$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lYXO-FWeFn5FNOmQ1hEMDi9O0Ro.roa File: lYXO-FWeFn5FNOmQ1hEMDi9O0Ro.roa (raw, json) Hash identifier: vSRVnkBnjkixD+WcVSXUT/mw2n5ccW+HLVQOyN5SRmE= Subject key identifier: 95:85:CE:F8:55:9E:16:7E:45:34:E9:90:D6:11:0C:0E:2F:4E:D1:1A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C44 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lYXO-FWeFn5FNOmQ1hEMDi9O0Ro.roa Signing time: Tue 01 Apr 2025 01:57:18 +0000 ROA not before: Tue 01 Apr 2025 01:57:18 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:18 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=9585CEF8559E167E4534E990D6110C0E2F4ED11A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:bb:47:d3:ef:7f:95:2d:31:9f:63:29:d0: 8f:80:b4:73:2f:3d:07:ac:c5:16:43:bc:69:48:a7: db:31:a9:da:7a:f3:ca:0b:0a:35:75:0f:d5:26:90: 5f:e0:42:95:84:19:2b:02:62:d0:5c:fa:57:fd:84: 24:37:30:c6:88:fc:35:b4:c0:99:3d:c5:02:fc:98: e4:5d:9a:a2:86:b8:91:38:73:d6:d4:03:96:b0:12: 6f:c0:66:aa:87:cd:52:d4:aa:44:7f:e7:c5:d8:13: 4f:39:f4:ff:8f:cc:27:4c:84:91:e8:1f:57:04:78: 73:bb:e9:60:95:30:eb:c2:55:d0:a0:62:fe:e7:2d: a5:08:61:60:0f:8c:48:05:fa:8b:79:26:72:b4:af: 04:cf:cc:6b:2a:96:5d:f9:4d:b7:bf:56:b8:99:49: 27:af:55:10:4f:67:69:f0:79:61:04:d5:12:c8:d6: a8:e3:68:b6:23:21:f4:eb:fb:d5:a1:83:5a:e2:0c: 04:6a:24:4b:34:c4:9b:bf:7a:39:c0:a2:78:ef:12: c4:2d:70:0d:ae:3e:3a:fc:5a:ba:d3:a2:1c:79:f1: 7c:f2:66:5b:36:89:09:b0:8b:ae:96:b0:ab:a6:17: 60:d8:0e:fd:3a:2a:47:e2:20:4d:7a:b9:73:4f:0d: 75:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:85:CE:F8:55:9E:16:7E:45:34:E9:90:D6:11:0C:0E:2F:4E:D1:1A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lYXO-FWeFn5FNOmQ1hEMDi9O0Ro.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.38.0/23 Signature Algorithm: sha256WithRSAEncryption cc:52:aa:74:ef:4a:0c:62:50:4f:e6:ae:2d:d4:de:13:a4:b2: 25:db:15:cd:36:ae:c2:85:48:44:35:1e:a1:81:9d:39:28:c4: 41:c1:ae:80:3e:bc:81:25:3a:57:f4:b8:20:de:b3:d4:32:53: 68:3a:bb:70:da:76:2b:ac:ec:0f:8c:2d:86:59:8b:7c:a9:70: bb:96:aa:e9:87:72:48:3a:4c:ce:10:28:f8:b8:17:65:94:cf: 78:ed:9a:6c:3b:ba:7e:53:ea:6c:16:a1:0a:d6:d4:3b:15:2f: 1f:6f:ea:e2:e8:12:ac:cb:1e:a9:e6:80:a8:e7:1d:a7:6e:9d: 31:f5:5e:10:89:18:c2:c3:a7:88:b4:3f:86:f1:1b:01:62:33: c9:5c:04:44:0b:f9:f2:c6:9f:7d:47:2b:7b:ec:3f:7a:6b:63: c1:96:6a:9f:71:57:b0:13:d8:ee:70:76:9d:36:cc:ae:62:9e: 61:55:0e:33:76:d4:a0:f2:dd:60:2b:86:e4:5c:00:94:99:8e: 6b:03:a3:54:16:6f:05:40:7b:a2:b4:91:cd:94:a7:a1:fc:8c: ac:1a:51:60:b6:91:d7:5c:e6:29:1f:67:8f:0d:0a:c6:dc:36: 45:74:fa:83:24:89:78:f5:24:18:8e:88:14:46:51:e6:9b:b6: e8:04:0b:42 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MThaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk1ODVDRUY4NTU5RTE2 N0U0NTM0RTk5MEQ2MTEwQzBFMkY0RUQxMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4MLtH0+9/lS0xn2Mp0I+AtHMvPQesxRZDvGlIp9sxqdp688oL CjV1D9UmkF/gQpWEGSsCYtBc+lf9hCQ3MMaI/DW0wJk9xQL8mORdmqKGuJE4c9bU A5awEm/AZqqHzVLUqkR/58XYE0859P+PzCdMhJHoH1cEeHO76WCVMOvCVdCgYv7n LaUIYWAPjEgF+ot5JnK0rwTPzGsqll35Tbe/VriZSSevVRBPZ2nweWEE1RLI1qjj aLYjIfTr+9Whg1riDARqJEs0xJu/ejnAonjvEsQtcA2uPjr8WrrTohx58XzyZls2 iQmwi66WsKumF2DYDv06KkfiIE16uXNPDXXnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlYXO+FWeFn5FNOmQ1hEMDi9O0RowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2xZWE8tRldlRm41Rk5PbVExaEVNRGk5TzBSby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYCYwDQYJKoZIhvcNAQELBQADggEBAMxSqnTvSgxiUE/mri3U3hOksiXb Fc02rsKFSEQ1HqGBnTkoxEHBroA+vIElOlf0uCDes9QyU2g6u3Dadius7A+MLYZZ i3ypcLuWqumHckg6TM4QKPi4F2WUz3jtmmw7un5T6mwWoQrW1DsVLx9v6uLoEqzL HqnmgKjnHadunTH1XhCJGMLDp4i0P4bxGwFiM8lcBEQL+fLGn31HK3vsP3prY8GW ap9xV7AT2O5wdp02zK5inmFVDjN21KDy3WArhuRcAJSZjmsDo1QWbwVAe6K0kc2U p6H8jKwaUWC2kddc5ikfZ48NCsbcNkV0+oMkiXj1JBiOiBRGUeabtugEC0I= -----END CERTIFICATE-----Generated at Sat Apr 5 17:27:39 2025 by rpki-client