$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ba4iVL_lDQjNyWJ6QNcvWN1-C1s.roa File: ba4iVL_lDQjNyWJ6QNcvWN1-C1s.roa (raw, json) Hash identifier: evJ4luXD6rki4tO0yON+PRfg657ws0jqS66DDsGxH8A= Subject key identifier: 6D:AE:22:54:BF:E5:0D:08:CD:C9:62:7A:40:D7:2F:58:DD:7E:0B:5B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BE3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ba4iVL_lDQjNyWJ6QNcvWN1-C1s.roa Signing time: Tue 01 Apr 2025 01:47:40 +0000 ROA not before: Tue 01 Apr 2025 01:47:40 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3043 (0xbe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:47:40 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=6DAE2254BFE50D08CDC9627A40D72F58DD7E0B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:b6:e6:68:9b:3e:b6:ee:2e:f1:93:ac:fc: 27:dc:b7:d3:f4:9d:75:8d:db:a7:9b:da:bb:3b:1d: f8:96:70:89:e7:4a:5d:e8:b1:b5:7e:01:92:be:3d: 04:44:1b:6e:40:11:57:54:f2:86:38:97:e7:e2:cd: a7:f6:68:82:69:fa:ca:cf:84:9f:67:06:33:e2:7d: 68:f8:07:9b:dd:99:89:b1:6a:36:0a:ac:0d:47:8b: dc:aa:80:fb:88:21:09:75:5f:e3:23:60:ba:e9:bd: 5d:00:01:ef:b5:77:bf:7c:be:8c:e4:e6:45:ae:17: c7:24:d7:6f:36:c2:73:b2:bc:54:59:d6:c5:70:58: e5:f9:3d:c8:18:dd:1f:9e:55:2b:e5:fe:4f:8f:41: 92:a3:16:0d:5e:23:78:f7:8b:1f:7c:a3:63:58:23: f1:83:e0:f1:2c:8c:ac:71:9e:f5:ae:fd:57:21:6b: c7:a4:3a:33:06:34:a0:63:1a:39:0a:1b:44:4e:19: 57:51:29:09:55:58:95:27:bf:57:65:1e:87:ac:5e: 5d:4c:c4:52:45:5b:fb:59:68:20:3f:3b:de:f0:af: c8:b3:fc:3c:78:6d:5a:7a:b5:f7:60:25:d7:8f:f2: 43:1d:66:de:9e:b2:16:de:2a:ac:b1:47:71:03:c1: a4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AE:22:54:BF:E5:0D:08:CD:C9:62:7A:40:D7:2F:58:DD:7E:0B:5B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ba4iVL_lDQjNyWJ6QNcvWN1-C1s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.78.0/23 Signature Algorithm: sha256WithRSAEncryption c5:f9:da:6d:11:ba:47:72:92:f1:10:25:a0:4f:94:a1:03:1e: 3b:0f:73:59:2d:cb:23:23:7f:41:f0:3f:bd:a2:0b:2e:52:5f: 65:4c:0f:80:86:db:5c:5b:5a:44:42:de:7c:1c:7b:33:74:62: 98:e5:a7:66:80:11:72:6f:80:a0:36:98:0d:46:ab:df:7f:39: 73:11:c9:48:8d:13:58:fc:83:6c:59:fd:d6:51:6e:84:4e:80: 64:78:54:0a:58:65:28:47:7e:b6:34:df:e5:6c:e4:7b:1c:26: e9:d6:34:f8:e9:a2:88:c2:4e:76:ab:7d:37:2d:33:30:ad:6f: 5c:3a:be:b0:15:93:85:62:f1:73:86:02:28:05:38:15:05:de: 95:fa:13:f6:8d:61:98:95:ad:1a:01:11:e9:36:52:72:7a:ec: 8e:80:3a:c4:c3:c1:a0:92:61:0a:ed:bb:0e:a8:e4:6f:d8:93: f6:1a:e9:8b:48:6f:72:0a:71:bd:bb:58:8f:ad:8d:43:32:b4: 4a:d2:98:e1:81:98:3a:bf:0a:15:cd:41:e3:7b:94:52:83:c1: ee:85:cf:0e:e0:30:fa:d2:07:0b:6c:53:b1:6d:af:b5:6e:e1: 78:7c:f6:96:68:eb:a3:8c:c2:38:ca:18:4f:56:fe:1d:32:39: e5:7b:46:3f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC+MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQ3NDBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZEQUUyMjU0QkZFNTBE MDhDREM5NjI3QTQwRDcyRjU4REQ3RTBCNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEbrbmaJs+tu4u8ZOs/Cfct9P0nXWN26eb2rs7HfiWcInnSl3o sbV+AZK+PQREG25AEVdU8oY4l+fizaf2aIJp+srPhJ9nBjPifWj4B5vdmYmxajYK rA1Hi9yqgPuIIQl1X+MjYLrpvV0AAe+1d798vozk5kWuF8ck1282wnOyvFRZ1sVw WOX5PcgY3R+eVSvl/k+PQZKjFg1eI3j3ix98o2NYI/GD4PEsjKxxnvWu/Vcha8ek OjMGNKBjGjkKG0ROGVdRKQlVWJUnv1dlHoesXl1MxFJFW/tZaCA/O97wr8iz/Dx4 bVp6tfdgJdeP8kMdZt6eshbeKqyxR3EDwaT9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUba4iVL/lDQjNyWJ6QNcvWN1+C1swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2JhNGlWTF9sRFFqTnlXSjZRTmN2V04xLUMxcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYk4wDQYJKoZIhvcNAQELBQADggEBAMX52m0RukdykvEQJaBPlKEDHjsP c1ktyyMjf0HwP72iCy5SX2VMD4CG21xbWkRC3nwcezN0Ypjlp2aAEXJvgKA2mA1G q99/OXMRyUiNE1j8g2xZ/dZRboROgGR4VApYZShHfrY03+Vs5HscJunWNPjpoojC TnarfTctMzCtb1w6vrAVk4Vi8XOGAigFOBUF3pX6E/aNYZiVrRoBEek2UnJ67I6A OsTDwaCSYQrtuw6o5G/Yk/Ya6YtIb3IKcb27WI+tjUMytErSmOGBmDq/ChXNQeN7 lFKDwe6Fzw7gMPrSBwtsU7Ftr7Vu4Xh89pZo66OMwjjKGE9W/h0yOeV7Rj8= -----END CERTIFICATE-----Generated at Sat Apr 5 17:28:10 2025 by rpki-client