$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HLb8a339Prnxq4myNu1hg9lmoog.roa File: HLb8a339Prnxq4myNu1hg9lmoog.roa (raw, json) Hash identifier: YKljZ5xs+YtFELHf0RUINBHl2h4fFXOP8FReNCR/f2M= Subject key identifier: 1C:B6:FC:6B:7D:FD:3E:B9:F1:AB:89:B2:36:ED:61:83:D9:66:A2:88 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B5D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HLb8a339Prnxq4myNu1hg9lmoog.roa Signing time: Tue 01 Apr 2025 01:33:22 +0000 ROA not before: Tue 01 Apr 2025 01:33:22 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:33:22 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1CB6FC6B7DFD3EB9F1AB89B236ED6183D966A288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fa:04:ac:ee:a6:b7:19:7c:6b:dc:87:9a:cd: b9:9f:7f:6a:b6:a4:63:ae:18:a3:ca:59:0e:a6:5d: c8:60:d6:1c:63:64:43:fa:6f:b4:5d:17:31:8f:9f: 1c:fc:46:bf:a6:51:f0:9f:30:78:24:8a:43:50:c7: ae:14:af:02:76:1f:52:1e:58:6d:39:b1:48:c6:ef: 87:b5:0a:69:7d:e7:2f:e6:9e:f6:ad:33:04:c4:92: 40:c3:0f:b9:e0:d4:9e:93:3e:17:ea:c7:b2:fe:72: b1:f3:65:0f:6e:6d:3f:23:b5:3b:b9:3b:a7:af:49: 3d:db:a3:0a:87:da:7e:b3:dd:36:46:c0:9b:07:69: 54:72:f8:6c:2b:58:a1:3f:39:9e:c4:53:65:52:a9: 29:40:68:2c:63:f8:55:66:c4:03:ca:73:c5:9c:29: 16:8b:65:8e:45:48:41:e9:ed:6a:48:f2:9f:05:6d: c8:8a:51:63:dc:87:05:04:ea:24:ba:47:c1:c7:22: 2a:84:a1:56:f6:8a:a1:e0:04:5b:53:f3:97:83:54: 43:b7:93:ab:50:18:1f:3d:03:d5:28:f2:9b:66:02: 90:54:c0:5b:f2:c6:02:b7:ab:c8:7c:f1:74:44:b8: 78:12:d5:1e:b1:06:9a:d7:b1:89:da:49:fe:92:a4: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B6:FC:6B:7D:FD:3E:B9:F1:AB:89:B2:36:ED:61:83:D9:66:A2:88 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HLb8a339Prnxq4myNu1hg9lmoog.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.101.0/24 Signature Algorithm: sha256WithRSAEncryption b1:df:b7:4a:c5:c3:44:cf:2e:8d:0e:05:32:6a:04:55:3f:c6: 05:a8:79:98:e9:f5:ba:2a:dc:02:35:fb:49:8b:5d:3d:c2:ea: 63:41:28:46:c5:25:75:0b:aa:0c:97:35:f6:97:0d:88:76:20: 0f:e6:28:10:53:57:9b:a7:4b:50:bf:63:cf:f8:4d:ca:db:6d: 7b:84:b0:54:5f:cd:ea:75:54:82:30:13:c3:dd:56:ff:79:29: be:27:6f:73:95:d4:60:e8:a8:11:11:38:17:ed:dc:bd:e8:4b: 17:bf:8f:0d:03:35:03:1d:c7:22:6b:76:12:5a:83:bb:c8:e3: dd:5a:0e:53:6e:55:c5:0c:66:63:ab:44:0f:56:5b:aa:51:55: 2b:3e:62:88:d0:1a:16:9f:8e:87:db:ff:f4:3d:11:5f:b3:4e: a1:8f:28:e3:16:ab:3c:8f:87:1e:4b:e2:81:c2:12:ba:94:07: 78:30:c3:c5:67:e8:12:00:ad:e2:eb:56:88:f8:63:ea:a3:06: c7:29:8a:15:63:a9:0a:85:2c:71:3a:7f:b4:8c:4e:7e:5a:03: d1:87:92:aa:3e:11:c3:c5:b8:6c:df:54:15:dc:49:c9:69:22: 5a:2a:50:40:fd:6e:dd:eb:fb:13:67:69:df:2c:f4:49:99:0d: 02:b2:da:e9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC10wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTMzMjJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFDQjZGQzZCN0RGRDNF QjlGMUFCODlCMjM2RUQ2MTgzRDk2NkEyODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCY+gSs7qa3GXxr3Ieazbmff2q2pGOuGKPKWQ6mXchg1hxjZEP6 b7RdFzGPnxz8Rr+mUfCfMHgkikNQx64UrwJ2H1IeWG05sUjG74e1Cml95y/mnvat MwTEkkDDD7ng1J6TPhfqx7L+crHzZQ9ubT8jtTu5O6evST3bowqH2n6z3TZGwJsH aVRy+GwrWKE/OZ7EU2VSqSlAaCxj+FVmxAPKc8WcKRaLZY5FSEHp7WpI8p8FbciK UWPchwUE6iS6R8HHIiqEoVb2iqHgBFtT85eDVEO3k6tQGB89A9Uo8ptmApBUwFvy xgK3q8h88XREuHgS1R6xBprXsYnaSf6SpK2rAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHLb8a339Prnxq4myNu1hg9lmoogwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hMYjhhMzM5UHJueHE0bXlOdTFoZzlsbW9vZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxamUwDQYJKoZIhvcNAQELBQADggEBALHft0rFw0TPLo0OBTJqBFU/xgWo eZjp9boq3AI1+0mLXT3C6mNBKEbFJXULqgyXNfaXDYh2IA/mKBBTV5unS1C/Y8/4 TcrbbXuEsFRfzep1VIIwE8PdVv95Kb4nb3OV1GDoqBEROBft3L3oSxe/jw0DNQMd xyJrdhJag7vI491aDlNuVcUMZmOrRA9WW6pRVSs+YojQGhafjofb//Q9EV+zTqGP KOMWqzyPhx5L4oHCErqUB3gww8Vn6BIAreLrVoj4Y+qjBscpihVjqQqFLHE6f7SM Tn5aA9GHkqo+EcPFuGzfVBXcSclpIloqUED9bt3r+xNnad8s9EmZDQKy2uk= -----END CERTIFICATE-----Generated at Sat Apr 26 18:20:23 2025 by rpki-client