$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/siYgb9SQ-rkKmbX1YF-ItJr0JV8.roa File: siYgb9SQ-rkKmbX1YF-ItJr0JV8.roa (raw, json) Hash identifier: I/HLwZx1eHJ2fcZ+q6+xuy8+xN5IJo/6HuW+9RT2lug= Subject key identifier: B2:26:20:6F:D4:90:FA:B9:0A:99:B5:F5:60:5F:88:B4:9A:F4:25:5F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BEF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/siYgb9SQ-rkKmbX1YF-ItJr0JV8.roa Signing time: Tue 01 Apr 2025 01:47:46 +0000 ROA not before: Tue 01 Apr 2025 01:47:46 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3055 (0xbef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:47:46 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=B226206FD490FAB90A99B5F5605F88B49AF4255F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:71:e5:9f:d8:34:71:64:4b:82:95:05:b8:da: 6f:d1:3f:7e:74:76:a0:c5:1d:30:25:9e:bf:f9:a2: 89:ce:70:29:5b:48:d7:e8:ce:c9:4c:c1:a0:d3:d5: db:11:60:3f:ac:5a:5d:22:45:66:6f:09:8a:ae:46: cf:41:96:9e:5a:ab:30:f8:a6:a8:3d:d6:4c:ae:55: 41:98:ea:a6:d7:43:8f:42:13:f0:f1:dd:57:a2:dc: 6d:c8:65:a7:4c:fc:6f:00:57:07:8a:6d:f7:e6:3e: 6a:ca:b0:5c:8b:67:b0:72:74:b8:60:84:53:e6:36: 7a:ee:92:0d:75:d8:02:d1:b2:b5:de:db:42:18:3f: 45:2f:00:e8:6f:b8:8b:c2:17:a4:a1:d5:96:fa:fd: 9f:15:e6:6d:51:92:36:58:59:19:06:9a:01:61:d0: ac:2a:da:70:9e:e4:30:dd:93:c4:d0:ca:ce:c0:9a: 51:51:3a:57:8c:9c:83:e6:a0:73:cb:1f:52:0c:6b: 20:c2:ee:ec:92:a3:b6:8f:c4:13:4a:e0:ac:04:dd: 6a:6f:42:bb:1d:ab:44:08:4a:c8:20:c2:3e:2d:e9: 0a:8c:cc:c7:3b:e2:1b:e2:3f:2a:f9:64:20:6a:e3: 67:3f:c9:2d:5f:3e:8b:51:39:cd:61:d9:df:69:6b: 56:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:26:20:6F:D4:90:FA:B9:0A:99:B5:F5:60:5F:88:B4:9A:F4:25:5F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/siYgb9SQ-rkKmbX1YF-ItJr0JV8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.40.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:77:35:ea:a3:d4:58:aa:49:19:29:ed:21:0a:e6:ad:59:48: 08:7c:7b:96:4f:7c:9d:db:15:12:a9:b8:45:36:d8:43:7b:f8: 43:80:4f:db:b1:2d:d4:0e:61:dc:16:5a:cd:5a:24:8e:a1:03: 43:da:10:a2:c8:4a:47:0a:3d:97:3a:20:1d:87:72:f5:b5:14: 12:a9:b9:ad:ba:77:68:ec:7c:54:7b:6e:96:13:0e:c6:1c:c4: 9b:9d:b5:8f:a3:fc:9f:8b:c7:fd:58:30:a0:cb:5d:28:c4:b9: d3:d0:d9:2c:e8:e9:73:e9:bd:6a:1d:53:06:76:d0:72:bb:24: 64:f7:ad:ae:20:cf:12:90:8b:c4:c2:93:47:2d:34:b1:0b:8e: 62:17:60:ef:d8:f3:05:79:ff:0e:4b:3f:62:ab:93:9c:45:06: e3:69:37:c4:98:6c:64:b2:5b:75:1e:1f:c7:d9:61:f3:ea:49: 4a:65:b9:97:a6:0e:88:fc:38:46:db:2e:4a:9d:3b:9d:fc:36: a8:07:e1:b3:51:78:d7:44:41:82:c8:f6:f4:68:1a:4e:7c:ec: a3:1a:dd:1b:f2:94:9d:d0:a7:db:af:96:2e:bd:b6:72:a0:51: b6:33:87:ae:53:31:96:32:fc:4f:8d:02:1b:6a:06:b8:2c:25: 25:83:ab:00 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC+8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQ3NDZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEIyMjYyMDZGRDQ5MEZB QjkwQTk5QjVGNTYwNUY4OEI0OUFGNDI1NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeceWf2DRxZEuClQW42m/RP350dqDFHTAlnr/5oonOcClbSNfo zslMwaDT1dsRYD+sWl0iRWZvCYquRs9Blp5aqzD4pqg91kyuVUGY6qbXQ49CE/Dx 3Vei3G3IZadM/G8AVweKbffmPmrKsFyLZ7BydLhghFPmNnrukg112ALRsrXe20IY P0UvAOhvuIvCF6Sh1Zb6/Z8V5m1RkjZYWRkGmgFh0Kwq2nCe5DDdk8TQys7AmlFR OleMnIPmoHPLH1IMayDC7uySo7aPxBNK4KwE3WpvQrsdq0QISsggwj4t6QqMzMc7 4hviPyr5ZCBq42c/yS1fPotROc1h2d9pa1Z1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsiYgb9SQ+rkKmbX1YF+ItJr0JV8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NpWWdiOVNRLXJrS21iWDFZRi1JdEpyMEpWOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaCgwDQYJKoZIhvcNAQELBQADggEBAIt3Neqj1FiqSRkp7SEK5q1ZSAh8 e5ZPfJ3bFRKpuEU22EN7+EOAT9uxLdQOYdwWWs1aJI6hA0PaEKLISkcKPZc6IB2H cvW1FBKpua26d2jsfFR7bpYTDsYcxJudtY+j/J+Lx/1YMKDLXSjEudPQ2Szo6XPp vWodUwZ20HK7JGT3ra4gzxKQi8TCk0ctNLELjmIXYO/Y8wV5/w5LP2Krk5xFBuNp N8SYbGSyW3UeH8fZYfPqSUpluZemDoj8OEbbLkqdO538NqgH4bNReNdEQYLI9vRo Gk587KMa3RvylJ3Qp9uvli69tnKgUbYzh65TMZYy/E+NAhtqBrgsJSWDqwA= -----END CERTIFICATE-----Generated at Sat Apr 5 16:56:01 2025 by rpki-client