$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/e3pLjdSr32HkSW1AGu-IMx6ogDU.roa File: e3pLjdSr32HkSW1AGu-IMx6ogDU.roa (raw, json) Hash identifier: VtUJgw8Go61ue+VX2WXvMRkqeMATf5S9/5GpPvYDaCE= Subject key identifier: 7B:7A:4B:8D:D4:AB:DF:61:E4:49:6D:40:1A:EF:88:33:1E:A8:80:35 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DA1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e3pLjdSr32HkSW1AGu-IMx6ogDU.roa Signing time: Tue 01 Apr 2025 02:24:36 +0000 ROA not before: Tue 01 Apr 2025 02:24:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3489 (0xda1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=7B7A4B8DD4ABDF61E4496D401AEF88331EA88035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:4e:51:43:0c:28:e8:ef:33:75:d9:72:ce: c4:7b:cd:87:0c:c7:3a:61:ca:b1:46:d4:a8:fa:71: 52:5e:4a:cd:d6:cd:eb:51:d7:86:86:b9:5a:ba:a4: 74:8b:e6:43:d2:be:00:62:fa:c7:fc:12:12:a8:6a: 35:04:45:2c:2d:50:a7:bc:24:8b:a5:f1:05:f6:6f: f0:80:8e:31:09:43:2e:01:90:8d:52:8c:f3:78:53: de:0d:d5:89:bd:7b:cf:74:e2:6d:bd:70:6c:db:b4: e8:e0:5c:c3:18:3a:7e:ce:da:c2:e1:00:7d:74:18: 7d:66:b8:d7:9f:a7:9b:8d:94:d5:a2:9e:0b:cb:6a: e2:78:f4:32:7a:0e:79:28:43:2c:6e:72:a7:5a:94: 35:d9:6b:5c:bc:e7:b1:a4:5c:8e:51:9a:18:9b:cb: 1d:27:a9:09:78:ef:4c:69:34:8d:a5:83:9c:df:3d: 6e:11:16:d3:d2:99:44:6e:ed:82:eb:9b:90:e4:47: 66:4d:9c:86:e6:36:3a:2f:f7:03:61:a7:ee:96:3c: 30:e0:7e:08:35:47:82:7e:c2:72:80:3a:d2:cd:87: cb:95:74:d0:5e:1c:3e:c6:16:56:1c:08:42:24:bf: 01:5e:a0:89:3e:4d:8d:75:58:95:64:29:e3:fe:59: 25:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7A:4B:8D:D4:AB:DF:61:E4:49:6D:40:1A:EF:88:33:1E:A8:80:35 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e3pLjdSr32HkSW1AGu-IMx6ogDU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.190.0/24 Signature Algorithm: sha256WithRSAEncryption 35:bb:01:95:0f:27:59:c2:0f:dd:93:80:e0:28:35:0d:75:fe: 17:b3:b3:26:45:22:37:00:78:ef:1f:ba:fe:d9:e8:72:09:c4: 5f:b4:d5:58:69:b8:4d:12:91:6b:88:82:7b:6d:fe:e5:4b:4b: 1d:01:3c:b4:43:1e:c1:29:eb:86:9a:c3:2f:2a:71:a7:e5:a1: be:55:2e:45:31:1d:a0:99:e0:2a:ca:a8:86:68:32:4e:30:01: 7d:f8:cc:44:b8:84:c3:b8:05:09:43:57:66:d7:45:7e:36:25: a2:02:f5:c6:c3:a7:ea:94:7b:27:49:1c:2f:17:ac:97:e0:46: cf:98:12:cb:ef:a7:8c:d0:23:1b:a7:4c:63:95:10:6f:c3:a2: ca:13:a2:38:27:04:9e:67:22:a2:f6:36:fc:d0:6b:62:42:53: f9:80:d4:f6:0e:fd:2b:1c:dd:0e:53:12:a6:3d:ca:6b:30:34: 9d:14:3b:e0:b1:75:7a:80:ac:2b:47:76:36:cd:7d:90:49:01: 92:93:9c:d2:92:5a:26:db:61:ec:41:fa:b5:5d:c3:97:19:0e: 5f:2f:0c:79:9d:4f:74:8b:c9:0b:c2:0f:96:db:20:cc:f7:5a: 1b:28:47:0f:bc:14:01:0a:b7:64:57:7c:04:0e:37:be:31:b8: 43:b7:14:81 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0MzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdCN0E0QjhERDRBQkRG NjFFNDQ5NkQ0MDFBRUY4ODMzMUVBODgwMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCreE5RQwwo6O8zddlyzsR7zYcMxzphyrFG1Kj6cVJeSs3WzetR 14aGuVq6pHSL5kPSvgBi+sf8EhKoajUERSwtUKe8JIul8QX2b/CAjjEJQy4BkI1S jPN4U94N1Ym9e8904m29cGzbtOjgXMMYOn7O2sLhAH10GH1muNefp5uNlNWingvL auJ49DJ6DnkoQyxucqdalDXZa1y857GkXI5Rmhibyx0nqQl470xpNI2lg5zfPW4R FtPSmURu7YLrm5DkR2ZNnIbmNjov9wNhp+6WPDDgfgg1R4J+wnKAOtLNh8uVdNBe HD7GFlYcCEIkvwFeoIk+TY11WJVkKeP+WSV5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUe3pLjdSr32HkSW1AGu+IMx6ogDUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2UzcExqZFNyMzJIa1NXMUFHdS1JTXg2b2dEVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxar4wDQYJKoZIhvcNAQELBQADggEBADW7AZUPJ1nCD92TgOAoNQ11/hez syZFIjcAeO8fuv7Z6HIJxF+01VhpuE0SkWuIgntt/uVLSx0BPLRDHsEp64aawy8q caflob5VLkUxHaCZ4CrKqIZoMk4wAX34zES4hMO4BQlDV2bXRX42JaIC9cbDp+qU eydJHC8XrJfgRs+YEsvvp4zQIxunTGOVEG/DosoTojgnBJ5nIqL2NvzQa2JCU/mA 1PYO/Ssc3Q5TEqY9ymswNJ0UO+CxdXqArCtHdjbNfZBJAZKTnNKSWibbYexB+rVd w5cZDl8vDHmdT3SLyQvCD5bbIMz3WhsoRw+8FAEKt2RXfAQON74xuEO3FIE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:37:40 2025 by rpki-client