$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ILWM45Tn-egbgx-3NePnyKNagkg.roa File: ILWM45Tn-egbgx-3NePnyKNagkg.roa (raw, json) Hash identifier: Yd5yWukevWnKFNhboNzzxJ38R3Qbhw/v7pTBRRuJcPc= Subject key identifier: 20:B5:8C:E3:94:E7:F9:E8:1B:83:1F:B7:35:E3:E7:C8:A3:5A:82:48 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E02 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ILWM45Tn-egbgx-3NePnyKNagkg.roa Signing time: Tue 01 Apr 2025 02:29:14 +0000 ROA not before: Tue 01 Apr 2025 02:29:14 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3586 (0xe02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:29:14 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=20B58CE394E7F9E81B831FB735E3E7C8A35A8248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:f9:f4:8c:a3:95:42:b8:e9:6f:5b:27:2b: a5:77:14:c6:60:75:a0:bb:13:02:2c:89:6a:74:d8: 98:fd:c2:91:32:05:43:da:2b:bd:f3:2a:69:01:e4: 81:01:75:db:28:ad:98:86:82:ce:6d:09:59:0e:23: 89:57:a6:a4:97:fe:48:f2:d4:95:8e:b4:e0:13:84: 37:5a:ef:28:0f:41:46:24:13:bf:aa:8f:f6:19:7b: 88:84:ed:d7:7c:9b:fa:08:bd:ea:7f:79:e4:d6:9c: a2:a7:15:44:da:8b:8a:3e:50:c3:2e:cd:18:57:75: 91:d6:92:f6:85:8f:4b:3d:70:0f:3f:18:c8:77:58: f0:d3:a4:ff:10:34:dd:61:05:18:d4:9f:ce:b6:a3: 28:31:12:f6:2e:4d:68:dc:f8:ec:36:37:e1:f9:c2: 2d:fc:75:2d:30:ad:36:12:bd:46:de:cd:15:26:d0: e8:1e:ae:d9:b5:fe:69:16:b8:39:d1:2f:d4:67:80: de:54:cc:34:36:e4:2a:c3:34:b0:79:1e:32:83:df: 8e:8b:62:c9:88:e3:e6:0e:c8:1b:2b:0d:14:96:fd: 3c:38:1d:b6:37:65:52:40:92:65:c9:d9:54:2e:8f: f4:0f:dc:0d:65:c3:1f:4b:18:e4:d7:27:bf:cd:ab: 53:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B5:8C:E3:94:E7:F9:E8:1B:83:1F:B7:35:E3:E7:C8:A3:5A:82:48 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ILWM45Tn-egbgx-3NePnyKNagkg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.40.0/24 Signature Algorithm: sha256WithRSAEncryption 62:4f:7b:8a:3d:59:49:6d:03:1a:20:74:ca:b8:bd:16:98:c7: 80:46:13:b3:0a:ad:34:8d:f4:85:aa:a6:5e:69:0d:ca:0a:1f: 5f:54:13:07:9a:ba:ab:ee:3e:f4:cd:13:69:52:34:ba:76:96: a3:76:95:c7:34:7d:7d:8a:06:d0:00:cc:fa:08:c6:54:60:2b: 0a:08:9c:2d:5f:05:2e:18:1a:1a:3b:ab:21:2b:86:5a:12:2a: df:86:56:ba:70:8c:fc:9d:16:7e:35:76:07:79:c9:e1:2d:0d: f6:3a:34:50:1f:9d:9a:c3:4a:4f:cf:2d:dd:07:fa:91:cd:37: 4f:2f:bf:3d:ad:56:03:ea:af:c1:60:bf:c8:60:bc:b9:8d:d8: 91:8a:15:c3:e7:5f:dd:7c:2d:03:22:4d:3c:75:cf:d7:e4:5f: 47:ee:26:b6:ce:18:a3:b0:14:6b:61:89:34:12:e8:ce:16:c4: 1f:da:d1:20:5c:df:90:54:81:61:0e:d8:0b:e8:3c:d9:6b:31: 3b:6c:0f:88:54:3b:ad:b7:50:5e:e3:b0:55:c1:66:e7:30:63: 8d:dc:49:e9:80:31:fb:98:24:79:18:e7:74:10:9d:f2:36:bf: 6c:c1:5c:34:98:22:6a:9e:55:77:0c:a5:60:b7:b5:f5:cd:47: 44:9b:3c:33 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDgIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI5MTRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDIwQjU4Q0UzOTRFN0Y5 RTgxQjgzMUZCNzM1RTNFN0M4QTM1QTgyNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC39Pn0jKOVQrjpb1snK6V3FMZgdaC7EwIsiWp02Jj9wpEyBUPa K73zKmkB5IEBddsorZiGgs5tCVkOI4lXpqSX/kjy1JWOtOAThDda7ygPQUYkE7+q j/YZe4iE7dd8m/oIvep/eeTWnKKnFUTai4o+UMMuzRhXdZHWkvaFj0s9cA8/GMh3 WPDTpP8QNN1hBRjUn862oygxEvYuTWjc+Ow2N+H5wi38dS0wrTYSvUbezRUm0Oge rtm1/mkWuDnRL9RngN5UzDQ25CrDNLB5HjKD346LYsmI4+YOyBsrDRSW/Tw4HbY3 ZVJAkmXJ2VQuj/QP3A1lwx9LGOTXJ7/Nq1PvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUILWM45Tn+egbgx+3NePnyKNagkgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lMV000NVRuLWVnYmd4LTNOZVBueUtOYWdrZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYigwDQYJKoZIhvcNAQELBQADggEBAGJPe4o9WUltAxogdMq4vRaYx4BG E7MKrTSN9IWqpl5pDcoKH19UEweauqvuPvTNE2lSNLp2lqN2lcc0fX2KBtAAzPoI xlRgKwoInC1fBS4YGho7qyErhloSKt+GVrpwjPydFn41dgd5yeEtDfY6NFAfnZrD Sk/PLd0H+pHNN08vvz2tVgPqr8Fgv8hgvLmN2JGKFcPnX918LQMiTTx1z9fkX0fu JrbOGKOwFGthiTQS6M4WxB/a0SBc35BUgWEO2AvoPNlrMTtsD4hUO623UF7jsFXB ZucwY43cSemAMfuYJHkY53QQnfI2v2zBXDSYImqeVXcMpWC3tfXNR0SbPDM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:15:45 2025 by rpki-client