$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EYvZmW3b2hBf8yVXrbxrhIzhQKg.roa File: EYvZmW3b2hBf8yVXrbxrhIzhQKg.roa (raw, json) Hash identifier: upkn/T1/tqjdNhDrSZV0KJ6ZoxCwxBm0Ei4P300fZ1g= Subject key identifier: 11:8B:D9:99:6D:DB:DA:10:5F:F3:25:57:AD:BC:6B:84:8C:E1:40:A8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E09 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EYvZmW3b2hBf8yVXrbxrhIzhQKg.roa Signing time: Tue 01 Apr 2025 02:31:25 +0000 ROA not before: Tue 01 Apr 2025 02:31:25 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3593 (0xe09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:31:25 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=118BD9996DDBDA105FF32557ADBC6B848CE140A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b2:07:b3:c4:e0:49:24:52:de:e6:9b:d7:42: 52:6c:5a:9f:0b:77:db:66:3d:e1:6d:e2:d4:ef:84: 1f:5d:73:60:e3:61:ed:01:07:8b:20:3b:1b:5d:31: e5:1f:6c:d2:75:02:87:20:c7:ff:8c:8e:5e:f4:5f: 2f:3a:ff:f1:dc:70:3f:78:4c:a3:e9:54:4c:38:a0: fa:8b:3e:b1:a2:b8:b6:d6:9b:46:36:9a:96:5c:aa: 8d:b8:01:33:26:67:84:0b:e6:da:4f:21:8f:18:e1: c3:63:5f:81:ab:f9:1d:69:a5:c1:5d:1c:b1:2b:8c: 33:18:ab:9f:73:95:93:0a:4a:7a:e5:1e:d7:39:96: 1f:4e:77:7f:70:8b:e9:8e:ee:5f:ef:c0:60:15:1b: 51:26:35:97:b2:f2:17:95:63:b7:44:77:dc:9a:d6: a9:9d:f4:10:46:f9:eb:80:07:a4:a3:c9:5a:09:54: 4d:67:6c:b5:df:45:ac:0b:7b:2b:dd:35:4d:80:57: df:b7:2f:cd:62:6e:07:df:be:99:19:e2:89:0d:c5: c4:8c:e1:93:33:4a:30:f5:54:2b:cf:b7:6f:06:c7: 36:d4:29:13:c3:03:4d:47:c3:73:8e:34:10:b4:53: 2f:c4:89:97:f7:3f:c3:a1:d1:f3:62:11:79:a6:4c: 10:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8B:D9:99:6D:DB:DA:10:5F:F3:25:57:AD:BC:6B:84:8C:E1:40:A8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EYvZmW3b2hBf8yVXrbxrhIzhQKg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.18.0/23 Signature Algorithm: sha256WithRSAEncryption b8:85:19:17:40:50:b8:e4:36:32:58:e5:36:44:90:a0:62:fe: 30:19:76:d6:30:70:95:a7:eb:e6:35:7d:07:e1:a1:c5:db:e4: aa:35:f4:5b:e5:b6:dc:ef:49:36:6b:44:e7:5c:cc:7b:90:d5: 7f:9b:87:00:c6:45:6a:6c:17:43:60:08:99:da:11:d2:97:0f: 6f:85:58:47:25:db:73:17:91:a9:8b:5f:8f:7f:66:e3:76:73: f2:e5:80:4e:fc:c7:fe:a6:fb:9f:d7:14:79:33:4d:77:19:f2: 76:55:45:15:ca:4c:0f:45:9a:af:16:25:fe:1b:f5:e5:3c:b9: 77:6d:37:6a:ab:bd:3f:c5:e1:d4:57:ad:47:d7:d4:f3:ed:fb: c7:4c:38:26:20:59:f9:5d:23:ed:80:05:f1:cf:a7:2b:49:20: f0:da:e8:92:76:8a:8a:27:a9:03:3a:69:10:66:c0:4c:f9:fe: 51:67:e6:db:1f:4a:29:a2:a0:89:93:5b:b1:d6:40:e3:d8:72: a1:d7:16:21:c6:ec:bf:9d:3c:a4:28:30:cf:96:cf:70:20:97: 13:b7:c6:b2:24:29:2b:98:d8:dc:9c:a2:eb:28:3f:5e:f2:2d: 34:1e:4d:a0:2a:e7:90:95:5a:68:a1:a3:36:e9:86:41:a1:21: 5e:e9:73:77 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMxMjVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDExOEJEOTk5NkREQkRB MTA1RkYzMjU1N0FEQkM2Qjg0OENFMTQwQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNsgezxOBJJFLe5pvXQlJsWp8Ld9tmPeFt4tTvhB9dc2DjYe0B B4sgOxtdMeUfbNJ1Aocgx/+Mjl70Xy86//HccD94TKPpVEw4oPqLPrGiuLbWm0Y2 mpZcqo24ATMmZ4QL5tpPIY8Y4cNjX4Gr+R1ppcFdHLErjDMYq59zlZMKSnrlHtc5 lh9Od39wi+mO7l/vwGAVG1EmNZey8heVY7dEd9ya1qmd9BBG+euAB6SjyVoJVE1n bLXfRawLeyvdNU2AV9+3L81ibgffvpkZ4okNxcSM4ZMzSjD1VCvPt28GxzbUKRPD A01Hw3OONBC0Uy/EiZf3P8Oh0fNiEXmmTBB9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUEYvZmW3b2hBf8yVXrbxrhIzhQKgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0VZdlptVzNiMmhCZjh5VlhyYnhyaEl6aFFLZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaBIwDQYJKoZIhvcNAQELBQADggEBALiFGRdAULjkNjJY5TZEkKBi/jAZ dtYwcJWn6+Y1fQfhocXb5Ko19FvlttzvSTZrROdczHuQ1X+bhwDGRWpsF0NgCJna EdKXD2+FWEcl23MXkamLX49/ZuN2c/LlgE78x/6m+5/XFHkzTXcZ8nZVRRXKTA9F mq8WJf4b9eU8uXdtN2qrvT/F4dRXrUfX1PPt+8dMOCYgWfldI+2ABfHPpytJIPDa 6JJ2ioonqQM6aRBmwEz5/lFn5tsfSimioImTW7HWQOPYcqHXFiHG7L+dPKQoMM+W z3AglxO3xrIkKSuY2NycousoP17yLTQeTaAq55CVWmihozbphkGhIV7pc3c= -----END CERTIFICATE-----Generated at Sat Apr 26 18:20:24 2025 by rpki-client