$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30406/zzZErtNTULQ2uoC7X82asqhqcrM.roa File: zzZErtNTULQ2uoC7X82asqhqcrM.roa (raw, json) Hash identifier: ImdLOupiDXgN1tZoM7LptMrV8F/hhEW4SWrSti478SA= Subject key identifier: CF:36:44:AE:D3:53:50:B4:36:BA:80:BB:5F:CD:9A:B2:A8:6A:72:B3 Certificate issuer: /CN=E2CB211F293E54E84E3CBD9D22B0884675BB1C63 Certificate serial: 1E Authority key identifier: E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/zzZErtNTULQ2uoC7X82asqhqcrM.roa Signing time: Tue 01 Apr 2025 01:30:40 +0000 ROA not before: Tue 01 Apr 2025 01:30:40 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 24271 IP address blocks: 2400:99a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CB211F293E54E84E3CBD9D22B0884675BB1C63 Validity Not Before: Apr 1 01:30:40 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=CF3644AED35350B436BA80BB5FCD9AB2A86A72B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:4b:33:5e:94:c1:e5:08:24:f0:6d:a0:1e: e8:49:71:b6:20:0c:da:07:45:f8:bc:48:20:30:05: 1b:d3:29:f3:7d:c2:be:62:10:a2:67:a7:67:bd:13: 35:29:6c:64:ac:51:32:d0:90:77:f4:6e:3e:61:26: a5:0a:ed:7c:e4:1a:1b:4e:4e:eb:07:3b:af:36:9f: 53:7f:dc:27:93:f2:45:0a:5e:0e:a8:0e:51:fd:64: 73:dd:6e:fe:d9:16:8c:f1:28:93:36:92:ce:67:11: 38:32:f7:ef:fe:d5:0d:d7:47:ad:f6:22:c3:74:2a: 1d:0f:8e:3a:4c:24:5a:4a:e3:eb:f4:2f:9a:d3:97: 9a:8f:50:84:8d:4f:b2:2a:e1:b0:eb:fa:3a:a2:55: 1e:88:cf:41:96:80:71:7a:00:e4:44:5f:49:b0:0c: ac:84:45:90:50:47:55:86:19:8b:0c:3a:c5:7f:1f: 24:b3:3b:bf:31:5b:f4:a4:0f:1c:e3:9b:d3:74:b6: 9f:33:af:44:aa:0a:49:ef:83:95:7c:68:a8:d0:26: 80:b7:18:c3:28:0b:d9:c1:62:25:9d:6c:a1:d5:62: 79:a5:1b:cb:f0:0b:2b:ad:8f:0e:d6:c2:df:24:81: b9:c7:ae:48:77:83:d9:3a:fa:99:62:b5:e5:31:51: 2e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:36:44:AE:D3:53:50:B4:36:BA:80:BB:5F:CD:9A:B2:A8:6A:72:B3 X509v3 Authority Key Identifier: keyid:E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/zzZErtNTULQ2uoC7X82asqhqcrM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:99a0::/32 Signature Algorithm: sha256WithRSAEncryption 89:a0:2e:82:51:35:4e:95:ee:34:93:b2:7d:ea:4c:2d:b9:78: 02:10:66:0c:d6:28:3e:5a:ec:c0:b9:fb:73:c8:1c:85:54:96: 45:5d:ab:eb:f5:57:34:76:4c:6e:a5:67:cb:04:cd:74:79:b2: bd:f2:e4:5a:ff:bd:69:fb:d2:1a:c8:6d:f7:f1:9d:39:3c:e4: a8:02:33:07:ea:bb:b0:0b:3d:e4:a5:79:58:4d:1b:52:a2:35: 3d:ef:01:c5:54:c7:37:70:ef:f6:35:02:27:d8:aa:1f:36:c8: 4e:b8:22:cc:46:f0:cc:0e:2f:34:f6:8b:f7:94:d1:db:7f:f7: 69:56:1e:dc:47:d5:44:99:3c:13:02:37:ee:ba:84:4f:c1:26: a3:91:9f:b5:ab:10:15:32:71:86:ab:8c:17:9d:51:9d:55:22: 0a:69:62:77:8a:3c:01:08:33:be:0a:77:fa:fb:73:b4:80:9d: 5f:dd:00:6c:ab:ec:17:40:3f:ba:3e:82:b5:a5:d0:d8:02:a9: 74:93:35:4c:99:48:22:7d:bd:d2:7f:c3:86:d5:35:7f:99:18: 1f:53:df:05:f5:43:ad:56:70:08:16:25:4a:00:d1:44:2b:9c: 49:b4:d2:08:88:79:ac:01:4a:36:2e:e2:51:cd:cc:81:3c:83: 6a:0c:90:fe -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkNC MjExRjI5M0U1NEU4NEUzQ0JEOUQyMkIwODg0Njc1QkIxQzYzMB4XDTI1MDQwMTAx MzA0MFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQ0YzNjQ0QUVEMzUzNTBC NDM2QkE4MEJCNUZDRDlBQjJBODZBNzJCMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJyqSzNelMHlCCTwbaAe6ElxtiAM2gdF+LxIIDAFG9Mp833CvmIQ omenZ70TNSlsZKxRMtCQd/RuPmEmpQrtfOQaG05O6wc7rzafU3/cJ5PyRQpeDqgO Uf1kc91u/tkWjPEokzaSzmcRODL37/7VDddHrfYiw3QqHQ+OOkwkWkrj6/QvmtOX mo9QhI1PsirhsOv6OqJVHojPQZaAcXoA5ERfSbAMrIRFkFBHVYYZiww6xX8fJLM7 vzFb9KQPHOOb03S2nzOvRKoKSe+DlXxoqNAmgLcYwygL2cFiJZ1sodVieaUby/AL K62PDtbC3ySBuceuSHeD2Tr6mWK15TFRLoUCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTPNkSu01NQtDa6gLtfzZqyqGpyszAfBgNVHSMEGDAWgBTiyyEfKT5U6E48vZ0i sIhGdbscYzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MDYvNHNzaEh5ay1WT2hPUEwyZElyQ0lSblc3SEdNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHNzaEh5ay1WT2hPUEwyZElyQ0lS blc3SEdNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDA2L3p6WkVydE5UVUxRMnVvQzdYODJhc3FocWNyTS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAJmgMA0GCSqGSIb3DQEBCwUAA4IBAQCJoC6CUTVOle40k7J96kwt uXgCEGYM1ig+WuzAuftzyByFVJZFXavr9Vc0dkxupWfLBM10ebK98uRa/71p+9Ia yG338Z05POSoAjMH6ruwCz3kpXlYTRtSojU97wHFVMc3cO/2NQIn2KofNshOuCLM RvDMDi809ov3lNHbf/dpVh7cR9VEmTwTAjfuuoRPwSajkZ+1qxAVMnGGq4wXnVGd VSIKaWJ3ijwBCDO+Cnf6+3O0gJ1f3QBsq+wXQD+6PoK1pdDYAql0kzVMmUgifb3S f8OG1TV/mRgfU98F9UOtVnAIFiVKANFEK5xJtNIIiHmsAUo2LuJRzcyBPINqDJD+ -----END CERTIFICATE-----Generated at Sat Apr 26 18:48:22 2025 by rpki-client