$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kzou_BENNoZ6k4YaBAWZYKYe6Hc.roa File: kzou_BENNoZ6k4YaBAWZYKYe6Hc.roa (raw, json) Hash identifier: gQjdh2iFyHiYHytahQ48ZnrT2xB0Sec4oDMdLHLEQmY= Subject key identifier: 93:3A:2E:FC:11:0D:36:86:7A:93:86:1A:04:05:99:60:A6:1E:E8:77 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CEC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kzou_BENNoZ6k4YaBAWZYKYe6Hc.roa Signing time: Tue 01 Apr 2025 02:09:24 +0000 ROA not before: Tue 01 Apr 2025 02:09:24 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.102.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3308 (0xcec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:24 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=933A2EFC110D36867A93861A04059960A61EE877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:df:56:b8:ca:4d:fc:92:05:5c:d9:82:33: f6:f1:59:4a:22:66:d8:48:2d:67:f7:a6:79:62:2b: 98:56:a3:35:1f:9c:04:b9:88:9d:a1:15:c7:57:bd: d8:87:75:15:9b:77:9e:e8:8e:e9:24:c9:7a:43:23: 15:66:17:45:5c:59:81:5b:e4:0a:87:49:be:f1:7c: c6:86:ad:4d:3f:21:f4:bf:8c:02:65:c8:de:ee:c8: 3f:cb:98:b0:3a:a8:0f:cf:8f:63:39:ab:28:2e:d5: 50:53:29:dc:01:29:55:64:61:3a:6b:f1:59:0a:03: 85:75:78:5c:ff:89:d9:d7:3e:d4:5c:bd:5b:3a:a7: a6:67:14:1d:af:9e:c5:12:a2:c5:0b:a8:b2:28:1b: c9:26:3d:f0:49:78:6c:8a:7d:50:a8:93:1b:df:79: dd:97:2b:10:5d:1a:73:40:e4:2f:ad:28:e5:81:0c: 7d:95:23:19:ff:77:1a:6e:47:e3:2b:fb:c4:88:9c: 76:1e:e5:43:cb:ef:3a:e7:50:51:ea:c5:4e:9a:54: 48:37:89:1d:a8:39:be:c2:8f:70:38:be:fb:30:93: 3d:f6:4c:0d:7c:16:d9:60:e6:d7:11:db:eb:db:d6: 4b:f0:a5:ee:94:9c:b5:ca:b6:85:77:da:fd:ea:a7: c0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3A:2E:FC:11:0D:36:86:7A:93:86:1A:04:05:99:60:A6:1E:E8:77 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kzou_BENNoZ6k4YaBAWZYKYe6Hc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.154.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:7c:3c:17:5d:a7:fe:1c:40:e5:c8:cb:22:3e:9f:a0:c0:17: ca:a4:66:b5:27:2d:68:62:50:22:9d:86:d8:d5:6a:cc:b9:75: ee:8f:ce:3f:98:46:16:5a:34:ad:fd:8a:d3:dc:d0:fe:10:1c: cf:c4:6d:e8:df:3c:3a:ea:30:81:f1:3b:8f:fa:34:3c:5e:ee: b1:79:4a:2a:4d:8c:3a:3a:2d:a4:38:e5:9b:b3:a5:18:47:ed: fd:e8:fe:4b:e4:ea:a0:6a:51:9a:3b:65:d8:95:fe:f4:54:5b: 68:58:03:e4:c4:5b:34:8d:a0:8f:95:ce:54:56:78:5b:38:4a: 15:4d:6d:5a:ed:99:9a:cc:49:ef:1f:57:a9:5e:be:66:17:e2: bf:36:ff:0d:3a:c3:c2:66:8e:60:cc:52:f9:05:33:cc:21:96: b7:8f:cf:06:91:76:f7:9a:e0:0a:33:e1:3c:f1:45:f8:f5:23: 05:7a:08:72:2e:e9:51:3a:f8:25:6c:ab:82:7b:e0:1b:61:8e: cc:10:74:10:fd:58:2c:b4:99:1f:34:f7:03:97:5b:2b:98:cc: 29:94:35:fb:55:37:57:47:62:97:e8:5f:97:8f:02:58:bc:bb: 7f:e8:83:c7:6f:cd:49:70:09:a5:1e:28:1c:e5:6b:20:20:e4: e5:02:5b:89 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MjRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkzM0EyRUZDMTEwRDM2 ODY3QTkzODYxQTA0MDU5OTYwQTYxRUU4NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB5N9WuMpN/JIFXNmCM/bxWUoiZthILWf3pnliK5hWozUfnAS5 iJ2hFcdXvdiHdRWbd57ojukkyXpDIxVmF0VcWYFb5AqHSb7xfMaGrU0/IfS/jAJl yN7uyD/LmLA6qA/Pj2M5qygu1VBTKdwBKVVkYTpr8VkKA4V1eFz/idnXPtRcvVs6 p6ZnFB2vnsUSosULqLIoG8kmPfBJeGyKfVCokxvfed2XKxBdGnNA5C+tKOWBDH2V Ixn/dxpuR+Mr+8SInHYe5UPL7zrnUFHqxU6aVEg3iR2oOb7Cj3A4vvswkz32TA18 Ftlg5tcR2+vb1kvwpe6UnLXKtoV32v3qp8DJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkzou/BENNoZ6k4YaBAWZYKYe6HcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2t6b3VfQkVOTm9aNms0WWFCQVdaWUtZZTZIYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExZpowDQYJKoZIhvcNAQELBQADggEBAAp8PBddp/4cQOXIyyI+n6DAF8qk ZrUnLWhiUCKdhtjVasy5de6Pzj+YRhZaNK39itPc0P4QHM/EbejfPDrqMIHxO4/6 NDxe7rF5SipNjDo6LaQ45ZuzpRhH7f3o/kvk6qBqUZo7ZdiV/vRUW2hYA+TEWzSN oI+VzlRWeFs4ShVNbVrtmZrMSe8fV6levmYX4r82/w06w8JmjmDMUvkFM8whlreP zwaRdvea4Aoz4TzxRfj1IwV6CHIu6VE6+CVsq4J74BthjswQdBD9WCy0mR809wOX WyuYzCmUNftVN1dHYpfoX5ePAli8u3/og8dvzUlwCaUeKBzlayAg5OUCW4k= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:01 2025 by rpki-client