$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0M79Pp2kn3ScYpxX0HKcRsW4ZFg.roa File: 0M79Pp2kn3ScYpxX0HKcRsW4ZFg.roa (raw, json) Hash identifier: RwjDr2+enJx6a6zzwdiz4tol66O6HJx6PtfH18gNDRg= Subject key identifier: D0:CE:FD:3E:9D:A4:9F:74:9C:62:9C:57:D0:72:9C:46:C5:B8:64:58 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D89 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0M79Pp2kn3ScYpxX0HKcRsW4ZFg.roa Signing time: Tue 01 Apr 2025 02:21:31 +0000 ROA not before: Tue 01 Apr 2025 02:21:31 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3465 (0xd89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:21:31 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D0CEFD3E9DA49F749C629C57D0729C46C5B86458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:8c:68:56:56:a1:fc:1a:1d:7e:6d:db:98: 2b:51:53:1c:bc:b8:a9:c2:13:78:d7:5a:5c:04:75: 45:9a:46:b7:ab:d7:93:7b:6d:1d:37:fe:07:fe:b8: 59:c4:74:d9:a2:38:ab:b0:0e:d8:47:7e:be:92:05: 67:25:2c:e8:02:a9:17:68:0b:b7:92:7b:3e:20:a7: 84:a3:9c:73:13:5e:92:62:39:7b:f1:87:1e:02:28: 29:97:9b:04:80:e7:fa:8c:57:12:6d:c9:49:0a:08: 57:e2:d3:e2:11:f9:c1:9b:05:1d:e7:9f:d3:b7:b4: 48:eb:63:2d:ce:0b:eb:1c:e9:b5:8e:33:59:da:79: 34:ab:b8:c2:55:5c:5e:d6:d1:4b:46:0d:3f:bf:6b: 63:7e:98:c8:f5:10:4f:f8:de:b4:e9:a3:57:bb:76: c3:dd:a0:f8:4c:fd:e0:dd:29:99:25:65:43:f1:1b: df:f4:a8:ce:5c:47:ba:79:16:fb:ed:17:74:ac:63: cb:d1:d4:60:e7:63:45:5d:64:64:86:c6:48:d2:1a: 93:e6:4d:45:6f:e2:52:bd:e8:b5:e9:fd:dc:80:93: db:6e:7a:c3:4c:73:d3:e6:c1:09:c0:49:fa:dc:9d: 54:00:03:9a:c4:d1:3e:f9:9e:f5:d2:b8:0c:e6:b9: 15:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CE:FD:3E:9D:A4:9F:74:9C:62:9C:57:D0:72:9C:46:C5:B8:64:58 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0M79Pp2kn3ScYpxX0HKcRsW4ZFg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.240.0/20 Signature Algorithm: sha256WithRSAEncryption ce:44:de:fd:fe:e3:90:f4:f7:3f:95:4e:38:58:04:15:54:4d: 97:f0:fa:71:3a:e7:e5:b4:5f:34:0e:90:ca:21:3f:b9:10:c9: 45:63:ec:fd:73:62:0a:4b:d6:29:73:45:6d:00:60:e1:9f:94: 96:e6:60:c5:45:ec:ba:94:7e:05:e1:55:c5:ab:0a:fa:0e:ab: fb:b9:96:a6:3e:df:31:15:05:6f:0b:8d:a7:58:9c:38:fc:c3: 2e:73:de:33:7c:14:6b:5c:10:27:36:8b:d0:b8:f6:48:e3:d0: 72:5f:cf:1c:be:19:31:bb:80:5d:76:d4:dd:dd:8c:25:cc:38: 6e:3f:6c:17:e9:6a:23:72:1a:43:24:72:e4:af:d0:a3:34:39: 59:ce:4b:93:c0:48:cb:ec:1f:cd:3b:75:fb:14:fc:13:e6:ce: 88:d0:26:42:31:b8:35:0f:d3:14:65:96:b0:88:82:9d:f8:57: c9:7e:f1:fe:ec:1e:78:82:bb:f1:78:a4:4c:ba:47:86:66:3b: c1:82:a9:0b:cb:b4:40:29:45:6a:f3:cc:4f:9a:85:03:ad:99: 6e:bd:00:6d:c2:47:17:2e:a1:22:f0:cf:3f:af:fa:65:1c:d4: 29:04:1c:a9:84:e8:6f:1e:06:a9:4c:ad:d4:5d:66:b0:01:0e: 59:0f:e3:d3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjIxMzFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQwQ0VGRDNFOURBNDlG NzQ5QzYyOUM1N0QwNzI5QzQ2QzVCODY0NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCm4xoVlah/Bodfm3bmCtRUxy8uKnCE3jXWlwEdUWaRrer15N7 bR03/gf+uFnEdNmiOKuwDthHfr6SBWclLOgCqRdoC7eSez4gp4SjnHMTXpJiOXvx hx4CKCmXmwSA5/qMVxJtyUkKCFfi0+IR+cGbBR3nn9O3tEjrYy3OC+sc6bWOM1na eTSruMJVXF7W0UtGDT+/a2N+mMj1EE/43rTpo1e7dsPdoPhM/eDdKZklZUPxG9/0 qM5cR7p5FvvtF3SsY8vR1GDnY0VdZGSGxkjSGpPmTUVv4lK96LXp/dyAk9tuesNM c9PmwQnASfrcnVQAA5rE0T75nvXSuAzmuRWrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0M79Pp2kn3ScYpxX0HKcRsW4ZFgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzBNNzlQcDJrbjNTY1lweFgwSEtjUnNXNFpGZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQxavAwDQYJKoZIhvcNAQELBQADggEBAM5E3v3+45D09z+VTjhYBBVUTZfw +nE65+W0XzQOkMohP7kQyUVj7P1zYgpL1ilzRW0AYOGflJbmYMVF7LqUfgXhVcWr CvoOq/u5lqY+3zEVBW8LjadYnDj8wy5z3jN8FGtcECc2i9C49kjj0HJfzxy+GTG7 gF121N3djCXMOG4/bBfpaiNyGkMkcuSv0KM0OVnOS5PASMvsH807dfsU/BPmzojQ JkIxuDUP0xRllrCIgp34V8l+8f7sHniCu/F4pEy6R4ZmO8GCqQvLtEApRWrzzE+a hQOtmW69AG3CRxcuoSLwzz+v+mUc1CkEHKmE6G8eBqlMrdRdZrABDlkP49M= -----END CERTIFICATE-----Generated at Sat Apr 26 18:23:21 2025 by rpki-client