$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3MKsK8rC_P1f3S_15fzf0mgQxZQ.roa File: 3MKsK8rC_P1f3S_15fzf0mgQxZQ.roa (raw, json) Hash identifier: g6t77praweSrUCVWcHj/HQLNwNoe8UfOQ/znROL1/AI= Subject key identifier: DC:C2:AC:2B:CA:C2:FC:FD:5F:DD:2F:F5:E5:FC:DF:D2:68:10:C5:94 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D25 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3MKsK8rC_P1f3S_15fzf0mgQxZQ.roa Signing time: Tue 01 Apr 2025 02:13:49 +0000 ROA not before: Tue 01 Apr 2025 02:13:49 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3365 (0xd25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:13:49 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=DCC2AC2BCAC2FCFD5FDD2FF5E5FCDFD26810C594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:43:4a:5b:8b:f4:3b:57:aa:b2:1a:8d:da: c6:cf:35:cc:63:c8:20:db:94:2e:a9:58:71:a7:09: fa:20:fd:57:20:ba:06:a3:e4:9b:e2:0e:67:1d:a0: c6:48:cc:e4:5a:c4:c5:d3:fb:ec:32:66:71:8d:15: 08:5c:79:45:da:90:e2:2f:d5:67:a3:fb:c4:f8:c7: 30:7d:22:43:cd:f9:e8:e2:80:b1:81:3c:b9:61:28: 1c:fa:25:e3:02:2f:41:b1:6c:17:61:50:71:84:9a: ce:7c:29:f8:ee:cd:0d:c1:77:47:a9:bc:f3:5b:b7: 42:27:13:78:24:ff:a5:ad:02:17:9f:e5:3e:ed:27: 67:89:44:44:3a:ea:8c:86:c2:a4:43:2e:69:e0:9f: ee:4f:4d:15:ec:38:80:4f:e2:e0:a3:19:dc:b3:9c: 99:3e:fe:0d:79:76:4a:61:9f:16:0f:2f:2b:81:39: 8a:7a:c3:8a:06:e3:36:52:3f:cc:a6:50:59:22:1b: 96:59:c9:0a:04:6c:d0:a4:cc:4d:62:a9:53:cc:09: 0a:3a:96:4a:94:3d:01:3d:39:cd:84:fc:56:eb:cb: 9b:99:39:88:76:6e:1e:ca:04:ef:ae:1d:90:df:b6: 4e:87:51:ed:e8:c2:1b:a9:bc:3c:85:c9:29:f2:de: e7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C2:AC:2B:CA:C2:FC:FD:5F:DD:2F:F5:E5:FC:DF:D2:68:10:C5:94 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3MKsK8rC_P1f3S_15fzf0mgQxZQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.16.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:51:22:95:c5:4e:88:1a:96:5b:16:6e:37:d2:dc:d6:f2:49: 54:36:cc:f4:3a:fe:bf:aa:86:90:f1:44:e9:d6:2f:52:d5:83: 5c:6e:45:68:f4:91:d9:88:09:5a:1b:83:08:cf:20:b0:13:7a: 3f:b6:9b:e6:56:47:cb:47:95:6b:0e:66:8d:a1:f8:9c:fa:aa: e4:28:fd:16:eb:8d:15:a7:10:9c:9e:d8:ca:a6:91:ca:ac:71: 88:d8:a2:88:85:21:71:28:a6:c2:4c:db:5e:fe:ef:7e:6a:24: 4a:e6:07:21:55:4b:b9:9c:06:5c:fa:ed:d6:43:d0:9f:c0:aa: 4d:78:5f:5b:62:3c:a6:ed:72:df:74:4a:cb:cd:08:75:4f:bf: f6:9f:3d:e0:9e:ec:13:7c:5d:de:7f:8b:f1:22:11:29:4a:80: ec:a3:c0:d5:72:cc:7a:32:f1:b5:e1:49:c5:b0:09:dd:79:fa: b8:99:77:19:ba:e1:e7:77:59:05:27:6d:c8:11:db:ca:07:66: 1a:7f:92:21:d3:f3:d6:71:31:34:58:b2:bd:da:1b:ec:f2:2b: 94:61:26:ef:1f:c0:f1:ff:4b:58:26:04:05:f9:fb:dd:3a:3a: 11:cd:5d:db:02:b5:6d:73:78:f2:97:bd:45:21:ad:5d:75:0c: 30:68:66:40 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDSUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjEzNDlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERDQzJBQzJCQ0FDMkZD RkQ1RkREMkZGNUU1RkNERkQyNjgxMEM1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDELUNKW4v0O1eqshqN2sbPNcxjyCDblC6pWHGnCfog/Vcgugaj 5JviDmcdoMZIzORaxMXT++wyZnGNFQhceUXakOIv1Wej+8T4xzB9IkPN+ejigLGB PLlhKBz6JeMCL0GxbBdhUHGEms58KfjuzQ3Bd0epvPNbt0InE3gk/6WtAhef5T7t J2eJREQ66oyGwqRDLmngn+5PTRXsOIBP4uCjGdyznJk+/g15dkphnxYPLyuBOYp6 w4oG4zZSP8ymUFkiG5ZZyQoEbNCkzE1iqVPMCQo6lkqUPQE9Oc2E/Fbry5uZOYh2 bh7KBO+uHZDftk6HUe3owhupvDyFySny3uf3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3MKsK8rC/P1f3S/15fzf0mgQxZQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzNNS3NLOHJDX1AxZjNTXzE1ZnpmMG1nUXhaUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxaBAwDQYJKoZIhvcNAQELBQADggEBAJ1RIpXFTogallsWbjfS3NbySVQ2 zPQ6/r+qhpDxROnWL1LVg1xuRWj0kdmICVobgwjPILATej+2m+ZWR8tHlWsOZo2h +Jz6quQo/RbrjRWnEJye2MqmkcqscYjYooiFIXEopsJM217+735qJErmByFVS7mc Blz67dZD0J/Aqk14X1tiPKbtct90SsvNCHVPv/afPeCe7BN8Xd5/i/EiESlKgOyj wNVyzHoy8bXhScWwCd15+riZdxm64ed3WQUnbcgR28oHZhp/kiHT89ZxMTRYsr3a G+zyK5RhJu8fwPH/S1gmBAX5+906OhHNXdsCtW1zePKXvUUhrV11DDBoZkA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:58:41 2025 by rpki-client