$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wrm1vryJbc7jUKZEPHf8jYmaDYE.roa File: wrm1vryJbc7jUKZEPHf8jYmaDYE.roa (raw, json) Hash identifier: 4kHV0OxVNRQ+TydWWL9aICuQUUOaqe5w5MO+a1p4kpA= Subject key identifier: C2:B9:B5:BE:BC:89:6D:CE:E3:50:A6:44:3C:77:FC:8D:89:9A:0D:81 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DAC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wrm1vryJbc7jUKZEPHf8jYmaDYE.roa Signing time: Tue 01 Apr 2025 02:24:41 +0000 ROA not before: Tue 01 Apr 2025 02:24:41 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3500 (0xdac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:41 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C2B9B5BEBC896DCEE350A6443C77FC8D899A0D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:7d:f0:53:08:43:84:df:9f:f8:54:66:90: 6e:08:bd:a8:db:ee:b7:ce:1f:4d:53:df:24:44:79: 4e:be:09:32:8d:6c:07:7b:19:92:85:00:34:be:a3: eb:ac:b7:44:5d:3d:a8:22:ef:b5:53:41:16:da:a3: d9:79:99:79:78:a7:66:95:c3:69:f6:2a:94:d3:91: c3:9d:88:c5:0d:21:f9:6d:2d:90:7f:28:24:a9:94: ed:b7:8c:94:59:19:e5:20:6b:8c:18:fc:15:69:5f: 42:04:94:a3:0d:69:9a:be:27:32:a1:f4:47:e9:d6: 23:ff:08:d8:07:41:1d:80:55:48:e0:5d:17:ac:d5: 35:a0:5d:ea:ae:8b:8d:cd:c8:b6:60:a6:fb:1f:50: c0:98:f7:d0:3f:a2:76:df:bb:e9:cd:41:56:0a:04: 7c:71:6c:bc:de:0b:f0:15:55:53:82:15:d2:51:74: d6:cd:57:41:b5:90:52:9b:9d:e5:37:4b:f2:de:0b: b4:39:3a:9e:0a:22:ec:ac:f5:de:62:d9:64:1b:d9: 75:f4:02:db:6d:e1:2b:e1:f8:94:30:a9:c6:a5:e2: f4:af:1c:dd:aa:3e:65:4d:b8:e3:0a:9f:b8:e0:7c: fa:5f:af:76:f8:ef:92:cc:64:98:28:6f:8c:7a:14: ec:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B9:B5:BE:BC:89:6D:CE:E3:50:A6:44:3C:77:FC:8D:89:9A:0D:81 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wrm1vryJbc7jUKZEPHf8jYmaDYE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.132.0/22 Signature Algorithm: sha256WithRSAEncryption 52:a7:0f:6a:fe:28:1a:18:2d:4d:13:69:77:4d:fa:a9:e4:d8: 0b:c7:97:de:a9:58:70:42:59:18:36:73:eb:be:38:31:a6:ac: 00:7b:e7:3e:c7:92:09:26:00:d7:6b:4e:e8:61:43:a3:97:d2: 72:ef:52:fd:ee:bc:1b:55:34:55:81:a5:f9:a6:36:c6:d4:fe: fd:9c:2c:13:4f:03:77:47:97:b2:b4:56:25:58:b3:6b:00:7c: fd:1b:8d:b4:26:e1:5d:79:28:57:ff:ac:db:24:ed:ab:a3:c6: 9f:d0:f0:0e:e2:1d:52:43:46:d2:15:ec:b6:70:3c:4d:7b:c7: 82:94:f1:65:e0:43:96:ff:68:6a:c6:11:27:9f:c7:59:e7:d6: 03:78:b4:1f:c7:d4:8e:b0:19:09:9c:b6:08:5d:2a:26:b4:de: 5c:3b:78:11:93:a4:f1:3a:5d:6e:4b:c5:d9:8c:fd:24:20:74: 9d:a6:d9:25:f9:e2:0d:81:51:aa:c7:bc:31:c9:72:32:0f:39: 68:bd:e8:91:c9:66:10:83:d0:df:bf:51:22:1e:e5:6f:00:f8: 48:c2:00:76:fc:20:05:5e:92:e0:c8:45:4b:09:6a:d2:80:2b: 32:83:ce:0f:04:eb:73:5e:3f:ac:0c:a9:28:da:b4:36:da:c6: 9e:db:81:d5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0NDFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEMyQjlCNUJFQkM4OTZE Q0VFMzUwQTY0NDNDNzdGQzhEODk5QTBEODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsqX3wUwhDhN+f+FRmkG4Ivajb7rfOH01T3yREeU6+CTKNbAd7 GZKFADS+o+ust0RdPagi77VTQRbao9l5mXl4p2aVw2n2KpTTkcOdiMUNIfltLZB/ KCSplO23jJRZGeUga4wY/BVpX0IElKMNaZq+JzKh9Efp1iP/CNgHQR2AVUjgXRes 1TWgXequi43NyLZgpvsfUMCY99A/onbfu+nNQVYKBHxxbLzeC/AVVVOCFdJRdNbN V0G1kFKbneU3S/LeC7Q5Op4KIuys9d5i2WQb2XX0Attt4Svh+JQwqcal4vSvHN2q PmVNuOMKn7jgfPpfr3b475LMZJgob4x6FOzBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUwrm1vryJbc7jUKZEPHf8jYmaDYEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3dybTF2cnlKYmM3alVLWkVQSGY4alltYURZRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYoQwDQYJKoZIhvcNAQELBQADggEBAFKnD2r+KBoYLU0TaXdN+qnk2AvH l96pWHBCWRg2c+u+ODGmrAB75z7HkgkmANdrTuhhQ6OX0nLvUv3uvBtVNFWBpfmm NsbU/v2cLBNPA3dHl7K0ViVYs2sAfP0bjbQm4V15KFf/rNsk7aujxp/Q8A7iHVJD RtIV7LZwPE17x4KU8WXgQ5b/aGrGESefx1nn1gN4tB/H1I6wGQmctghdKia03lw7 eBGTpPE6XW5LxdmM/SQgdJ2m2SX54g2BUarHvDHJcjIPOWi96JHJZhCD0N+/USIe 5W8A+EjCAHb8IAVekuDIRUsJatKAKzKDzg8E63NeP6wMqSjatDbaxp7bgdU= -----END CERTIFICATE-----Generated at Sat Apr 5 23:09:27 2025 by rpki-client