$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eIz1qM365fW2onUBdt_KA-sks-o.roa File: eIz1qM365fW2onUBdt_KA-sks-o.roa (raw, json) Hash identifier: HqvyRj5PpUbqb2+A5X78GdBzgOX1iFQBVFEuibqu9Xc= Subject key identifier: 78:8C:F5:A8:CD:FA:E5:F5:B6:A2:75:01:76:DF:CA:03:EB:24:B3:EA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D93 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eIz1qM365fW2onUBdt_KA-sks-o.roa Signing time: Tue 01 Apr 2025 02:21:36 +0000 ROA not before: Tue 01 Apr 2025 02:21:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3475 (0xd93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:21:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=788CF5A8CDFAE5F5B6A2750176DFCA03EB24B3EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:9d:e8:ff:d5:d3:5a:aa:82:4e:0b:89:9d: 6a:7f:5e:96:4d:4d:99:24:6f:17:74:3c:8a:6e:75: ac:bd:f4:a6:cb:e0:2f:5f:1c:34:19:4c:f1:0a:7e: a6:4c:04:c8:27:b9:bc:17:23:9f:dc:0b:28:30:9d: fb:bc:93:b5:e7:41:f8:d8:22:cb:e0:a7:a9:29:61: fd:fa:ba:70:56:d0:2d:eb:99:a2:fd:26:5c:af:3c: 16:f2:fa:74:1f:46:5f:9c:09:65:d1:56:2e:90:f2: d3:00:39:b2:8e:44:63:ae:56:1c:e6:93:e7:6d:2a: df:36:45:5c:50:c4:3e:74:40:17:70:08:83:7a:ec: 93:cd:8a:93:45:80:b3:35:c5:76:47:da:9d:1c:04: 23:10:aa:b0:89:e9:15:3e:73:33:de:db:ad:06:14: 86:82:27:fd:0e:45:03:a4:0c:fd:5c:2d:4b:1d:31: 88:c8:34:a3:2f:c6:25:de:4d:de:a1:fe:f1:c8:d7: 5e:68:1d:0e:cb:2d:5d:f7:ea:93:0f:19:3f:fa:64: 2b:9f:c7:40:fb:4f:79:f5:4d:a8:68:85:0c:5e:44: 4c:3e:64:d0:88:28:68:d2:cc:78:47:e7:d0:61:16: 8f:ed:6f:e8:ce:1c:86:d2:6c:fd:87:1d:5b:51:f5: 6f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8C:F5:A8:CD:FA:E5:F5:B6:A2:75:01:76:DF:CA:03:EB:24:B3:EA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eIz1qM365fW2onUBdt_KA-sks-o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.12.0/22 Signature Algorithm: sha256WithRSAEncryption af:a8:ca:f8:9a:bb:03:c2:c4:a8:26:39:b6:7c:14:e5:f4:84: 0a:72:42:a1:89:48:10:0a:f5:c7:04:01:8a:63:c8:7b:9f:fa: 39:6d:00:09:70:8f:68:87:7d:45:a3:1f:0e:68:35:2c:bb:36: e8:fc:7b:8d:b9:15:f1:b5:71:47:d5:82:54:3c:16:ae:46:51: fb:51:b0:0d:4e:2d:8e:05:d2:28:9d:74:fe:9a:1a:0d:a6:62: 09:e0:02:fe:1d:68:fc:de:13:14:8a:49:ad:5a:d5:4b:4c:3f: df:e8:5b:d0:1d:91:fc:0a:7b:8b:a0:e4:0f:ad:e6:6a:ba:05: b2:c9:0b:22:8f:66:19:68:06:04:76:eb:cf:4d:4a:ed:15:20: fd:f4:80:3b:8d:27:95:95:de:b6:16:c3:5c:39:d9:bc:dd:40: 65:5d:2b:a7:0d:92:80:3b:ff:13:ae:09:2b:e7:ad:73:13:7f: 48:34:16:f1:3a:23:17:e5:e9:9f:b5:bc:b6:a7:5a:9e:b4:46: a0:6f:00:92:33:40:9c:fe:2c:a6:99:d6:e0:40:6f:ec:20:45: 50:f2:3d:13:e0:4b:8e:db:36:d1:69:f0:05:9c:00:ae:36:c9: 8d:2d:f4:d2:2e:37:10:87:ba:38:00:46:cc:13:e4:07:2a:54: 22:fc:1c:b1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjIxMzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc4OENGNUE4Q0RGQUU1 RjVCNkEyNzUwMTc2REZDQTAzRUIyNEIzRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdvJ3o/9XTWqqCTguJnWp/XpZNTZkkbxd0PIpuday99KbL4C9f HDQZTPEKfqZMBMgnubwXI5/cCygwnfu8k7XnQfjYIsvgp6kpYf36unBW0C3rmaL9 JlyvPBby+nQfRl+cCWXRVi6Q8tMAObKORGOuVhzmk+dtKt82RVxQxD50QBdwCIN6 7JPNipNFgLM1xXZH2p0cBCMQqrCJ6RU+czPe260GFIaCJ/0ORQOkDP1cLUsdMYjI NKMvxiXeTd6h/vHI115oHQ7LLV336pMPGT/6ZCufx0D7T3n1TahohQxeREw+ZNCI KGjSzHhH59BhFo/tb+jOHIbSbP2HHVtR9W+RAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUeIz1qM365fW2onUBdt/KA+sks+owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2VJejFxTTM2NWZXMm9uVUJkdF9LQS1za3Mtby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYgwwDQYJKoZIhvcNAQELBQADggEBAK+oyviauwPCxKgmObZ8FOX0hApy QqGJSBAK9ccEAYpjyHuf+jltAAlwj2iHfUWjHw5oNSy7Nuj8e425FfG1cUfVglQ8 Fq5GUftRsA1OLY4F0iiddP6aGg2mYgngAv4daPzeExSKSa1a1UtMP9/oW9AdkfwK e4ug5A+t5mq6BbLJCyKPZhloBgR2689NSu0VIP30gDuNJ5WV3rYWw1w52bzdQGVd K6cNkoA7/xOuCSvnrXMTf0g0FvE6Ixfl6Z+1vLanWp60RqBvAJIzQJz+LKaZ1uBA b+wgRVDyPRPgS47bNtFp8AWcAK42yY0t9NIuNxCHujgARswT5AcqVCL8HLE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:22 2025 by rpki-client