$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ymO65PPFCR8ciggTvx2XIWUbrCQ.roa File: ymO65PPFCR8ciggTvx2XIWUbrCQ.roa (raw, json) Hash identifier: OE3LQXIj6vMfX/otP1D1MNPwSh/4567m455iEUWKoGk= Subject key identifier: CA:63:BA:E4:F3:C5:09:1F:1C:8A:08:13:BF:1D:97:21:65:1B:AC:24 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BF6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ymO65PPFCR8ciggTvx2XIWUbrCQ.roa Signing time: Tue 01 Apr 2025 01:51:26 +0000 ROA not before: Tue 01 Apr 2025 01:51:26 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3062 (0xbf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:26 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=CA63BAE4F3C5091F1C8A0813BF1D9721651BAC24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:84:c6:95:91:d8:13:df:c8:c2:36:4d:22:de: 45:a8:25:25:16:48:fc:f7:0c:d6:29:57:1e:73:d0: 24:c5:3f:7c:7f:8c:a2:de:48:ee:64:03:c8:81:5b: 46:ee:71:45:b8:ad:44:95:41:d3:71:fe:5b:c1:9c: 7a:c1:40:3d:f2:9a:65:11:5b:cb:7a:bc:3a:86:cf: 22:16:63:95:f1:24:4e:a0:14:8c:da:79:83:03:e5: 12:ae:e6:db:33:d0:74:5f:8f:2e:8c:a8:32:93:e0: 5d:3a:7a:95:ae:13:59:97:00:b7:9f:8d:df:7f:c3: 33:ad:8f:c4:b4:88:48:4a:d2:69:b9:ae:ab:fd:59: 43:2e:cf:b0:a3:1a:79:ae:79:73:20:c1:1a:bf:0c: 0d:8a:b2:09:11:56:56:37:ef:6c:24:64:bf:2e:47: 22:bf:59:56:09:f1:44:e4:93:be:4b:ca:1d:d8:53: ff:b6:09:38:54:5c:fc:db:fc:8b:6b:2e:58:14:ce: 11:d6:1a:41:08:5b:41:50:02:2c:6f:95:cd:35:57: 48:c7:85:5d:c0:fd:2a:1d:e9:4d:89:e3:f6:3e:48: 10:32:ab:5b:b4:df:f1:59:0f:63:b1:50:fd:db:8c: 2a:3b:0b:0c:7b:f0:9f:aa:b9:25:92:7f:1f:93:dd: 85:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:63:BA:E4:F3:C5:09:1F:1C:8A:08:13:BF:1D:97:21:65:1B:AC:24 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ymO65PPFCR8ciggTvx2XIWUbrCQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.250.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:de:e5:e4:67:8a:3f:ad:7d:e4:b7:24:74:d0:b7:28:2c:74: e5:7b:80:53:29:0d:fe:ce:8d:c2:dc:4c:12:06:11:d3:ef:d7: 17:bc:7d:ca:49:f5:87:91:60:d2:00:fd:ab:54:ab:4c:33:b0: 72:9e:cd:9e:30:a0:c9:55:f4:95:8b:3f:9d:a0:c6:7b:7d:f9: ad:f1:26:21:58:bf:13:58:18:fb:a5:fa:2c:ea:19:ba:fb:56: 4a:2e:a2:f6:40:40:dc:3f:a2:f0:48:f6:81:89:c7:5e:8c:b2: 1b:11:4a:f6:94:2a:61:22:19:3d:b6:2d:61:f2:e3:3e:50:c8: fe:36:84:5a:d6:a2:f4:4d:77:43:ea:c6:3b:d0:25:fe:ad:7e: 03:5a:79:76:d2:71:e5:9d:e3:26:b4:8f:3b:c4:32:1a:58:f8: e0:4c:dd:f5:5a:5a:10:cf:fc:6a:23:91:b3:68:c4:bf:6c:fe: 1c:2d:d1:41:07:34:74:45:2a:3f:19:eb:9a:a6:eb:42:f6:0e: ce:7d:bd:51:7c:83:e8:53:14:92:fc:f6:1a:6f:3a:76:c0:de: 4e:1d:fb:e1:bc:6f:61:d8:55:06:b9:ce:b0:77:ad:89:8c:6a: e7:79:d8:b2:d0:71:6a:d5:0f:2c:eb:17:3c:00:a4:76:56:8b: d0:67:55:1c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC/YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMjZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENBNjNCQUU0RjNDNTA5 MUYxQzhBMDgxM0JGMUQ5NzIxNjUxQkFDMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLhMaVkdgT38jCNk0i3kWoJSUWSPz3DNYpVx5z0CTFP3x/jKLe SO5kA8iBW0bucUW4rUSVQdNx/lvBnHrBQD3ymmURW8t6vDqGzyIWY5XxJE6gFIza eYMD5RKu5tsz0HRfjy6MqDKT4F06epWuE1mXALefjd9/wzOtj8S0iEhK0mm5rqv9 WUMuz7CjGnmueXMgwRq/DA2KsgkRVlY372wkZL8uRyK/WVYJ8UTkk75Lyh3YU/+2 CThUXPzb/ItrLlgUzhHWGkEIW0FQAixvlc01V0jHhV3A/Sod6U2J4/Y+SBAyq1u0 3/FZD2OxUP3bjCo7Cwx78J+quSWSfx+T3YUHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUymO65PPFCR8ciggTvx2XIWUbrCQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3ltTzY1UFBGQ1I4Y2lnZ1R2eDJYSVdVYnJDUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYPowDQYJKoZIhvcNAQELBQADggEBAI7e5eRnij+tfeS3JHTQtygsdOV7 gFMpDf7OjcLcTBIGEdPv1xe8fcpJ9YeRYNIA/atUq0wzsHKezZ4woMlV9JWLP52g xnt9+a3xJiFYvxNYGPul+izqGbr7VkouovZAQNw/ovBI9oGJx16MshsRSvaUKmEi GT22LWHy4z5QyP42hFrWovRNd0PqxjvQJf6tfgNaeXbSceWd4ya0jzvEMhpY+OBM 3fVaWhDP/GojkbNoxL9s/hwt0UEHNHRFKj8Z65qm60L2Ds59vVF8g+hTFJL89hpv OnbA3k4d++G8b2HYVQa5zrB3rYmMaud52LLQcWrVDyzrFzwApHZWi9BnVRw= -----END CERTIFICATE-----Generated at Sat Apr 5 17:27:58 2025 by rpki-client