$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oYmuz5Uk6fnoQRb7wZRokQloB3s.roa File: oYmuz5Uk6fnoQRb7wZRokQloB3s.roa (raw, json) Hash identifier: YlNBOr1rrYQY3ngTn3TogSBIUFYeVtEO5zGycgbqgo8= Subject key identifier: A1:89:AE:CF:95:24:E9:F9:E8:41:16:FB:C1:94:68:91:09:68:07:7B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D44 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oYmuz5Uk6fnoQRb7wZRokQloB3s.roa Signing time: Tue 01 Apr 2025 02:17:08 +0000 ROA not before: Tue 01 Apr 2025 02:17:08 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3396 (0xd44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:17:08 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=A189AECF9524E9F9E84116FBC19468910968077B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:5e:39:ce:d0:7c:bc:1c:aa:0f:d4:48:17: 7d:e3:b6:4a:b2:05:ee:23:50:6e:ba:64:e0:8b:09: da:78:1b:9c:8a:f7:92:38:22:09:b9:94:4e:7c:7f: f0:ed:e7:b5:c5:f4:fd:f1:b5:70:aa:41:85:1f:1e: 04:3a:fa:e4:a8:16:c6:af:1c:e4:15:65:92:61:38: f6:8c:fd:19:dd:13:8b:1a:58:28:dc:f1:21:e2:5b: c2:60:e5:f7:f9:ce:7b:3e:65:e8:f7:53:2a:9e:f8: c9:7d:ed:d6:ec:a2:3b:a0:98:7c:f9:22:89:22:51: 8f:42:93:3e:44:93:e6:2e:73:bb:25:df:37:56:0d: a7:16:78:2f:95:5b:dd:c3:ab:50:51:89:cf:63:a8: b0:a4:a4:92:d2:87:ff:8f:15:82:8b:2a:f3:79:35: 8a:ae:a2:ed:fc:76:ce:b3:05:e8:3a:db:f0:eb:32: 30:53:c2:61:2e:e9:44:5a:26:b6:3a:17:53:47:59: 47:fe:c9:d5:85:52:f3:d9:fb:25:55:38:72:99:df: 1f:3a:4b:d9:45:73:86:66:da:90:11:84:11:86:9a: 11:89:b6:5d:79:ef:5c:08:d9:da:90:5b:b1:e4:41: bb:a9:09:d8:c6:df:a6:18:17:61:c5:93:0e:e9:b5: 1b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:89:AE:CF:95:24:E9:F9:E8:41:16:FB:C1:94:68:91:09:68:07:7B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oYmuz5Uk6fnoQRb7wZRokQloB3s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.23.0/24 Signature Algorithm: sha256WithRSAEncryption 78:8a:28:5e:7a:ac:d6:c2:c4:44:aa:c1:75:0f:6e:06:19:eb: 47:65:64:c0:ee:8b:2c:83:2d:4e:c1:a6:24:c3:05:2f:75:c5: 83:9a:a3:9b:3e:ca:95:f8:60:3c:fd:d4:1a:80:c8:ee:18:99: 34:4e:1e:60:5c:6e:6f:f2:2a:09:a8:41:47:c7:46:a4:8f:21: 79:f3:67:b9:24:59:f3:89:8e:4d:89:55:e6:93:57:60:83:cf: 9b:bd:cd:f7:db:34:5d:bf:61:cc:f5:3b:af:99:47:c4:ab:f4: 70:85:0d:b2:fc:33:31:cd:cd:22:e9:54:12:68:de:aa:06:da: 0f:cf:97:50:49:6f:cc:92:6d:6a:2f:08:db:2e:7d:b7:42:09: 41:4a:c3:4b:f5:94:3c:0a:15:b0:54:40:d4:bb:12:b5:4a:db: fe:fd:14:94:ac:1e:6b:bd:58:d5:c4:f4:8c:9f:1c:19:21:33: e5:dc:f8:80:de:38:57:6c:9c:2a:c5:d0:3f:8e:07:2e:1f:6c: be:9b:ad:35:32:cf:70:06:5b:a1:6e:c8:35:fa:10:ea:90:9d: 0f:34:7e:ef:22:c1:30:90:1f:46:03:1f:ab:c1:69:9a:58:39: 49:ec:19:7f:20:e4:3a:f9:22:9e:f3:17:6c:6c:38:9e:0b:a8: 60:d0:38:6c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDUQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE3MDhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEExODlBRUNGOTUyNEU5 RjlFODQxMTZGQkMxOTQ2ODkxMDk2ODA3N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCky145ztB8vByqD9RIF33jtkqyBe4jUG66ZOCLCdp4G5yK95I4 Igm5lE58f/Dt57XF9P3xtXCqQYUfHgQ6+uSoFsavHOQVZZJhOPaM/RndE4saWCjc 8SHiW8Jg5ff5zns+Zej3Uyqe+Ml97dbsojugmHz5IokiUY9Ckz5Ek+Yuc7sl3zdW DacWeC+VW93Dq1BRic9jqLCkpJLSh/+PFYKLKvN5NYquou38ds6zBeg62/DrMjBT wmEu6URaJrY6F1NHWUf+ydWFUvPZ+yVVOHKZ3x86S9lFc4Zm2pARhBGGmhGJtl15 71wI2dqQW7HkQbupCdjG36YYF2HFkw7ptRuJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoYmuz5Uk6fnoQRb7wZRokQloB3swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L29ZbXV6NVVrNmZub1FSYjd3WlJva1Fsb0Izcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaBcwDQYJKoZIhvcNAQELBQADggEBAHiKKF56rNbCxESqwXUPbgYZ60dl ZMDuiyyDLU7BpiTDBS91xYOao5s+ypX4YDz91BqAyO4YmTROHmBcbm/yKgmoQUfH RqSPIXnzZ7kkWfOJjk2JVeaTV2CDz5u9zffbNF2/Ycz1O6+ZR8Sr9HCFDbL8MzHN zSLpVBJo3qoG2g/Pl1BJb8ySbWovCNsufbdCCUFKw0v1lDwKFbBUQNS7ErVK2/79 FJSsHmu9WNXE9IyfHBkhM+Xc+IDeOFdsnCrF0D+OBy4fbL6brTUyz3AGW6FuyDX6 EOqQnQ80fu8iwTCQH0YDH6vBaZpYOUnsGX8g5Dr5Ip7zF2xsOJ4LqGDQOGw= -----END CERTIFICATE-----Generated at Sat Apr 5 17:48:04 2025 by rpki-client