$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xv5aI9i18mAFfMooEBQ_hd9MsXc.roa File: xv5aI9i18mAFfMooEBQ_hd9MsXc.roa (raw, json) Hash identifier: AcmbQa7ZQyPBJhnSq9D7D55SKb0pfRCSpw5EN/efjFg= Subject key identifier: C6:FE:5A:23:D8:B5:F2:60:05:7C:CA:28:10:14:3F:85:DF:4C:B1:77 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DDB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xv5aI9i18mAFfMooEBQ_hd9MsXc.roa Signing time: Tue 01 Apr 2025 02:27:26 +0000 ROA not before: Tue 01 Apr 2025 02:27:26 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3547 (0xddb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:26 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C6FE5A23D8B5F260057CCA2810143F85DF4CB177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:3f:d8:36:d3:6f:0b:f0:c1:78:0a:d7:ea: 6d:a1:b6:a5:26:25:ec:dd:6e:f5:94:eb:b8:63:2b: 60:dd:c6:3d:87:64:af:12:23:5f:a7:3e:44:8b:67: a6:85:da:a7:fa:12:2d:58:04:13:a0:dc:6a:c8:26: 4d:e3:f0:19:56:e1:b6:93:2f:6f:85:0a:0d:c3:30: db:b5:50:5d:5b:19:8f:c8:be:c1:7c:d8:e6:21:7c: c4:36:c0:4d:95:36:d4:fd:6c:4d:4b:db:52:71:1e: 62:32:8e:a7:6e:dd:5f:cc:0f:7b:b5:37:18:2d:69: 09:fd:c7:bf:d7:a5:66:65:79:7d:7c:0b:27:bb:48: 5a:bf:96:dc:db:f3:48:fa:20:8c:6e:8d:40:ea:2f: 1d:05:5b:f4:4d:1b:63:d5:7c:b7:1c:76:a9:0d:1c: 2e:b1:13:75:d5:22:4d:ca:65:e8:b2:d9:f1:0a:ea: be:35:aa:b9:0e:f8:eb:59:ac:bd:a5:56:83:2e:14: 24:95:9e:2d:e2:35:98:c3:09:86:2b:5b:59:2e:b7: ae:27:98:cf:cc:fb:02:42:16:1b:5a:ce:7a:17:21: fa:dc:a2:f3:b8:6b:1c:37:68:52:8f:a7:ab:42:a3: a1:70:90:5d:70:b0:59:f4:d5:a1:d6:8f:b6:3d:46: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FE:5A:23:D8:B5:F2:60:05:7C:CA:28:10:14:3F:85:DF:4C:B1:77 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xv5aI9i18mAFfMooEBQ_hd9MsXc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.14.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:b5:96:94:df:67:66:40:c1:35:64:f3:14:7f:02:70:1c:ae: 24:39:0b:cc:31:48:5c:e7:85:23:1c:2f:c8:2b:90:68:57:52: 5f:9f:9c:ce:dc:d9:f9:ca:cc:d0:a2:5c:49:9f:58:27:8b:cc: 17:dd:72:c8:fe:d9:ad:3b:ef:c0:71:1d:71:ef:61:56:80:6b: bc:03:b1:63:bf:5a:be:36:ac:31:35:e6:c3:44:dd:60:90:4d: 07:a5:d3:00:9b:6a:69:be:c3:68:d1:4f:02:79:f4:64:93:b0: 82:2c:f5:fa:cb:5b:b7:71:2a:de:fd:e8:b1:83:ec:3e:45:d2: ef:3c:04:8c:d7:a2:4f:91:d4:a2:e9:0b:6e:fc:e8:d9:13:e2: bf:f7:7b:31:fe:65:c6:b7:9e:09:00:49:fc:28:f5:d6:44:fb: fc:96:0c:13:a3:df:1d:30:01:3a:85:dd:32:c5:68:05:f1:27: df:2f:ba:a8:6e:e9:02:fd:9e:9c:18:1d:a5:c4:5f:ab:55:61: c8:dd:f1:4c:8a:6f:a0:ff:63:4d:94:16:5d:9e:69:46:fb:38: 34:66:cd:66:2d:15:25:fb:6c:16:91:6c:5e:44:82:51:23:f9: e4:b7:94:0e:48:01:95:1f:29:3f:97:a4:a2:75:5b:62:4e:15: a7:6e:17:47 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDdswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MjZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM2RkU1QTIzRDhCNUYy NjAwNTdDQ0EyODEwMTQzRjg1REY0Q0IxNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA3D/YNtNvC/DBeArX6m2htqUmJezdbvWU67hjK2Ddxj2HZK8S I1+nPkSLZ6aF2qf6Ei1YBBOg3GrIJk3j8BlW4baTL2+FCg3DMNu1UF1bGY/IvsF8 2OYhfMQ2wE2VNtT9bE1L21JxHmIyjqdu3V/MD3u1NxgtaQn9x7/XpWZleX18Cye7 SFq/ltzb80j6IIxujUDqLx0FW/RNG2PVfLccdqkNHC6xE3XVIk3KZeiy2fEK6r41 qrkO+OtZrL2lVoMuFCSVni3iNZjDCYYrW1kut64nmM/M+wJCFhtaznoXIfrcovO4 axw3aFKPp6tCo6FwkF1wsFn01aHWj7Y9RhMbAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxv5aI9i18mAFfMooEBQ/hd9MsXcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3h2NWFJOWkxOG1BRmZNb29FQlFfaGQ5TXNYYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaA4wDQYJKoZIhvcNAQELBQADggEBAI21lpTfZ2ZAwTVk8xR/AnAcriQ5 C8wxSFznhSMcL8grkGhXUl+fnM7c2fnKzNCiXEmfWCeLzBfdcsj+2a0778BxHXHv YVaAa7wDsWO/Wr42rDE15sNE3WCQTQel0wCbamm+w2jRTwJ59GSTsIIs9frLW7dx Kt796LGD7D5F0u88BIzXok+R1KLpC2786NkT4r/3ezH+Zca3ngkASfwo9dZE+/yW DBOj3x0wATqF3TLFaAXxJ98vuqhu6QL9npwYHaXEX6tVYcjd8UyKb6D/Y02UFl2e aUb7ODRmzWYtFSX7bBaRbF5EglEj+eS3lA5IAZUfKT+XpKJ1W2JOFaduF0c= -----END CERTIFICATE-----Generated at Sun Apr 6 01:51:51 2025 by rpki-client