1KTmAope5dDnvjQg+sqkXHvN9tvrh v80oTjsrxY7+4dISRgIHGP0cLsvEk5ELi2FrLvlbBtlpx07NA7OddI/+0HNiGdOS Gh1BASRfztLlhZ8e8JNVimC+Q+KuDdyJV6TwtGAImCYGxqUa5g4EIiXAW5XBLymg n5hbQz0tOcVj8ULIqyFECCcggCXqFJhNg2CScAuEblmv7Gh7nYN1MyYpOdGYP0Xt v7jbbmupnCnPJhoo+z91f/0uQ/xUvuvkEduf1QRJBva6ErAI6uTXyGQsWr4= -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:56 2025 by rpki-client