$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gaCkVJraJmzvQhrdoV1Wwq7FmiM.roa File: gaCkVJraJmzvQhrdoV1Wwq7FmiM.roa (raw, json) Hash identifier: 1GMb87R42jwMFs5RNISWLqJAYRCSlqMYzTRExjUTbqo= Subject key identifier: 81:A0:A4:54:9A:DA:26:6C:EF:42:1A:DD:A1:5D:56:C2:AE:C5:9A:23 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BC9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gaCkVJraJmzvQhrdoV1Wwq7FmiM.roa Signing time: Tue 01 Apr 2025 01:43:49 +0000 ROA not before: Tue 01 Apr 2025 01:43:49 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3017 (0xbc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:43:49 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=81A0A4549ADA266CEF421ADDA15D56C2AEC59A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:66:76:4e:25:9e:f7:35:88:bf:41:80:31: b8:76:2b:18:15:1b:7b:3d:02:84:7b:f4:e8:b4:9b: 46:ae:98:3a:93:b7:73:b8:47:85:2d:a8:e3:c2:11: 99:ad:e8:9b:ad:43:08:9f:77:25:72:35:03:14:69: 44:aa:2d:9e:2e:7d:82:9e:f6:6f:31:7b:b5:5b:54: d7:ba:b8:3a:52:1e:ee:e3:cf:df:16:e5:5f:37:e3: 3f:1b:c2:7f:eb:36:e9:07:3d:08:99:64:a4:65:03: b2:f9:7e:f5:70:bc:9f:8f:a7:03:7e:4b:f9:6d:6b: f9:2c:1a:08:35:78:03:9a:6c:82:dc:e7:12:4c:3f: c6:46:9d:4f:74:95:a3:02:0f:ca:8f:70:02:30:eb: 98:40:02:9f:ef:3b:ef:b6:ee:05:8c:1b:12:b9:c5: 9a:d1:f4:1a:ff:ae:64:13:0e:9f:4e:31:c0:cf:ce: 57:62:c9:55:73:d2:9a:76:3c:15:f5:35:5b:4a:8c: f1:d1:07:ac:5e:9d:c4:92:ae:c0:18:eb:0d:3c:af: a2:eb:47:9a:86:d9:38:dd:ab:fc:93:ea:76:05:01: 13:23:06:18:b8:34:7e:70:bc:6b:2d:a2:63:48:ce: 49:24:9f:97:12:a5:c2:8f:e3:7b:c1:79:c1:53:84: d6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A0:A4:54:9A:DA:26:6C:EF:42:1A:DD:A1:5D:56:C2:AE:C5:9A:23 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gaCkVJraJmzvQhrdoV1Wwq7FmiM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.48.0/22 Signature Algorithm: sha256WithRSAEncryption d7:84:69:c2:89:ad:70:3a:e4:30:e6:85:75:05:68:fc:d0:9a: 6d:32:3b:4f:c9:b0:3a:ef:86:12:a9:bc:07:2f:f4:70:5c:69: c1:de:a1:29:35:3c:6d:b0:e5:4e:1b:8c:9a:6e:08:bc:ff:90: 81:e3:82:8e:92:cd:09:e4:0b:da:15:84:ca:b8:d7:95:28:fc: e9:5c:6f:13:40:f2:75:a1:0f:95:71:23:b0:57:1f:df:bf:ca: 25:ec:10:7b:f4:59:f8:d0:91:3c:9c:ca:10:de:46:4c:a7:5d: e9:f4:48:83:d7:57:14:33:32:09:20:8b:b1:2f:1b:f7:f6:e0: 37:8e:7f:ad:34:54:de:ce:6b:82:17:24:d0:7d:68:54:cd:6d: 1b:25:e8:a1:05:12:7b:94:eb:43:92:cc:11:9f:09:37:bd:a2: 4c:d1:8a:09:cb:a7:66:07:59:87:3a:8d:f4:f7:41:1f:50:34: 38:e9:4e:41:c7:5c:59:3c:19:05:33:19:31:b1:df:7f:89:b1: cc:a0:a0:c1:62:ca:e7:a2:96:8a:8c:55:b0:d9:61:1b:45:6e: 31:dc:5f:55:57:8d:1e:3a:09:dc:2a:24:4f:01:ff:2e:2c:93: 91:04:1b:48:5e:6e:c4:10:e8:b8:f9:e1:53:1d:e8:b3:08:25: a1:0e:75:fc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC8kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQzNDlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgxQTBBNDU0OUFEQTI2 NkNFRjQyMUFEREExNUQ1NkMyQUVDNTlBMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIc2Z2TiWe9zWIv0GAMbh2KxgVG3s9AoR79Oi0m0aumDqTt3O4 R4UtqOPCEZmt6JutQwifdyVyNQMUaUSqLZ4ufYKe9m8xe7VbVNe6uDpSHu7jz98W 5V834z8bwn/rNukHPQiZZKRlA7L5fvVwvJ+PpwN+S/lta/ksGgg1eAOabILc5xJM P8ZGnU90laMCD8qPcAIw65hAAp/vO++27gWMGxK5xZrR9Br/rmQTDp9OMcDPzldi yVVz0pp2PBX1NVtKjPHRB6xencSSrsAY6w08r6LrR5qG2Tjdq/yT6nYFARMjBhi4 NH5wvGstomNIzkkkn5cSpcKP43vBecFThNZ5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgaCkVJraJmzvQhrdoV1Wwq7FmiMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2dhQ2tWSnJhSm16dlFocmRvVjFXd3E3Rm1pTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxaDAwDQYJKoZIhvcNAQELBQADggEBANeEacKJrXA65DDmhXUFaPzQmm0y O0/JsDrvhhKpvAcv9HBcacHeoSk1PG2w5U4bjJpuCLz/kIHjgo6SzQnkC9oVhMq4 15Uo/OlcbxNA8nWhD5VxI7BXH9+/yiXsEHv0WfjQkTycyhDeRkynXen0SIPXVxQz Mgkgi7EvG/f24DeOf600VN7Oa4IXJNB9aFTNbRsl6KEFEnuU60OSzBGfCTe9okzR ignLp2YHWYc6jfT3QR9QNDjpTkHHXFk8GQUzGTGx33+JscygoMFiyueiloqMVbDZ YRtFbjHcX1VXjR46CdwqJE8B/y4sk5EEG0hebsQQ6Lj54VMd6LMIJaEOdfw= -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:20 2025 by rpki-client