$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4z7_2-iOObNN-OYGx8ipQ4PxgVA.roa File: 4z7_2-iOObNN-OYGx8ipQ4PxgVA.roa (raw, json) Hash identifier: CaCBSFrPEXI9KhEOp/345RkaIB0eKY9gBmW4FXI7Y7g= Subject key identifier: E3:3E:FF:DB:E8:8E:39:B3:4D:F8:E6:06:C7:C8:A9:43:83:F1:81:50 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D9E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4z7_2-iOObNN-OYGx8ipQ4PxgVA.roa Signing time: Tue 01 Apr 2025 02:24:35 +0000 ROA not before: Tue 01 Apr 2025 02:24:35 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3486 (0xd9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:35 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E33EFFDBE88E39B34DF8E606C7C8A94383F18150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:65:06:9f:dd:8c:01:2f:bf:96:d3:85:7e: 3e:fa:5b:6d:eb:de:25:bb:6d:4c:7e:04:04:2b:87: 36:fa:6d:04:26:c9:cc:a4:20:0c:d7:29:42:c8:b6: 2f:75:a9:6d:5a:88:d4:20:63:e0:9e:09:69:65:1a: 05:ed:ef:6a:db:31:3b:1b:23:b5:8f:4c:71:03:a8: 79:3f:3c:b9:b3:30:b5:33:6c:bb:31:17:98:04:1d: fa:27:77:b1:23:91:9f:46:fb:20:b2:2b:03:e5:4a: ee:b1:68:d0:47:a7:b8:77:f2:b1:fe:67:05:e3:d9: bc:eb:49:a5:c3:ff:ab:e5:f2:c2:56:5a:4d:ae:23: 48:2c:0d:cd:ad:8a:bc:cd:7b:64:1b:52:51:5d:fc: 84:f2:be:a9:f9:a7:34:78:5f:eb:b9:7c:0a:cd:8d: d3:aa:ed:c8:dc:d5:39:cd:78:fb:71:09:9b:9c:34: 9b:a6:f1:dc:bc:b6:65:98:e2:2f:c1:c8:93:9a:ab: eb:17:4a:71:f0:ee:8f:5a:fd:17:54:cc:39:2d:7e: 30:09:85:68:92:d9:e7:50:09:38:46:e8:00:44:45: e8:dd:8d:24:6b:51:b0:b6:ba:34:b5:70:20:9c:bb: be:a2:af:87:7b:61:bd:50:04:59:1c:b8:75:8b:b2: 91:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3E:FF:DB:E8:8E:39:B3:4D:F8:E6:06:C7:C8:A9:43:83:F1:81:50 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4z7_2-iOObNN-OYGx8ipQ4PxgVA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.28.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:8a:74:8e:00:3c:58:33:f7:b4:da:27:c8:e6:96:30:07:db: aa:06:3d:25:5b:a7:e3:29:b8:04:59:2a:a0:0d:d9:27:c4:17: cf:ff:97:2c:ac:26:ea:21:84:77:7c:10:c1:4e:ac:f9:53:41: fc:70:9f:f2:ba:24:98:df:93:f2:5a:b0:e0:e1:81:9b:74:51: a5:f1:b5:00:94:43:18:df:d6:a4:cb:eb:ad:43:d6:eb:ea:46: e4:5c:07:ab:5b:3c:ed:3f:b9:e6:77:77:08:0d:71:be:34:18: c0:03:e4:29:e1:8b:32:62:ef:98:ab:99:b6:41:6f:af:bd:68: a3:69:fb:68:ca:7f:c2:30:b4:60:e4:84:e6:f8:e7:79:c6:3e: e4:f1:99:02:d0:d2:1a:96:47:5a:12:73:87:fa:43:23:91:d8: cc:af:4e:79:11:84:89:30:98:61:dd:2d:d4:a7:1c:7c:ab:df: 26:1d:97:c5:b4:70:37:35:f1:aa:62:1d:a9:04:8b:00:81:d5: 1f:76:95:78:b9:13:1a:ea:de:02:e0:fb:1d:52:a8:3c:dd:e9: 21:56:75:85:fc:92:13:e8:5e:5e:a5:2e:8f:7b:58:2f:b2:1b: cc:39:a8:10:97:ea:89:ec:2d:1c:13:2f:44:eb:1b:88:59:f0: e1:82:09:f9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDZ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0MzVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUzM0VGRkRCRTg4RTM5 QjM0REY4RTYwNkM3QzhBOTQzODNGMTgxNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKO2UGn92MAS+/ltOFfj76W23r3iW7bUx+BAQrhzb6bQQmycyk IAzXKULIti91qW1aiNQgY+CeCWllGgXt72rbMTsbI7WPTHEDqHk/PLmzMLUzbLsx F5gEHfond7EjkZ9G+yCyKwPlSu6xaNBHp7h38rH+ZwXj2bzrSaXD/6vl8sJWWk2u I0gsDc2tirzNe2QbUlFd/ITyvqn5pzR4X+u5fArNjdOq7cjc1TnNePtxCZucNJum 8dy8tmWY4i/ByJOaq+sXSnHw7o9a/RdUzDktfjAJhWiS2edQCThG6ABERejdjSRr UbC2ujS1cCCcu76ir4d7Yb1QBFkcuHWLspHTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4z7/2+iOObNN+OYGx8ipQ4PxgVAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzR6N18yLWlPT2JOTi1PWUd4OGlwUTRQeGdWQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaBwwDQYJKoZIhvcNAQELBQADggEBAJ2KdI4APFgz97TaJ8jmljAH26oG PSVbp+MpuARZKqAN2SfEF8//lyysJuohhHd8EMFOrPlTQfxwn/K6JJjfk/JasODh gZt0UaXxtQCUQxjf1qTL661D1uvqRuRcB6tbPO0/ueZ3dwgNcb40GMAD5CnhizJi 75irmbZBb6+9aKNp+2jKf8IwtGDkhOb453nGPuTxmQLQ0hqWR1oSc4f6QyOR2Myv TnkRhIkwmGHdLdSnHHyr3yYdl8W0cDc18apiHakEiwCB1R92lXi5Exrq3gLg+x1S qDzd6SFWdYX8khPoXl6lLo97WC+yG8w5qBCX6onsLRwTL0TrG4hZ8OGCCfk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:38:27 2025 by rpki-client