$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zyY6LemhjHsJpMEp-PfXkuDaJ64.roa File: zyY6LemhjHsJpMEp-PfXkuDaJ64.roa (raw, json) Hash identifier: 1gy+JYftTH7IhtrFMQysSY8/bsji7yGrIosDq5QSot4= Subject key identifier: CF:26:3A:2D:E9:A1:8C:7B:09:A4:C1:29:F8:F7:D7:92:E0:DA:27:AE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B7C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zyY6LemhjHsJpMEp-PfXkuDaJ64.roa Signing time: Tue 01 Apr 2025 01:36:49 +0000 ROA not before: Tue 01 Apr 2025 01:36:49 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2940 (0xb7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:36:49 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=CF263A2DE9A18C7B09A4C129F8F7D792E0DA27AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:b9:2b:0b:73:b0:f1:ff:f0:2a:c5:a5:6b: 2b:22:5d:67:b9:1d:7a:d3:2b:f5:1d:b3:9a:47:8f: 0b:2a:e6:fd:be:ed:d3:7c:fa:10:0e:dd:73:ab:9a: b1:e2:0d:16:99:10:b6:72:f9:d8:52:82:c5:7a:9c: a7:ee:3b:43:48:18:d0:a4:ec:a1:98:d5:f5:6c:8f: 38:bc:69:07:f4:b2:df:0c:7e:6c:a6:5b:88:c8:1a: 75:b9:eb:80:f5:9e:c9:1d:86:e2:67:f2:d9:b8:75: 7c:a4:74:87:de:04:f1:8a:36:2c:18:98:33:bd:7e: 37:f1:ac:f2:17:d0:f5:46:8e:2d:bf:78:57:3e:ed: ee:51:0c:8e:c3:40:73:df:d8:ca:ed:f7:10:6f:bf: 5e:8c:5a:6a:cd:0a:ac:c5:72:13:ab:0a:21:87:ce: 44:5d:d1:8c:e8:ce:32:0d:5f:61:29:ae:60:df:e0: bc:d5:cf:52:c4:ea:ed:8d:19:62:11:d9:b4:5e:d7: 6d:7e:39:52:da:77:50:cc:06:f3:dd:6e:89:98:24: fd:f9:5f:29:70:3f:90:60:36:c4:33:82:6b:09:68: 6b:6e:72:4f:00:2a:16:db:f5:c9:0e:4c:01:be:3f: 86:26:e0:2a:3e:cf:f3:05:27:25:40:ff:38:21:a9: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:26:3A:2D:E9:A1:8C:7B:09:A4:C1:29:F8:F7:D7:92:E0:DA:27:AE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zyY6LemhjHsJpMEp-PfXkuDaJ64.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.236.0/22 Signature Algorithm: sha256WithRSAEncryption 71:0d:52:5c:a6:dc:95:34:6f:6f:d6:b0:18:1b:dd:da:e6:9c: b6:2f:d4:d8:61:aa:55:d4:23:8d:cf:2d:33:68:e5:d7:47:f8: f8:f4:49:9b:dc:75:fa:ec:b0:89:ee:ef:c2:b7:fb:7f:e5:33: 25:c0:a3:38:a3:4c:d9:d3:f2:5b:ee:d9:0c:31:a5:a0:5e:c2: d6:25:53:d7:0d:fa:9d:25:c4:ea:e6:ad:81:7b:ad:2b:c3:24: 00:d5:42:c1:f4:b5:f8:62:32:a8:bd:d0:3e:97:21:99:87:57: 9f:dc:6b:e8:4b:f6:63:6c:3c:a0:6a:f2:bd:f5:f5:c0:90:7a: 13:81:af:a9:d5:d9:06:54:7f:23:61:52:2e:79:c7:1b:5c:b6: 38:fc:37:6d:d9:a0:71:16:e4:f5:61:d8:45:aa:09:a1:d4:60: 40:13:d1:ec:f6:5c:35:77:bc:2d:78:08:24:6a:04:44:c0:40: 93:e0:b1:84:bc:9a:c9:e7:ff:b8:c1:9f:a5:c5:f0:24:c9:0f: f4:bd:89:ca:5e:52:df:c8:c4:16:09:49:d3:c0:9e:fe:d5:f4: da:97:7d:d3:bb:f0:d3:7f:09:7f:52:16:d3:5b:74:37:45:36: 89:7e:f4:0e:da:26:bc:75:5f:91:5d:43:10:87:a7:ed:27:3d: 76:74:8a:0a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM2NDlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENGMjYzQTJERTlBMThD N0IwOUE0QzEyOUY4RjdENzkyRTBEQTI3QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsNLkrC3Ow8f/wKsWlaysiXWe5HXrTK/Uds5pHjwsq5v2+7dN8 +hAO3XOrmrHiDRaZELZy+dhSgsV6nKfuO0NIGNCk7KGY1fVsjzi8aQf0st8Mfmym W4jIGnW564D1nskdhuJn8tm4dXykdIfeBPGKNiwYmDO9fjfxrPIX0PVGji2/eFc+ 7e5RDI7DQHPf2Mrt9xBvv16MWmrNCqzFchOrCiGHzkRd0YzozjINX2EprmDf4LzV z1LE6u2NGWIR2bRe121+OVLad1DMBvPdbomYJP35XylwP5BgNsQzgmsJaGtuck8A Khbb9ckOTAG+P4Ym4Co+z/MFJyVA/zghqZ6lAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUzyY6LemhjHsJpMEp+PfXkuDaJ64wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3p5WTZMZW1oakhzSnBNRXAtUGZYa3VEYUo2NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxauwwDQYJKoZIhvcNAQELBQADggEBAHENUlym3JU0b2/WsBgb3drmnLYv 1NhhqlXUI43PLTNo5ddH+Pj0SZvcdfrssInu78K3+3/lMyXAozijTNnT8lvu2Qwx paBewtYlU9cN+p0lxOrmrYF7rSvDJADVQsH0tfhiMqi90D6XIZmHV5/ca+hL9mNs PKBq8r319cCQehOBr6nV2QZUfyNhUi55xxtctjj8N23ZoHEW5PVh2EWqCaHUYEAT 0ez2XDV3vC14CCRqBETAQJPgsYS8msnn/7jBn6XF8CTJD/S9icpeUt/IxBYJSdPA nv7V9NqXfdO78NN/CX9SFtNbdDdFNol+9A7aJrx1X5FdQxCHp+0nPXZ0igo= -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:31 2025 by rpki-client