$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/A9ukyIDoc4qIauJ3ZVi2S1Kysuw.roa File: A9ukyIDoc4qIauJ3ZVi2S1Kysuw.roa (raw, json) Hash identifier: Yh1sXxUthlpe/7EqgAvwO+5yMaTOJH3bGxILb4UwLsI= Subject key identifier: 03:DB:A4:C8:80:E8:73:8A:88:6A:E2:77:65:58:B6:4B:52:B2:B2:EC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C7C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A9ukyIDoc4qIauJ3ZVi2S1Kysuw.roa Signing time: Tue 01 Apr 2025 02:00:40 +0000 ROA not before: Tue 01 Apr 2025 02:00:40 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:00:40 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=03DBA4C880E8738A886AE2776558B64B52B2B2EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a8:cd:fe:a8:ed:b2:69:f1:53:00:30:ae:69: 0e:03:a0:2b:8b:06:d8:a1:31:43:6d:58:7a:a0:1b: 61:2c:9f:65:80:e6:28:0e:bf:ac:a8:76:8d:07:9a: 39:07:b4:ff:c6:48:12:87:13:d9:d4:d4:4c:7b:42: 91:a9:c6:31:8c:65:07:ac:53:99:f2:98:90:2c:b1: e3:f5:ac:de:0f:9f:79:e8:53:99:89:5b:3d:d8:ca: 08:cb:61:f1:8b:65:2e:f9:a4:d9:9d:da:6c:0d:25: 7b:d0:7b:9c:80:a3:b6:93:71:56:91:02:d2:9a:bc: 53:83:4a:59:57:55:40:2c:60:76:ec:24:05:b6:ea: 9e:ca:42:69:92:fb:85:43:60:ea:06:ce:32:f2:b2: b4:d7:c3:b4:d8:38:87:f6:19:e9:10:f0:2a:a6:6a: 80:67:d4:3e:3a:7f:eb:17:ce:56:ad:cc:8d:8a:02: 4f:e7:6c:56:d0:8f:0f:a5:b9:c2:72:c5:1c:85:74: fc:d3:e6:ee:51:6a:9c:bc:1b:98:74:c5:67:9d:d9: c7:05:db:da:b7:58:10:d4:b3:d3:d4:87:14:23:95: 3b:5e:0a:13:75:ad:46:73:91:b5:7b:93:21:bd:2d: bf:fa:c7:ea:5d:b4:2c:35:af:6d:52:2b:ef:a2:ce: 89:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DB:A4:C8:80:E8:73:8A:88:6A:E2:77:65:58:B6:4B:52:B2:B2:EC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A9ukyIDoc4qIauJ3ZVi2S1Kysuw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.128.0/23 Signature Algorithm: sha256WithRSAEncryption af:88:78:77:6e:cb:ac:db:4a:16:14:10:72:4f:c8:77:e2:cc: 9b:cd:4e:d0:2a:9d:61:dc:d8:8c:74:7c:90:95:80:95:de:0e: 7c:97:11:fc:3b:8b:4e:b7:35:13:e0:90:ba:96:61:9a:36:bd: 21:2b:1c:25:70:20:fe:df:12:b2:ce:9a:5a:dd:58:f3:2d:21: f1:87:74:28:1e:fd:b6:76:9b:aa:fe:1e:f7:fa:33:aa:91:69: 22:6e:ca:72:25:47:17:df:c8:1f:df:cb:b0:de:2b:79:38:4d: 97:dd:09:c1:49:70:2d:c7:13:49:42:39:57:b5:b2:0f:fa:e8: 0d:a4:e7:3c:92:3b:76:c6:82:97:e2:6f:03:52:cd:6c:08:b6: fe:22:f7:56:6c:63:6e:18:51:e8:78:99:94:b0:2a:1c:8d:83: 79:00:14:03:2a:10:fd:0a:7e:4d:85:dd:74:5a:9b:7c:2e:23: 34:aa:66:d8:79:1d:93:ff:62:d4:04:72:5d:2c:fd:dc:ba:2a: 75:74:6f:a4:f0:8c:62:04:da:36:bc:76:de:a9:d5:2d:e6:58: 94:82:e0:8c:09:43:64:ce:02:58:fc:a6:47:a8:f8:6b:3f:32: 93:da:ed:58:a9:c3:7a:96:ec:4d:10:da:d7:09:a2:c3:fe:b6: fe:3a:dd:32 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAwNDBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAzREJBNEM4ODBFODcz OEE4ODZBRTI3NzY1NThCNjRCNTJCMkIyRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeqM3+qO2yafFTADCuaQ4DoCuLBtihMUNtWHqgG2Esn2WA5igO v6yodo0HmjkHtP/GSBKHE9nU1Ex7QpGpxjGMZQesU5nymJAsseP1rN4Pn3noU5mJ Wz3YygjLYfGLZS75pNmd2mwNJXvQe5yAo7aTcVaRAtKavFODSllXVUAsYHbsJAW2 6p7KQmmS+4VDYOoGzjLysrTXw7TYOIf2GekQ8CqmaoBn1D46f+sXzlatzI2KAk/n bFbQjw+lucJyxRyFdPzT5u5Rapy8G5h0xWed2ccF29q3WBDUs9PUhxQjlTteChN1 rUZzkbV7kyG9Lb/6x+pdtCw1r21SK++izolhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUA9ukyIDoc4qIauJ3ZVi2S1KysuwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0E5dWt5SURvYzRxSWF1SjNaVmkyUzFLeXN1dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYoAwDQYJKoZIhvcNAQELBQADggEBAK+IeHduy6zbShYUEHJPyHfizJvN TtAqnWHc2Ix0fJCVgJXeDnyXEfw7i063NRPgkLqWYZo2vSErHCVwIP7fErLOmlrd WPMtIfGHdCge/bZ2m6r+Hvf6M6qRaSJuynIlRxffyB/fy7DeK3k4TZfdCcFJcC3H E0lCOVe1sg/66A2k5zySO3bGgpfibwNSzWwItv4i91ZsY24YUeh4mZSwKhyNg3kA FAMqEP0Kfk2F3XRam3wuIzSqZth5HZP/YtQEcl0s/dy6KnV0b6TwjGIE2ja8dt6p 1S3mWJSC4IwJQ2TOAlj8pkeo+Gs/MpPa7Vipw3qW7E0Q2tcJosP+tv463TI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:12:58 2025 by rpki-client