$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uMp2Dl_jbPsIfQ8MU3iJvLFxavw.roa File: uMp2Dl_jbPsIfQ8MU3iJvLFxavw.roa (raw, json) Hash identifier: 2ka2NQ7qGCw+a99aictASXUkRWgftMjR3/dq95Bwp88= Subject key identifier: B8:CA:76:0E:5F:E3:6C:FB:08:7D:0F:0C:53:78:89:BC:B1:71:6A:FC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B73 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uMp2Dl_jbPsIfQ8MU3iJvLFxavw.roa Signing time: Tue 01 Apr 2025 01:36:46 +0000 ROA not before: Tue 01 Apr 2025 01:36:46 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2931 (0xb73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:36:46 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=B8CA760E5FE36CFB087D0F0C537889BCB1716AFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:75:3f:50:73:4f:24:f9:2d:3c:ee:39:8f: fe:b5:43:46:b9:63:9f:b6:84:c0:1a:a5:b2:f2:6c: e9:f4:23:59:34:96:9d:d6:e4:8f:5a:15:d4:3f:c9: 9e:04:ec:84:4f:f8:1f:11:3a:ec:2c:f4:94:b2:ff: 83:80:2a:73:f8:47:ba:8e:80:ad:5f:e9:4e:16:13: 76:e0:b5:1a:8f:c2:d8:cb:47:64:8d:ec:e1:a9:a6: 7a:55:eb:7f:e4:f7:d7:0e:ab:a1:ac:6f:16:97:1a: f9:7d:fe:7c:15:c9:7a:db:3b:80:76:85:aa:89:ad: 4c:76:a1:8c:06:01:aa:e3:50:71:96:10:bb:f5:41: 7e:4c:b8:6a:83:95:8d:aa:50:db:c7:3a:80:70:9b: 80:74:65:aa:b7:54:7d:27:7b:0e:3b:e7:cb:43:21: d9:91:ba:e4:e9:16:af:14:07:74:ab:6b:bf:e3:ce: 12:09:8e:bd:9d:23:03:18:55:2c:e0:37:2f:4a:46: f1:c6:0f:2c:ab:04:22:0c:b9:6d:2d:6e:40:d8:c6: 9c:b9:b3:64:89:a7:df:f2:e6:ad:b0:35:48:6a:fc: 3a:b1:36:61:a3:9a:b0:a9:ba:f9:88:77:90:39:52: 76:c5:af:e9:24:da:46:35:c5:bb:04:1f:36:e9:01: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CA:76:0E:5F:E3:6C:FB:08:7D:0F:0C:53:78:89:BC:B1:71:6A:FC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uMp2Dl_jbPsIfQ8MU3iJvLFxavw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.17.0/24 Signature Algorithm: sha256WithRSAEncryption 53:2f:11:32:3b:e7:9a:7b:f3:75:27:5a:37:6a:b8:b9:f6:34: 8c:20:f5:e6:e3:c3:86:62:53:58:1c:23:2d:13:d5:21:2e:89: ed:f6:18:e1:b5:6e:eb:e0:af:9c:ce:9f:f5:0e:01:c4:ae:94: eb:ad:28:8b:5c:fb:b6:7b:aa:08:81:05:f4:3a:dd:41:e9:6c: da:86:74:bb:b8:fa:93:65:9d:66:39:07:7b:f8:a7:6f:ab:c9: 44:33:31:5c:75:2b:86:95:00:e6:0b:18:6d:89:a5:1d:b8:cf: ae:b2:fa:bb:5f:28:e4:76:8f:d4:a5:04:81:20:b1:63:02:6d: 3a:04:8a:7b:92:18:25:6b:b6:92:bd:4c:c3:f4:bc:15:e9:df: 51:0c:76:1a:12:5a:66:32:80:d8:dd:31:c6:bb:b6:30:b2:d4: 0c:2e:ca:94:d3:d5:10:90:4e:b3:88:d5:be:3c:7b:e7:f3:b1: ae:ba:e5:c7:f3:b1:1b:db:2b:5c:53:6b:ea:b5:8e:bd:b3:df: 20:81:20:cb:60:cf:77:5a:86:12:b5:36:90:f6:de:a9:05:3f: b7:4a:5f:83:a7:a3:30:51:30:53:14:4b:9c:6a:a7:02:42:f7: 4d:ed:04:d3:c9:f5:38:4f:19:e1:ab:eb:0a:fa:d6:52:cb:f2: 98:4d:be:96 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM2NDZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI4Q0E3NjBFNUZFMzZD RkIwODdEMEYwQzUzNzg4OUJDQjE3MTZBRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC95nU/UHNPJPktPO45j/61Q0a5Y5+2hMAapbLybOn0I1k0lp3W 5I9aFdQ/yZ4E7IRP+B8ROuws9JSy/4OAKnP4R7qOgK1f6U4WE3bgtRqPwtjLR2SN 7OGppnpV63/k99cOq6GsbxaXGvl9/nwVyXrbO4B2haqJrUx2oYwGAarjUHGWELv1 QX5MuGqDlY2qUNvHOoBwm4B0Zaq3VH0new4758tDIdmRuuTpFq8UB3Sra7/jzhIJ jr2dIwMYVSzgNy9KRvHGDyyrBCIMuW0tbkDYxpy5s2SJp9/y5q2wNUhq/DqxNmGj mrCpuvmId5A5UnbFr+kk2kY1xbsEHzbpAbjjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUuMp2Dl/jbPsIfQ8MU3iJvLFxavwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3VNcDJEbF9qYlBzSWZROE1VM2lKdkxGeGF2dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYBEwDQYJKoZIhvcNAQELBQADggEBAFMvETI755p783UnWjdquLn2NIwg 9ebjw4ZiU1gcIy0T1SEuie32GOG1buvgr5zOn/UOAcSulOutKItc+7Z7qgiBBfQ6 3UHpbNqGdLu4+pNlnWY5B3v4p2+ryUQzMVx1K4aVAOYLGG2JpR24z66y+rtfKOR2 j9SlBIEgsWMCbToEinuSGCVrtpK9TMP0vBXp31EMdhoSWmYygNjdMca7tjCy1Awu ypTT1RCQTrOI1b48e+fzsa665cfzsRvbK1xTa+q1jr2z3yCBIMtgz3dahhK1NpD2 3qkFP7dKX4OnozBRMFMUS5xqpwJC903tBNPJ9ThPGeGr6wr61lLL8phNvpY= -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:50 2025 by rpki-client