$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bFCua3glLrXFQiAC5h3ZS1FIjuY.roa File: bFCua3glLrXFQiAC5h3ZS1FIjuY.roa (raw, json) Hash identifier: vexpQ/W3BNiwH9VJaCIwqvrigEyd6uX2jjk8GNE0OmM= Subject key identifier: 6C:50:AE:6B:78:25:2E:B5:C5:42:20:02:E6:1D:D9:4B:51:48:8E:E6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C56 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bFCua3glLrXFQiAC5h3ZS1FIjuY.roa Signing time: Tue 01 Apr 2025 01:57:25 +0000 ROA not before: Tue 01 Apr 2025 01:57:25 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3158 (0xc56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:25 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=6C50AE6B78252EB5C5422002E61DD94B51488EE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:5c:a0:15:56:41:b6:c9:05:6b:8b:dc:e4: 8a:bc:d7:d4:ad:80:79:6b:55:3d:e7:bf:e6:a0:d1: 41:ca:62:4c:0b:1e:7e:ea:15:87:4a:f5:8b:89:2e: 14:d5:90:f8:c9:ef:c2:4c:e8:bb:dc:d0:8d:70:04: dc:5f:2e:a1:5f:81:7a:ac:42:74:fa:7c:95:bd:ce: 0a:6d:31:4b:8f:15:33:6a:05:25:60:c0:71:d8:90: bc:d0:e0:cd:0f:dd:10:e0:12:3d:7d:a3:0b:cd:34: c9:d8:5f:18:c2:24:e9:5e:b4:1e:cc:6e:c7:fe:82: 0d:3e:2a:6b:e8:d8:56:b9:f3:87:d1:f6:16:1b:62: 2a:cd:dd:99:c6:26:76:c6:aa:68:a0:93:c3:cd:cb: dc:d1:86:04:e1:c3:50:09:f2:29:0d:db:df:96:a0: ec:35:24:aa:c7:ee:1c:7d:5d:e9:a6:c6:90:f6:81: cc:6f:af:cf:d8:14:7b:91:3f:ea:ec:ad:1a:64:62: c3:fe:b1:88:2d:c5:b2:5e:63:4a:62:dd:a8:ed:a4: dd:89:9f:99:0c:20:e9:cd:3c:5a:68:e6:28:06:87: 2d:b3:a4:b5:47:a5:c4:93:73:0c:5f:31:25:dc:02: b9:9f:3a:da:60:f8:77:b0:72:43:83:79:eb:eb:7c: 48:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:50:AE:6B:78:25:2E:B5:C5:42:20:02:E6:1D:D9:4B:51:48:8E:E6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bFCua3glLrXFQiAC5h3ZS1FIjuY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.32.0/23 Signature Algorithm: sha256WithRSAEncryption d1:ee:4c:e1:3e:4f:b2:40:92:12:ed:97:ab:8e:7b:f8:25:48: 91:c6:0c:29:3b:98:a7:c8:10:d5:8e:64:f6:67:0e:0a:7a:53: cf:00:6a:4b:7b:d8:a3:c5:79:a4:b3:74:e0:75:10:ed:69:80: 63:d7:7e:87:75:12:83:67:1a:2f:24:77:82:7d:82:50:75:02: 1b:07:05:41:62:b0:00:90:e1:17:ef:30:95:1f:10:8b:39:02: e5:c7:e8:69:2c:41:73:90:64:ea:d2:36:f7:96:8d:1c:de:53: b3:4b:2a:33:ac:82:2b:00:08:5d:3a:3f:68:80:f9:73:a5:1e: 39:9a:7a:e9:25:f6:d3:b9:24:72:41:80:fc:9d:23:65:0b:db: 28:b3:32:05:83:53:29:cf:f5:03:c2:30:8c:8e:f8:54:d2:3b: f2:09:7f:c0:85:b3:b2:6e:f0:75:68:fa:3f:5b:46:0a:63:53: 71:30:5d:e9:0c:e7:09:49:84:5d:63:dc:f6:42:d5:ca:74:fb: 2d:c6:bb:23:1e:0f:43:85:2b:28:e0:59:80:e3:42:15:6b:22: 5d:f9:cb:d6:30:f2:c9:db:10:c4:ba:8b:45:68:2b:6b:8d:c9: db:2a:88:35:f6:3b:05:49:99:47:28:39:42:8b:e0:62:7e:27: 4d:a2:5b:7f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MjVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZDNTBBRTZCNzgyNTJF QjVDNTQyMjAwMkU2MUREOTRCNTE0ODhFRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8JVygFVZBtskFa4vc5Iq819StgHlrVT3nv+ag0UHKYkwLHn7q FYdK9YuJLhTVkPjJ78JM6Lvc0I1wBNxfLqFfgXqsQnT6fJW9zgptMUuPFTNqBSVg wHHYkLzQ4M0P3RDgEj19owvNNMnYXxjCJOletB7Mbsf+gg0+Kmvo2Fa584fR9hYb YirN3ZnGJnbGqmigk8PNy9zRhgThw1AJ8ikN29+WoOw1JKrH7hx9XemmxpD2gcxv r8/YFHuRP+rsrRpkYsP+sYgtxbJeY0pi3ajtpN2Jn5kMIOnNPFpo5igGhy2zpLVH pcSTcwxfMSXcArmfOtpg+HewckODeevrfEgNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbFCua3glLrXFQiAC5h3ZS1FIjuYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2JGQ3VhM2dsTHJYRlFpQUM1aDNaUzFGSWp1WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaCAwDQYJKoZIhvcNAQELBQADggEBANHuTOE+T7JAkhLtl6uOe/glSJHG DCk7mKfIENWOZPZnDgp6U88Aakt72KPFeaSzdOB1EO1pgGPXfod1EoNnGi8kd4J9 glB1AhsHBUFisACQ4RfvMJUfEIs5AuXH6GksQXOQZOrSNveWjRzeU7NLKjOsgisA CF06P2iA+XOlHjmaeukl9tO5JHJBgPydI2UL2yizMgWDUynP9QPCMIyO+FTSO/IJ f8CFs7Ju8HVo+j9bRgpjU3EwXekM5wlJhF1j3PZC1cp0+y3GuyMeD0OFKyjgWYDj QhVrIl35y9Yw8snbEMS6i0VoK2uNydsqiDX2OwVJmUcoOUKL4GJ+J02iW38= -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:16 2025 by rpki-client