$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/evcP7O69U8rN6xTRfL7xXnfGq6I.roa File: evcP7O69U8rN6xTRfL7xXnfGq6I.roa (raw, json) Hash identifier: 6PL1HvqhErhdKO/D9MiLS32iBa7tFEohq6Ci9Bs5R+4= Subject key identifier: 7A:F7:0F:EC:EE:BD:53:CA:CD:EB:14:D1:7C:BE:F1:5E:77:C6:AB:A2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B78 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/evcP7O69U8rN6xTRfL7xXnfGq6I.roa Signing time: Tue 01 Apr 2025 01:36:48 +0000 ROA not before: Tue 01 Apr 2025 01:36:48 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2936 (0xb78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:36:48 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=7AF70FECEEBD53CACDEB14D17CBEF15E77C6ABA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:2e:90:ac:24:e6:eb:84:17:e6:78:a4:ff: 48:d7:88:1a:d1:22:f4:b2:c5:db:86:e4:cb:a6:57: 01:37:63:e6:16:8e:3e:34:09:09:bc:cc:2b:fd:59: df:43:f4:9f:92:b0:8f:94:2d:63:62:54:60:f5:f7: 51:6c:b9:d8:6d:5b:5f:78:83:cb:b5:89:20:30:f2: 1f:b5:36:54:ad:3a:71:24:60:6e:bb:f8:ce:83:4f: a3:76:29:45:e4:60:38:8f:78:bc:b3:4e:19:28:48: 46:d3:b8:f2:08:34:99:48:7e:52:00:26:86:fc:50: d0:64:6b:bc:33:e1:cb:b4:42:1a:d8:0b:be:84:fd: fb:c6:3c:31:43:e3:55:32:ec:7a:12:3b:0d:1c:cd: d3:57:b2:19:43:66:81:27:af:b5:19:03:e4:60:6c: 92:6c:a0:a6:a4:93:89:40:14:e7:f8:cb:90:ab:cf: 00:8c:5e:6b:bb:09:27:47:64:6f:eb:8f:74:bd:80: e9:6a:d8:b6:8c:fa:d9:48:25:1b:dd:a9:bf:40:fe: 8a:b1:45:12:cf:64:6e:8d:35:7c:ec:33:22:a4:6b: ea:93:d6:f4:ff:d7:d3:4e:47:47:a6:51:ac:85:83: 1a:f7:c4:a6:96:aa:50:1a:14:39:8e:0d:93:d4:36: 6b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F7:0F:EC:EE:BD:53:CA:CD:EB:14:D1:7C:BE:F1:5E:77:C6:AB:A2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/evcP7O69U8rN6xTRfL7xXnfGq6I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.49.0/24 Signature Algorithm: sha256WithRSAEncryption d6:17:24:9e:01:56:ee:1d:45:5b:6e:87:6a:90:03:be:28:e1: 94:b2:0a:07:3c:d4:e8:70:70:dc:bb:93:64:ba:4c:01:93:38: 20:cc:ba:7a:38:61:3d:bd:ef:e9:95:b1:6e:fc:6b:88:14:4b: 08:6b:24:5e:6e:63:ac:d9:71:37:c1:dc:00:d6:e5:69:19:43: dc:6f:9d:90:e7:01:10:f3:bf:45:29:b0:53:f7:44:55:f1:26: c2:ea:be:f4:1a:87:7a:f0:5d:21:82:a9:a5:de:b3:f4:8d:9a: 39:14:1f:52:2b:1b:59:bb:c6:66:c2:6d:ba:b2:14:8d:75:e8: 7f:d1:15:53:61:9e:63:ac:9b:d9:29:e1:60:fc:16:24:06:79: 2e:28:c4:65:3b:6f:9b:68:7c:8c:0a:e2:5c:b8:d8:3c:08:84: 2f:9a:4e:ca:0d:ac:2d:c9:a5:4e:b3:89:2f:e1:51:21:20:d9: 49:62:bb:19:35:e2:8c:c2:7f:be:69:4c:09:69:da:6f:5d:57: 0b:ed:67:c5:55:db:40:c7:fa:a8:0d:94:76:7e:f3:6c:e3:c3: 37:a3:09:96:b0:04:f6:49:90:2e:50:70:83:fa:03:9e:51:5b: bc:34:a6:cc:be:94:dd:2e:63:51:25:17:66:1d:86:42:16:79: c0:2c:41:55 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM2NDhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdBRjcwRkVDRUVCRDUz Q0FDREVCMTREMTdDQkVGMTVFNzdDNkFCQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDElS6QrCTm64QX5nik/0jXiBrRIvSyxduG5MumVwE3Y+YWjj40 CQm8zCv9Wd9D9J+SsI+ULWNiVGD191FsudhtW194g8u1iSAw8h+1NlStOnEkYG67 +M6DT6N2KUXkYDiPeLyzThkoSEbTuPIINJlIflIAJob8UNBka7wz4cu0QhrYC76E /fvGPDFD41Uy7HoSOw0czdNXshlDZoEnr7UZA+RgbJJsoKakk4lAFOf4y5CrzwCM Xmu7CSdHZG/rj3S9gOlq2LaM+tlIJRvdqb9A/oqxRRLPZG6NNXzsMyKka+qT1vT/ 19NOR0emUayFgxr3xKaWqlAaFDmODZPUNmuvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUevcP7O69U8rN6xTRfL7xXnfGq6IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2V2Y1A3TzY5VThyTjZ4VFJmTDd4WG5mR3E2SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYDEwDQYJKoZIhvcNAQELBQADggEBANYXJJ4BVu4dRVtuh2qQA74o4ZSy Cgc81OhwcNy7k2S6TAGTOCDMuno4YT297+mVsW78a4gUSwhrJF5uY6zZcTfB3ADW 5WkZQ9xvnZDnARDzv0UpsFP3RFXxJsLqvvQah3rwXSGCqaXes/SNmjkUH1IrG1m7 xmbCbbqyFI116H/RFVNhnmOsm9kp4WD8FiQGeS4oxGU7b5tofIwK4ly42DwIhC+a TsoNrC3JpU6ziS/hUSEg2Uliuxk14ozCf75pTAlp2m9dVwvtZ8VV20DH+qgNlHZ+ 82zjwzejCZawBPZJkC5QcIP6A55RW7w0psy+lN0uY1ElF2YdhkIWecAsQVU= -----END CERTIFICATE-----Generated at Sat Apr 5 17:42:09 2025 by rpki-client