$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zbPmQPcA8zNryD0pzBSXBa7JNNI.roa File: zbPmQPcA8zNryD0pzBSXBa7JNNI.roa (raw, json) Hash identifier: +DcByZaXk8JolFDOrkdJGy3FPKJtrPcIxuErPuc++qQ= Subject key identifier: CD:B3:E6:40:F7:00:F3:33:6B:C8:3D:29:CC:14:97:05:AE:C9:34:D2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CB4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zbPmQPcA8zNryD0pzBSXBa7JNNI.roa Signing time: Tue 01 Apr 2025 02:05:44 +0000 ROA not before: Tue 01 Apr 2025 02:05:44 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3252 (0xcb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:44 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=CDB3E640F700F3336BC83D29CC149705AEC934D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:1a:bb:84:43:64:5d:4b:75:86:77:3e:6d: d2:fe:d3:8d:c2:a4:f1:db:a1:ae:86:1c:6b:64:e5: f3:a9:43:76:28:c5:52:63:b9:5b:ef:4f:b9:3a:d7: a0:77:af:da:1e:69:5b:33:28:ec:b9:33:02:ca:fb: 6e:d4:55:7d:8a:84:c3:74:13:c3:ad:ac:bf:eb:81: ca:28:08:27:a7:95:bb:df:89:a8:a9:f7:94:cf:f2: 07:53:16:34:a7:aa:ff:84:77:ec:be:6a:b4:a4:ad: aa:c6:79:88:00:40:fd:7a:f6:d5:32:28:e3:1f:b3: 52:d6:03:c9:33:11:5e:07:71:76:dd:ad:05:2a:e1: b0:69:20:10:a6:b8:78:ae:22:9f:7a:1c:2b:90:8a: a0:ed:45:d4:c4:ae:15:7b:dc:aa:13:3b:cf:1e:97: eb:d0:7f:23:39:4f:9c:b2:87:42:8f:fd:d9:34:e2: 02:40:ab:e9:b0:3f:21:98:58:84:de:62:ad:f7:a4: d2:01:e6:3d:72:21:63:3a:92:67:06:3a:8f:60:5b: 16:e1:45:07:da:87:1c:9d:00:aa:a4:ad:d9:50:94: 16:1d:6f:0c:ab:87:a9:91:6b:8a:03:4c:93:79:b1: 3b:8b:6d:1e:fb:c9:fb:0d:64:d1:89:2c:6e:74:52: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B3:E6:40:F7:00:F3:33:6B:C8:3D:29:CC:14:97:05:AE:C9:34:D2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zbPmQPcA8zNryD0pzBSXBa7JNNI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.50.0/23 Signature Algorithm: sha256WithRSAEncryption ab:86:42:6e:e1:ef:69:98:d2:55:fc:a7:b8:09:da:a5:78:7c: 1a:ee:d8:7c:21:e8:9f:5a:c0:3e:9e:8d:ee:2d:96:6d:96:a7: 8d:48:0f:31:5a:52:2f:4a:58:1d:50:86:b3:65:1a:7f:ec:ed: 1b:b9:81:bb:e3:94:a5:95:4d:77:bd:0f:a8:08:d0:74:25:73: 62:60:a7:3f:2c:62:7d:89:93:e8:7b:8d:a8:b2:f6:c4:c2:73: e7:71:89:5d:d7:90:9c:ee:9f:da:a1:cb:61:25:81:d3:4c:1d: 36:63:03:ac:6c:7b:8c:d0:8d:57:5e:11:9f:d1:e4:ea:fc:d3: 09:82:4b:e8:52:ba:f3:b0:b6:ef:17:32:be:b3:73:32:e3:ab: 6d:8d:d2:5f:5b:5b:63:18:10:db:f4:ba:96:4e:bc:93:ce:7f: 37:6e:70:95:98:9d:67:55:3c:7c:bd:ed:9f:b6:26:2d:61:4a: df:51:9a:d7:05:c9:6b:70:28:d8:7b:a6:a3:92:e5:5f:16:bf: 66:88:ad:78:93:61:a0:b6:42:87:90:f5:64:71:38:41:b5:39: 01:8a:7e:e4:fa:d9:a7:fe:c9:e8:87:f2:71:8a:e6:32:80:2d: 33:66:69:27:a4:4d:1d:9e:22:f2:a7:cf:3a:31:2d:61:e9:b5: e8:a0:7d:4e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENEQjNFNjQwRjcwMEYz MzM2QkM4M0QyOUNDMTQ5NzA1QUVDOTM0RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9xRq7hENkXUt1hnc+bdL+043CpPHboa6GHGtk5fOpQ3YoxVJj uVvvT7k616B3r9oeaVszKOy5MwLK+27UVX2KhMN0E8OtrL/rgcooCCenlbvfiaip 95TP8gdTFjSnqv+Ed+y+arSkrarGeYgAQP169tUyKOMfs1LWA8kzEV4HcXbdrQUq 4bBpIBCmuHiuIp96HCuQiqDtRdTErhV73KoTO88el+vQfyM5T5yyh0KP/dk04gJA q+mwPyGYWITeYq33pNIB5j1yIWM6kmcGOo9gWxbhRQfahxydAKqkrdlQlBYdbwyr h6mRa4oDTJN5sTuLbR77yfsNZNGJLG50UmoBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUzbPmQPcA8zNryD0pzBSXBa7JNNIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3piUG1RUGNBOHpOcnlEMHB6QlNYQmE3Sk5OSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYDIwDQYJKoZIhvcNAQELBQADggEBAKuGQm7h72mY0lX8p7gJ2qV4fBru 2Hwh6J9awD6eje4tlm2Wp41IDzFaUi9KWB1QhrNlGn/s7Ru5gbvjlKWVTXe9D6gI 0HQlc2Jgpz8sYn2Jk+h7jaiy9sTCc+dxiV3XkJzun9qhy2ElgdNMHTZjA6xse4zQ jVdeEZ/R5Or80wmCS+hSuvOwtu8XMr6zczLjq22N0l9bW2MYENv0upZOvJPOfzdu cJWYnWdVPHy97Z+2Ji1hSt9RmtcFyWtwKNh7pqOS5V8Wv2aIrXiTYaC2QoeQ9WRx OEG1OQGKfuT62af+yeiH8nGK5jKALTNmaSekTR2eIvKnzzoxLWHpteigfU4= -----END CERTIFICATE-----Generated at Sat Apr 5 17:27:39 2025 by rpki-client