$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gCJXRLPi8BHOy0Xg7OArBzjXWy8.roa File: gCJXRLPi8BHOy0Xg7OArBzjXWy8.roa (raw, json) Hash identifier: z1NUr9LYStgvfah30IGrbnGcIKMggIvtSFYfYt47gFs= Subject key identifier: 80:22:57:44:B3:E2:F0:11:CE:CB:45:E0:EC:E0:2B:07:38:D7:5B:2F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BBF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gCJXRLPi8BHOy0Xg7OArBzjXWy8.roa Signing time: Tue 01 Apr 2025 01:43:44 +0000 ROA not before: Tue 01 Apr 2025 01:43:44 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3007 (0xbbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:43:44 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=80225744B3E2F011CECB45E0ECE02B0738D75B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:5f:8c:be:b1:18:94:62:ad:51:ae:9f:d3: 05:98:29:43:22:07:1d:43:f7:dc:97:32:c9:8d:42: 1c:cf:f5:c5:5d:9b:02:bd:4c:80:6a:84:7e:e2:6c: 86:93:7e:26:2a:82:7f:84:e6:6b:49:64:d4:b8:1b: f1:0d:c4:04:09:a8:99:91:db:39:49:f5:4c:ff:0c: 7a:b1:6f:6a:d4:4d:d4:15:12:c9:2a:f6:5a:41:a0: d6:c5:79:0f:37:6f:33:da:62:41:00:55:a7:62:12: 70:5c:e3:7f:6c:2d:b0:7d:f3:ef:85:90:cc:92:0e: 6a:3b:ed:7f:57:0e:10:af:07:bc:6a:3d:e8:05:79: 83:39:a1:96:29:76:94:9d:27:50:71:2f:57:44:f6: 85:c4:a5:b6:01:24:27:01:fd:f0:71:b9:8b:22:3f: bd:cb:63:63:48:19:7b:31:de:f2:59:07:3a:1b:4e: 17:cf:b0:20:2e:bb:d4:c2:bb:4a:87:ed:7a:a4:24: f9:2e:eb:ee:e6:d2:5c:4a:74:71:95:22:49:ee:8c: 8a:77:bf:30:81:7a:b7:07:88:64:58:d4:8b:d2:52: 3b:83:03:68:96:3d:40:6e:b5:64:41:a0:7e:0c:92: bb:51:da:e7:e8:40:8a:43:c1:4e:b6:12:17:4f:e4: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:22:57:44:B3:E2:F0:11:CE:CB:45:E0:EC:E0:2B:07:38:D7:5B:2F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gCJXRLPi8BHOy0Xg7OArBzjXWy8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.192.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:22:63:3e:7b:1a:73:6b:a6:45:3e:9d:d7:43:18:f1:09:61: 10:7b:4b:e5:9b:36:e9:70:a6:eb:4d:f7:c9:48:c4:ee:6d:e1: 8b:d6:78:4e:fb:45:cf:58:0f:05:4c:40:86:a9:e0:70:93:09: b4:97:13:b2:6b:1a:4e:d7:d6:af:73:6f:09:ea:2b:6a:2a:ad: 56:df:39:f3:a7:15:6b:cb:fd:91:ba:a8:f5:88:5f:4f:39:94: 5e:02:9d:32:8b:f7:3f:58:8f:9d:5e:2c:2a:2c:4f:7f:4a:6a: 52:3c:26:5c:01:d6:4a:0c:47:6a:de:b1:8f:18:e4:00:2c:9c: 92:3e:3a:b2:ab:57:ca:86:1f:52:08:2c:74:3b:0b:2d:82:6c: b4:4a:c1:b1:79:11:32:29:ce:b2:36:c5:9b:46:46:e5:fc:e0: 6d:18:f4:7e:c3:1c:93:f8:58:2b:24:45:e8:fc:b5:b8:10:fb: 1b:3a:ce:ac:f8:34:fd:ad:98:62:a4:ae:84:38:06:ad:d9:da: 0b:8a:00:67:f7:fc:b8:e0:d8:88:d1:36:9a:53:0c:08:97:9b: c1:6c:21:73:b1:47:b8:de:c4:5d:2c:7b:60:51:84:dd:81:56: 75:8e:9f:3d:05:1c:79:fc:39:11:80:8d:31:39:bf:9e:53:38: 2f:fc:42:d7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC78wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQzNDRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgwMjI1NzQ0QjNFMkYw MTFDRUNCNDVFMEVDRTAyQjA3MzhENzVCMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEiV+MvrEYlGKtUa6f0wWYKUMiBx1D99yXMsmNQhzP9cVdmwK9 TIBqhH7ibIaTfiYqgn+E5mtJZNS4G/ENxAQJqJmR2zlJ9Uz/DHqxb2rUTdQVEskq 9lpBoNbFeQ83bzPaYkEAVadiEnBc439sLbB98++FkMySDmo77X9XDhCvB7xqPegF eYM5oZYpdpSdJ1BxL1dE9oXEpbYBJCcB/fBxuYsiP73LY2NIGXsx3vJZBzobThfP sCAuu9TCu0qH7XqkJPku6+7m0lxKdHGVIknujIp3vzCBercHiGRY1IvSUjuDA2iW PUButWRBoH4MkrtR2ufoQIpDwU62EhdP5Ks/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgCJXRLPi8BHOy0Xg7OArBzjXWy8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2dDSlhSTFBpOEJIT3kwWGc3T0FyQnpqWFd5OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYsAwDQYJKoZIhvcNAQELBQADggEBAJ0iYz57GnNrpkU+nddDGPEJYRB7 S+WbNulwputN98lIxO5t4YvWeE77Rc9YDwVMQIap4HCTCbSXE7JrGk7X1q9zbwnq K2oqrVbfOfOnFWvL/ZG6qPWIX085lF4CnTKL9z9Yj51eLCosT39KalI8JlwB1koM R2resY8Y5AAsnJI+OrKrV8qGH1IILHQ7Cy2CbLRKwbF5ETIpzrI2xZtGRuX84G0Y 9H7DHJP4WCskRej8tbgQ+xs6zqz4NP2tmGKkroQ4Bq3Z2guKAGf3/Ljg2IjRNppT DAiXm8FsIXOxR7jexF0se2BRhN2BVnWOnz0FHHn8ORGAjTE5v55TOC/8Qtc= -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:15 2025 by rpki-client