$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nKK7IBqMCGi1ZaScsgbszGl_dzs.roa File: nKK7IBqMCGi1ZaScsgbszGl_dzs.roa (raw, json) Hash identifier: wu2D4Zd6HXWsYM0qK1pS2eQE3hVbXwoHjMYH4a9F69w= Subject key identifier: 9C:A2:BB:20:1A:8C:08:68:B5:65:A4:9C:B2:06:EC:CC:69:7F:77:3B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C5E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nKK7IBqMCGi1ZaScsgbszGl_dzs.roa Signing time: Tue 01 Apr 2025 02:00:26 +0000 ROA not before: Tue 01 Apr 2025 02:00:26 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3166 (0xc5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:00:26 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=9CA2BB201A8C0868B565A49CB206ECCC697F773B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:82:39:f9:a5:da:ae:b4:22:d1:3c:99:be: 11:f2:58:82:b7:27:d3:4b:6f:20:a3:70:11:26:50: 25:82:65:e6:0d:f5:34:31:0d:78:84:cf:0b:8e:4c: 15:b5:d8:db:d6:bc:3e:a7:f4:46:6f:7c:4a:ad:39: 74:db:68:96:92:63:86:c8:11:57:02:ca:67:91:78: db:56:e9:e7:5e:30:09:12:80:50:98:1e:bd:87:ee: aa:1a:3b:0e:40:00:ae:14:d4:01:8d:3d:6c:5b:04: be:85:25:2e:df:40:6b:c0:ff:b3:ec:4e:df:43:90: 1e:a5:3e:d9:39:39:88:6c:d1:36:74:68:a0:23:c2: dd:0e:98:5a:b5:45:36:fb:2c:46:21:a7:19:13:3c: a4:3c:3d:9c:a7:e0:58:14:30:05:a1:63:fa:2b:2f: 48:a7:2f:c8:0a:53:7b:a6:02:6d:a8:47:be:ca:15: 95:32:74:00:26:c2:3d:af:a2:15:18:6f:4d:7c:e7: 83:8e:58:40:e1:60:2c:16:96:61:f6:4d:b6:b6:72: 0c:f0:6d:d3:45:61:ef:71:e0:04:8e:b5:69:6d:82: 28:a3:60:7d:6f:28:d4:0d:5c:48:c1:8d:0c:c8:5b: d7:2c:62:41:7d:70:64:04:70:cf:4d:06:03:2a:8e: b7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A2:BB:20:1A:8C:08:68:B5:65:A4:9C:B2:06:EC:CC:69:7F:77:3B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nKK7IBqMCGi1ZaScsgbszGl_dzs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.188.0/23 Signature Algorithm: sha256WithRSAEncryption c8:7b:81:2b:97:4f:fb:fb:cd:7d:15:63:9a:1c:cf:b0:77:dc: 89:ec:5b:6c:cf:6c:9d:1e:2e:df:63:0e:7d:a8:29:4a:cd:51: 80:2d:75:34:fd:aa:28:11:ae:a2:8b:6e:1a:64:b8:b0:82:83: 4b:c9:b0:17:8c:df:d0:5b:5f:e1:7d:8b:98:38:72:b4:88:66: 8b:fd:58:fd:2f:44:8c:1d:96:f5:eb:7c:4e:97:49:81:63:eb: 63:33:f0:fe:eb:ae:6d:6f:24:8b:91:12:15:33:7d:83:79:57: 86:86:38:84:38:a4:17:45:fc:7e:2f:a3:fc:21:84:67:b9:00: aa:f1:1e:2c:e9:2f:3b:d7:80:8c:6f:43:a5:f1:6e:f2:c0:95: 98:81:33:47:3b:8d:f5:74:fc:22:df:c8:9c:90:95:17:5d:b1: b7:6d:b5:38:a8:1a:f6:a0:ec:43:82:0b:d1:07:4b:f0:b4:da: 94:ea:6f:b5:e1:07:80:29:a4:40:36:e3:ae:07:63:70:a5:34: 7d:ff:bd:f9:a8:8f:f5:16:ea:84:a4:78:3c:07:e9:e2:3c:ef: cb:15:c5:aa:c2:35:6f:33:7e:9b:66:46:d0:50:cb:04:bb:a1: ed:3b:7a:d9:16:53:7c:04:7c:1b:7f:b4:24:dd:28:4c:d8:c4: 04:49:af:93 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAwMjZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlDQTJCQjIwMUE4QzA4 NjhCNTY1QTQ5Q0IyMDZFQ0NDNjk3Rjc3M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYo4I5+aXarrQi0TyZvhHyWIK3J9NLbyCjcBEmUCWCZeYN9TQx DXiEzwuOTBW12NvWvD6n9EZvfEqtOXTbaJaSY4bIEVcCymeReNtW6edeMAkSgFCY Hr2H7qoaOw5AAK4U1AGNPWxbBL6FJS7fQGvA/7PsTt9DkB6lPtk5OYhs0TZ0aKAj wt0OmFq1RTb7LEYhpxkTPKQ8PZyn4FgUMAWhY/orL0inL8gKU3umAm2oR77KFZUy dAAmwj2vohUYb01854OOWEDhYCwWlmH2Tba2cgzwbdNFYe9x4ASOtWltgiijYH1v KNQNXEjBjQzIW9csYkF9cGQEcM9NBgMqjrcLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnKK7IBqMCGi1ZaScsgbszGl/dzswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L25LSzdJQnFNQ0dpMVphU2NzZ2JzekdsX2R6cy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExarwwDQYJKoZIhvcNAQELBQADggEBAMh7gSuXT/v7zX0VY5ocz7B33Ins W2zPbJ0eLt9jDn2oKUrNUYAtdTT9qigRrqKLbhpkuLCCg0vJsBeM39BbX+F9i5g4 crSIZov9WP0vRIwdlvXrfE6XSYFj62Mz8P7rrm1vJIuREhUzfYN5V4aGOIQ4pBdF /H4vo/whhGe5AKrxHizpLzvXgIxvQ6XxbvLAlZiBM0c7jfV0/CLfyJyQlRddsbdt tTioGvag7EOCC9EHS/C02pTqb7XhB4AppEA2464HY3ClNH3/vfmoj/UW6oSkeDwH 6eI878sVxarCNW8zfptmRtBQywS7oe07etkWU3wEfBt/tCTdKEzYxARJr5M= -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:31 2025 by rpki-client