$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kCYZm9jaVuhQa9tSVSunQHh07tQ.roa File: kCYZm9jaVuhQa9tSVSunQHh07tQ.roa (raw, json) Hash identifier: dQNRQxXZdgqfpIcI5aV2g+HRdw0SuGXG9H91GsYI4q8= Subject key identifier: 90:26:19:9B:D8:DA:56:E8:50:6B:DB:52:55:2B:A7:40:78:74:EE:D4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D63 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kCYZm9jaVuhQa9tSVSunQHh07tQ.roa Signing time: Tue 01 Apr 2025 02:19:17 +0000 ROA not before: Tue 01 Apr 2025 02:19:17 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3427 (0xd63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:17 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=9026199BD8DA56E8506BDB52552BA7407874EED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c7:66:5a:49:13:6d:63:8c:7a:b5:8d:7b:4f: b8:ef:c8:69:ac:4c:1e:bd:de:c8:4f:5c:70:48:fc: 74:11:fa:84:17:fe:70:6c:fd:75:c0:bf:c0:77:42: ae:50:78:3f:e4:53:c7:7c:15:0a:58:61:b9:70:49: 4e:59:5b:78:cb:f0:6e:cf:13:15:b5:eb:0b:67:03: 8f:c6:7e:56:1f:ac:a3:7b:d1:65:0f:9c:15:9a:08: 07:d6:ff:75:30:eb:0a:f3:fb:43:86:1a:cf:16:2e: 0d:53:08:9b:47:32:2f:5f:d7:fa:87:53:07:b4:9f: 10:39:a9:25:42:1e:5c:9b:21:94:4f:f2:70:63:41: b3:87:8a:95:a3:9e:0f:58:f1:ba:df:48:29:5b:2d: 21:00:2f:6c:d9:e9:84:c1:c5:0b:8f:ed:b8:3e:11: 14:6a:b5:fb:e2:63:c1:1b:21:59:9f:d3:67:4d:c2: 11:29:5f:bc:f0:cc:3a:e8:97:46:96:2a:b8:8b:2b: 0e:cf:a1:03:30:a3:30:ce:91:c7:94:72:92:ba:0d: 3a:b1:48:f5:2f:41:1a:1a:5c:06:64:1a:4f:bd:7a: 5f:7d:7f:64:84:97:58:14:5e:e8:f5:d1:a9:7e:3f: 3a:85:eb:d3:67:77:3a:90:98:65:79:a9:6e:58:51: fc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:26:19:9B:D8:DA:56:E8:50:6B:DB:52:55:2B:A7:40:78:74:EE:D4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kCYZm9jaVuhQa9tSVSunQHh07tQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.204.0/23 Signature Algorithm: sha256WithRSAEncryption 75:70:38:50:98:43:a3:4b:ed:0c:6c:59:a7:f5:2c:f5:ea:44: 12:8a:76:88:43:26:2c:7c:f6:26:ba:25:4f:a9:98:90:f6:45: 7c:39:81:07:ed:22:bd:72:e9:43:31:fb:11:18:28:3d:fd:e2: f7:b1:c1:ff:ae:e9:1a:72:ec:19:82:ec:9d:3e:f8:ab:55:34: 27:fe:43:ba:16:24:2a:35:99:53:bb:d0:9e:b9:91:54:8b:3c: de:0a:74:37:82:08:d4:61:38:cb:a3:35:52:c5:a0:fe:0b:2b: 66:35:76:ec:22:6e:7e:76:1b:fb:15:6f:5c:f7:e6:e4:ad:7a: 9a:dc:b8:a9:8c:f4:72:df:b5:cc:f2:38:0c:3e:78:8c:89:2d: 72:df:21:18:9a:b7:57:60:75:02:8d:a6:d8:d8:a4:46:a2:e8: dc:92:9d:7b:d1:5c:66:41:3f:3d:19:f4:63:4f:66:cf:94:76: d3:b9:5f:1d:15:b7:3a:79:93:ba:0f:4a:9b:7d:e5:aa:e5:7d: c7:58:95:f7:3b:44:af:ce:fd:cd:25:16:42:0e:a1:46:dd:a7: 64:a7:00:3c:05:e6:76:03:16:19:20:a7:ac:cc:3c:d3:1c:76: 64:4b:dd:fd:00:33:1e:9b:af:ae:4c:d8:24:d7:84:33:47:4b: 0d:57:f2:48 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MTdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkwMjYxOTlCRDhEQTU2 RTg1MDZCREI1MjU1MkJBNzQwNzg3NEVFRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCax2ZaSRNtY4x6tY17T7jvyGmsTB693shPXHBI/HQR+oQX/nBs /XXAv8B3Qq5QeD/kU8d8FQpYYblwSU5ZW3jL8G7PExW16wtnA4/GflYfrKN70WUP nBWaCAfW/3Uw6wrz+0OGGs8WLg1TCJtHMi9f1/qHUwe0nxA5qSVCHlybIZRP8nBj QbOHipWjng9Y8brfSClbLSEAL2zZ6YTBxQuP7bg+ERRqtfviY8EbIVmf02dNwhEp X7zwzDrol0aWKriLKw7PoQMwozDOkceUcpK6DTqxSPUvQRoaXAZkGk+9el99f2SE l1gUXuj10al+PzqF69NndzqQmGV5qW5YUfy5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkCYZm9jaVuhQa9tSVSunQHh07tQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2tDWVptOWphVnVoUWE5dFNWU3VuUUhoMDd0US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaswwDQYJKoZIhvcNAQELBQADggEBAHVwOFCYQ6NL7QxsWaf1LPXqRBKK dohDJix89ia6JU+pmJD2RXw5gQftIr1y6UMx+xEYKD394vexwf+u6Rpy7BmC7J0+ +KtVNCf+Q7oWJCo1mVO70J65kVSLPN4KdDeCCNRhOMujNVLFoP4LK2Y1duwibn52 G/sVb1z35uSteprcuKmM9HLftczyOAw+eIyJLXLfIRiat1dgdQKNptjYpEai6NyS nXvRXGZBPz0Z9GNPZs+UdtO5Xx0Vtzp5k7oPSpt95arlfcdYlfc7RK/O/c0lFkIO oUbdp2SnADwF5nYDFhkgp6zMPNMcdmRL3f0AMx6br65M2CTXhDNHSw1X8kg= -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:01 2025 by rpki-client