$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dFY6FJz-Agl-_jtJdvn5Uqy-BK0.roa File: dFY6FJz-Agl-_jtJdvn5Uqy-BK0.roa (raw, json) Hash identifier: xTFTYZSoozQ5KsB67aOKcLHXGlqaXdnGVKvTMq+WnyM= Subject key identifier: 74:56:3A:14:9C:FE:02:09:7E:FE:3B:49:76:F9:F9:52:AC:BE:04:AD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D66 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dFY6FJz-Agl-_jtJdvn5Uqy-BK0.roa Signing time: Tue 01 Apr 2025 02:19:18 +0000 ROA not before: Tue 01 Apr 2025 02:19:18 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3430 (0xd66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:18 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=74563A149CFE02097EFE3B4976F9F952ACBE04AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:72:b6:f2:53:3c:dd:50:70:d2:f7:12:c5: 10:85:5f:8b:b8:4b:e2:df:7a:cc:1e:2c:c8:b0:cf: 1f:4d:d6:45:7d:30:a6:41:b1:87:11:03:ff:bd:dd: 33:62:66:bc:e9:1f:1f:ca:22:cd:2c:4e:e4:16:11: 48:0b:e2:31:c6:79:9a:51:ff:9c:f5:10:91:58:4e: 90:55:2e:88:71:a7:67:13:31:5a:27:7d:99:b9:de: ec:a1:51:b5:80:d4:5a:61:28:a9:4a:c2:4d:6a:6c: a2:6f:59:c9:86:9b:6f:61:d6:e2:72:ca:27:17:48: 3b:b2:c8:7c:71:86:03:f2:03:a7:ed:1c:f6:e3:6d: cb:25:82:7d:b7:76:74:74:29:6a:c0:c2:b0:e0:57: cb:0d:14:2d:a9:60:ef:76:f1:eb:66:2a:71:b4:08: 92:b7:24:35:42:b6:27:de:7f:d5:34:07:22:dd:d2: f2:a4:6d:3b:49:88:95:41:91:be:a9:91:10:bd:ed: 08:07:57:64:75:f1:fc:26:56:da:53:6b:1b:44:9d: bc:e6:04:b2:47:b1:19:76:a1:82:b6:b2:03:a9:04: 82:67:0b:b4:0f:65:36:a9:d9:c4:3e:84:3b:21:6c: 25:75:93:18:11:83:c8:b1:20:ad:ce:68:70:a9:e0: ea:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:56:3A:14:9C:FE:02:09:7E:FE:3B:49:76:F9:F9:52:AC:BE:04:AD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dFY6FJz-Agl-_jtJdvn5Uqy-BK0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.6.0/23 Signature Algorithm: sha256WithRSAEncryption cb:69:e9:f8:6f:dd:87:f1:79:47:04:21:e1:43:2c:2f:8c:b2: 41:13:ce:16:73:c8:e2:54:1c:4d:22:8d:42:99:4f:83:11:24: e6:38:b9:4a:b0:f6:d7:fe:11:c2:59:a0:57:dc:45:17:5c:39: c1:a8:dc:e1:6f:88:01:98:18:15:f5:62:96:e2:50:c4:5c:54: b4:f8:4c:8a:4a:10:3e:24:de:78:dd:de:0f:19:db:48:60:44: ad:2c:d2:1f:a4:46:b8:24:9d:2c:a0:c5:25:8d:1b:ab:27:17: 67:e2:9c:ff:24:0c:b8:8a:02:4a:5d:03:e0:2f:c9:9a:64:af: 12:80:50:08:ef:f1:6c:5b:a8:d4:26:14:32:1f:c8:50:63:38: 50:9f:81:27:ba:11:07:b2:bd:da:a3:fe:23:91:52:24:8d:52: ce:51:79:23:1f:c4:e9:b1:3f:1c:29:7d:c4:50:ee:c3:57:e3: 97:63:94:8e:a5:b5:55:3d:66:0f:8b:9b:a2:4c:59:64:0f:ca: 61:9f:6b:0e:e6:b3:b0:fa:b0:80:b5:1e:4a:f8:c2:8f:b8:44: 51:f4:39:5c:cf:dc:2b:61:ce:e8:86:e7:57:cd:13:a9:00:9f: 5f:51:b1:ce:14:0a:ad:de:0b:63:ba:53:52:dc:64:69:df:72: da:8a:44:36 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MThaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc0NTYzQTE0OUNGRTAy MDk3RUZFM0I0OTc2RjlGOTUyQUNCRTA0QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3zXK28lM83VBw0vcSxRCFX4u4S+LfesweLMiwzx9N1kV9MKZB sYcRA/+93TNiZrzpHx/KIs0sTuQWEUgL4jHGeZpR/5z1EJFYTpBVLohxp2cTMVon fZm53uyhUbWA1FphKKlKwk1qbKJvWcmGm29h1uJyyicXSDuyyHxxhgPyA6ftHPbj bcslgn23dnR0KWrAwrDgV8sNFC2pYO928etmKnG0CJK3JDVCtifef9U0ByLd0vKk bTtJiJVBkb6pkRC97QgHV2R18fwmVtpTaxtEnbzmBLJHsRl2oYK2sgOpBIJnC7QP ZTap2cQ+hDshbCV1kxgRg8ixIK3OaHCp4OqpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdFY6FJz+Agl+/jtJdvn5Uqy+BK0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2RGWTZGSnotQWdsLV9qdEpkdm41VXF5LUJLMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYAYwDQYJKoZIhvcNAQELBQADggEBAMtp6fhv3YfxeUcEIeFDLC+MskET zhZzyOJUHE0ijUKZT4MRJOY4uUqw9tf+EcJZoFfcRRdcOcGo3OFviAGYGBX1Ypbi UMRcVLT4TIpKED4k3njd3g8Z20hgRK0s0h+kRrgknSygxSWNG6snF2finP8kDLiK AkpdA+AvyZpkrxKAUAjv8WxbqNQmFDIfyFBjOFCfgSe6EQeyvdqj/iORUiSNUs5R eSMfxOmxPxwpfcRQ7sNX45djlI6ltVU9Zg+Lm6JMWWQPymGfaw7ms7D6sIC1Hkr4 wo+4RFH0OVzP3CthzuiG51fNE6kAn19Rsc4UCq3eC2O6U1LcZGnfctqKRDY= -----END CERTIFICATE-----Generated at Sat Apr 5 17:48:24 2025 by rpki-client