$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fNXF-AtEjusg0av4Dl_dDfE6-n8.roa File: fNXF-AtEjusg0av4Dl_dDfE6-n8.roa (raw, json) Hash identifier: XXp3ZpOD9fFUmXEWXB/Th6ZEZYTgs3K+IwIQVcYDrWE= Subject key identifier: 7C:D5:C5:F8:0B:44:8E:EB:20:D1:AB:F8:0E:5F:DD:0D:F1:3A:FA:7F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D9A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fNXF-AtEjusg0av4Dl_dDfE6-n8.roa Signing time: Tue 01 Apr 2025 02:21:38 +0000 ROA not before: Tue 01 Apr 2025 02:21:38 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3482 (0xd9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:21:38 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=7CD5C5F80B448EEB20D1ABF80E5FDD0DF13AFA7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:22:a7:6f:f0:78:6f:4c:2d:c5:44:34:63:a3: fe:b3:e6:87:58:06:66:d5:11:6b:d9:23:23:95:6e: 07:d2:d6:85:a3:b0:6f:cd:b1:77:61:8f:39:af:a6: 39:71:ff:12:4f:08:3e:f6:6f:fe:0f:33:ed:d4:c9: 95:6d:67:22:1e:d8:06:66:3c:aa:5f:26:9a:58:fc: a1:6d:d8:42:7d:76:d6:2c:f5:68:83:4e:29:88:17: 26:7a:dd:97:f7:af:0e:37:43:02:0f:09:a9:eb:bf: ee:f3:22:2d:cc:c4:e1:09:51:b6:08:a8:17:88:93: 0a:85:29:07:7e:71:8f:9a:a6:72:bc:2f:34:24:24: 65:ae:b9:ac:12:c4:66:dd:75:0f:0b:64:0a:53:fc: 6c:dd:af:bf:4e:b9:2a:8f:a0:c6:d6:cb:9d:6f:e1: 2e:75:0c:2b:78:6a:7f:71:75:6f:d0:62:22:e8:b0: f0:a6:29:b5:38:72:83:d3:6c:85:fc:e3:c0:47:d4: 13:18:f0:ee:8c:22:14:bf:d0:bc:78:8c:31:4a:c3: 28:3c:ce:fb:b7:e6:54:6c:67:1d:c3:d3:93:a0:26: c4:2e:c3:ee:62:ae:75:d9:a1:6f:7c:b3:49:c9:1b: 12:bd:8f:41:e8:41:a1:1d:27:01:81:15:2d:f8:9e: 4d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D5:C5:F8:0B:44:8E:EB:20:D1:AB:F8:0E:5F:DD:0D:F1:3A:FA:7F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fNXF-AtEjusg0av4Dl_dDfE6-n8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.22.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:4b:dc:4b:f7:f3:e1:96:e3:d7:de:c5:be:da:44:6b:a2:2c: 39:79:dc:30:fb:64:10:cc:9d:ab:6c:ac:31:49:40:11:4f:fc: 21:be:b0:87:1a:38:2e:37:03:77:a0:e8:b8:21:35:40:3a:d2: 1d:fd:cf:ed:76:62:04:1d:04:d0:85:cf:8c:64:0a:b1:cf:55: e1:3d:da:bc:f6:76:d1:17:68:c9:ea:98:f2:e7:6a:e9:c9:0e: 89:12:bc:b7:3a:3f:8d:03:e2:fa:27:14:9a:32:53:64:9c:61: 0d:fe:08:24:d4:14:bb:24:7c:85:9a:10:b5:65:30:d7:5f:6b: f3:ba:a1:46:69:41:74:fb:a5:8f:c0:e4:fd:bb:0e:bc:f2:c4: 78:09:c7:48:1c:14:5e:f0:29:72:42:8e:13:57:89:13:fa:77: 5d:8d:d8:2d:a8:4c:62:5a:29:2f:5c:10:0e:48:d2:8a:a5:4e: f1:16:00:be:70:52:fd:d0:3e:28:72:bc:82:3b:14:6f:d2:ae: e8:0d:dd:37:5a:a5:13:8d:43:ca:74:0f:35:ab:27:e6:97:24: 87:a1:a1:5b:28:ff:a9:00:3a:66:b9:e7:61:16:b4:e9:d8:10: 90:13:b3:d1:70:32:c8:68:20:57:4e:4e:a1:1c:02:03:e4:e0: eb:03:d2:95 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjIxMzhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdDRDVDNUY4MEI0NDhF RUIyMEQxQUJGODBFNUZERDBERjEzQUZBN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWIqdv8HhvTC3FRDRjo/6z5odYBmbVEWvZIyOVbgfS1oWjsG/N sXdhjzmvpjlx/xJPCD72b/4PM+3UyZVtZyIe2AZmPKpfJppY/KFt2EJ9dtYs9WiD TimIFyZ63Zf3rw43QwIPCanrv+7zIi3MxOEJUbYIqBeIkwqFKQd+cY+apnK8LzQk JGWuuawSxGbddQ8LZApT/Gzdr79OuSqPoMbWy51v4S51DCt4an9xdW/QYiLosPCm KbU4coPTbIX848BH1BMY8O6MIhS/0Lx4jDFKwyg8zvu35lRsZx3D05OgJsQuw+5i rnXZoW98s0nJGxK9j0HoQaEdJwGBFS34nk27AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfNXF+AtEjusg0av4Dl/dDfE6+n8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ZOWEYtQXRFanVzZzBhdjREbF9kRGZFNi1uOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaBYwDQYJKoZIhvcNAQELBQADggEBACtL3Ev38+GW49fexb7aRGuiLDl5 3DD7ZBDMnatsrDFJQBFP/CG+sIcaOC43A3eg6LghNUA60h39z+12YgQdBNCFz4xk CrHPVeE92rz2dtEXaMnqmPLnaunJDokSvLc6P40D4vonFJoyU2ScYQ3+CCTUFLsk fIWaELVlMNdfa/O6oUZpQXT7pY/A5P27DrzyxHgJx0gcFF7wKXJCjhNXiRP6d12N 2C2oTGJaKS9cEA5I0oqlTvEWAL5wUv3QPihyvII7FG/SrugN3TdapRONQ8p0DzWr J+aXJIehoVso/6kAOma552EWtOnYEJATs9FwMshoIFdOTqEcAgPk4OsD0pU= -----END CERTIFICATE-----Generated at Sun Apr 6 05:44:13 2025 by rpki-client