$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/p5fEoiKx5fE-dcJDKMJzSY9Oe4s.roa File: p5fEoiKx5fE-dcJDKMJzSY9Oe4s.roa (raw, json) Hash identifier: IH9gcQaSyVm1VAcMTq1YArbkVcMmOruR6nfX9oAkCuU= Subject key identifier: A7:97:C4:A2:22:B1:E5:F1:3E:75:C2:43:28:C2:73:49:8F:4E:7B:8B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C5A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p5fEoiKx5fE-dcJDKMJzSY9Oe4s.roa Signing time: Tue 01 Apr 2025 01:57:27 +0000 ROA not before: Tue 01 Apr 2025 01:57:27 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3162 (0xc5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:27 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=A797C4A222B1E5F13E75C24328C273498F4E7B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a6:ac:1e:96:a5:e5:0b:be:9c:87:2f:5d:da: 9b:7c:4e:ca:8a:e6:ee:d1:bd:81:9a:9c:af:5a:73: 3b:63:30:3b:ac:1d:e9:b4:83:91:55:41:52:e9:9c: 35:b7:22:68:28:55:f2:0d:39:9a:ed:db:a5:d3:f3: 18:71:6d:0c:66:2a:ce:6c:a4:5e:2b:a8:29:40:80: 4f:91:ad:d5:02:29:f7:b1:cb:02:a1:6a:2f:79:e9: bc:ce:f5:e3:17:bd:9a:40:d6:c1:c3:5a:f8:ed:45: 1b:4d:52:7a:87:f6:73:ec:8b:b1:08:37:87:60:71: f4:31:a5:54:ca:e9:6b:9e:ce:23:77:e8:24:44:bd: 58:b8:c2:8c:b4:27:c2:62:c7:ba:ec:fd:26:40:60: 98:80:1e:db:fb:9e:04:71:a2:ef:b3:c4:47:3a:f3: 8b:86:1e:88:12:df:06:40:44:d7:7f:22:ca:76:44: 29:7a:d3:d8:41:96:9b:93:1f:e9:21:38:bb:ad:3f: f0:55:f9:a5:04:8b:09:81:d0:08:84:4f:54:3f:31: 9b:6e:d3:0f:ea:98:3c:c7:6c:bf:98:5b:9a:10:b2: eb:d7:c7:dc:fd:23:c8:4e:e9:53:b7:e4:76:6c:62: bb:f4:cb:3b:99:b3:58:82:ea:eb:97:e0:27:6b:c2: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:97:C4:A2:22:B1:E5:F1:3E:75:C2:43:28:C2:73:49:8F:4E:7B:8B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p5fEoiKx5fE-dcJDKMJzSY9Oe4s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.30.0/23 Signature Algorithm: sha256WithRSAEncryption 44:fb:e4:f6:57:8a:64:ab:a6:c0:35:49:da:5d:de:ea:29:a4: f4:60:b3:4a:8d:f6:66:1c:5d:c1:ea:7d:12:58:88:c8:08:02: 7d:00:59:9b:f2:e6:54:a0:f5:0b:cd:be:c6:27:70:ea:25:a5: 92:06:bf:4a:38:65:e9:98:0a:e3:0d:ae:8a:14:7f:ca:73:50: 19:20:cd:67:2f:04:6f:e7:a3:18:ef:fd:e4:fb:48:47:a9:11: a1:87:51:0b:60:f9:ad:ad:61:92:cd:9e:1d:11:f8:b0:1c:6e: 45:37:f6:40:1b:13:7a:8f:b0:f6:b7:1f:2a:75:bc:87:0e:13: 6f:c8:12:b5:95:05:43:05:9d:19:71:e1:72:f4:b3:3c:d0:6a: f9:1e:9b:b0:16:ed:58:5a:70:fe:0f:7f:3d:5d:54:fa:49:0b: 77:6d:1e:89:e3:a4:07:70:f5:47:f5:5f:56:44:f2:7c:de:9d: e5:9f:6c:78:96:3f:20:d7:0e:4a:8d:b9:e0:b2:b9:c6:15:23: 72:10:25:6e:70:da:6c:9b:68:92:83:37:53:93:c9:ab:95:a8: 8f:2d:aa:bc:63:90:ba:37:d3:d5:98:00:33:0b:71:f7:d9:25: c1:89:2f:4b:b1:50:37:1c:81:91:bc:a1:72:60:4f:9f:25:13: 4c:60:df:25 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDFowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MjdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE3OTdDNEEyMjJCMUU1 RjEzRTc1QzI0MzI4QzI3MzQ5OEY0RTdCOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjpqwelqXlC76chy9d2pt8TsqK5u7RvYGanK9acztjMDusHem0 g5FVQVLpnDW3ImgoVfINOZrt26XT8xhxbQxmKs5spF4rqClAgE+RrdUCKfexywKh ai956bzO9eMXvZpA1sHDWvjtRRtNUnqH9nPsi7EIN4dgcfQxpVTK6WueziN36CRE vVi4woy0J8Jix7rs/SZAYJiAHtv7ngRxou+zxEc684uGHogS3wZARNd/Isp2RCl6 09hBlpuTH+khOLutP/BV+aUEiwmB0AiET1Q/MZtu0w/qmDzHbL+YW5oQsuvXx9z9 I8hO6VO35HZsYrv0yzuZs1iC6uuX4Cdrwk5tAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUp5fEoiKx5fE+dcJDKMJzSY9Oe4swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3A1ZkVvaUt4NWZFLWRjSkRLTUp6U1k5T2U0cy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaB4wDQYJKoZIhvcNAQELBQADggEBAET75PZXimSrpsA1Sdpd3uoppPRg s0qN9mYcXcHqfRJYiMgIAn0AWZvy5lSg9QvNvsYncOolpZIGv0o4ZemYCuMNrooU f8pzUBkgzWcvBG/noxjv/eT7SEepEaGHUQtg+a2tYZLNnh0R+LAcbkU39kAbE3qP sPa3Hyp1vIcOE2/IErWVBUMFnRlx4XL0szzQavkem7AW7VhacP4Pfz1dVPpJC3dt HonjpAdw9Uf1X1ZE8nzeneWfbHiWPyDXDkqNueCyucYVI3IQJW5w2mybaJKDN1OT yauVqI8tqrxjkLo309WYADMLcffZJcGJL0uxUDccgZG8oXJgT58lE0xg3yU= -----END CERTIFICATE-----Generated at Sat Apr 5 17:24:59 2025 by rpki-client