$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n5K1CNSKW5qmUrkheINB21IMtAg.roa File: n5K1CNSKW5qmUrkheINB21IMtAg.roa (raw, json) Hash identifier: 0aOqcjwPHcgP2TcZSgv1WnNeGPYM5VxBroEV1P5Ls3k= Subject key identifier: 9F:92:B5:08:D4:8A:5B:9A:A6:52:B9:21:78:83:41:DB:52:0C:B4:08 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CC8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n5K1CNSKW5qmUrkheINB21IMtAg.roa Signing time: Tue 01 Apr 2025 02:09:09 +0000 ROA not before: Tue 01 Apr 2025 02:09:09 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:09 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=9F92B508D48A5B9AA652B921788341DB520CB408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:a5:a3:02:d4:3f:62:af:19:1a:30:ea:ee: 0b:83:26:c6:66:be:15:08:e1:58:26:f0:f9:63:87: 0e:81:a4:c7:f3:9f:bb:ce:aa:9d:cc:12:54:f9:45: 33:1b:61:70:e6:c0:75:96:ee:d1:88:b8:a7:a1:ab: 64:fe:47:d1:05:d1:23:b3:47:0e:9c:a2:2b:90:fb: 74:bc:49:0e:09:eb:19:86:f2:6b:2c:ff:10:9f:59: 98:8f:d6:75:d7:d0:6f:0f:c4:f1:4b:28:ee:60:ee: 16:6a:ad:7b:59:0d:c5:9d:3b:a6:5a:db:fa:ab:69: c0:9c:eb:d9:af:11:ba:d8:2c:ae:a0:9a:dd:d9:5d: 32:90:5d:66:f1:e4:ba:8a:ea:c5:91:78:87:c5:0e: 09:4f:30:24:25:0d:e0:8d:1f:98:42:11:f8:6a:94: 1f:91:29:be:49:42:aa:b7:fe:6f:42:83:61:88:de: a1:7c:2a:56:b9:0a:1b:99:44:74:dc:fa:77:25:37: 84:d3:f6:1a:d6:cf:55:4a:bd:03:14:ce:43:dd:10: 26:11:38:d1:95:35:cd:71:5f:35:8c:cd:01:dc:0d: 33:d1:8b:85:76:ed:a5:ae:aa:1a:85:bd:f1:b2:59: 88:a9:08:07:ea:ee:37:95:8f:89:48:76:5b:fe:13: dc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:92:B5:08:D4:8A:5B:9A:A6:52:B9:21:78:83:41:DB:52:0C:B4:08 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n5K1CNSKW5qmUrkheINB21IMtAg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.170.0/24 Signature Algorithm: sha256WithRSAEncryption d1:d6:58:fa:01:7d:0f:13:27:e6:60:f0:83:b3:43:1d:d1:f6: 85:e6:21:12:a6:74:1b:c3:a8:f8:08:4a:6a:39:13:e3:a6:f8: 11:7b:4f:c9:2d:fd:c7:c9:9e:65:53:c8:64:7e:bd:f5:54:95: 4d:89:75:0c:28:cb:64:06:70:ce:e4:2f:7f:b7:f2:91:1d:d8: 12:4a:7c:e4:cf:2f:5b:18:85:e9:19:1c:12:93:43:c1:cc:fa: 6a:b5:65:07:98:61:9e:d4:43:06:0a:29:4b:19:56:fb:c5:82: b5:d2:d2:f7:a3:c9:73:db:36:cd:25:ad:4d:a5:5d:5b:69:ac: ff:a6:da:e6:67:68:9f:bd:79:b3:18:f5:69:4d:41:ab:c6:1d: eb:4b:c6:1c:9c:01:b0:35:e2:eb:f6:88:e4:81:72:af:56:4b: e2:9b:43:4b:ad:0c:dd:dd:83:49:16:53:a1:5e:5b:4c:89:60: 16:ed:fb:35:1d:8c:00:39:6e:23:af:e6:09:3a:86:2f:53:5d: 06:f8:b8:5e:34:ae:70:5a:1c:26:7c:15:6d:ce:01:5d:66:01: eb:02:6d:33:17:02:b5:b2:70:3c:d7:1e:cc:e3:97:a2:ba:6a: 66:c6:89:3a:06:8b:f4:31:a5:22:a8:de:84:c0:ab:7a:cd:5a: ff:5f:db:0c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MDlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlGOTJCNTA4RDQ4QTVC OUFBNjUyQjkyMTc4ODM0MURCNTIwQ0I0MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5HqWjAtQ/Yq8ZGjDq7guDJsZmvhUI4Vgm8Pljhw6BpMfzn7vO qp3MElT5RTMbYXDmwHWW7tGIuKehq2T+R9EF0SOzRw6coiuQ+3S8SQ4J6xmG8mss /xCfWZiP1nXX0G8PxPFLKO5g7hZqrXtZDcWdO6Za2/qracCc69mvEbrYLK6gmt3Z XTKQXWbx5LqK6sWReIfFDglPMCQlDeCNH5hCEfhqlB+RKb5JQqq3/m9Cg2GI3qF8 Kla5ChuZRHTc+nclN4TT9hrWz1VKvQMUzkPdECYRONGVNc1xXzWMzQHcDTPRi4V2 7aWuqhqFvfGyWYipCAfq7jeVj4lIdlv+E9zjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUn5K1CNSKW5qmUrkheINB21IMtAgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L241SzFDTlNLVzVxbVVya2hlSU5CMjFJTXRBZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaqowDQYJKoZIhvcNAQELBQADggEBANHWWPoBfQ8TJ+Zg8IOzQx3R9oXm IRKmdBvDqPgISmo5E+Om+BF7T8kt/cfJnmVTyGR+vfVUlU2JdQwoy2QGcM7kL3+3 8pEd2BJKfOTPL1sYhekZHBKTQ8HM+mq1ZQeYYZ7UQwYKKUsZVvvFgrXS0vejyXPb Ns0lrU2lXVtprP+m2uZnaJ+9ebMY9WlNQavGHetLxhycAbA14uv2iOSBcq9WS+Kb Q0utDN3dg0kWU6FeW0yJYBbt+zUdjAA5biOv5gk6hi9TXQb4uF40rnBaHCZ8FW3O AV1mAesCbTMXArWycDzXHszjl6K6ambGiToGi/QxpSKo3oTAq3rNWv9f2ww= -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:27 2025 by rpki-client