$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JNpdpSv8qIvEqhdKl0ueQxsERt8.roa File: JNpdpSv8qIvEqhdKl0ueQxsERt8.roa (raw, json) Hash identifier: hIcJm3sg46NIeeAFbfAGvaX5myJQ6Rt8eLxsZ7tivkM= Subject key identifier: 24:DA:5D:A5:2B:FC:A8:8B:C4:AA:17:4A:97:4B:9E:43:1B:04:46:DF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D50 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JNpdpSv8qIvEqhdKl0ueQxsERt8.roa Signing time: Tue 01 Apr 2025 02:17:13 +0000 ROA not before: Tue 01 Apr 2025 02:17:13 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3408 (0xd50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:17:13 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=24DA5DA52BFCA88BC4AA174A974B9E431B0446DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c9:89:6b:c2:8b:00:87:92:9b:f3:eb:8d:81: c3:36:5c:11:08:c4:12:fe:2a:d1:70:86:be:35:d2: 7d:8f:bb:4c:5d:24:d4:7f:a3:8a:2b:f1:d1:18:51: 57:1b:37:13:2c:b1:46:27:c3:61:be:bb:c7:a8:75: cd:9a:34:ae:02:7c:03:d6:8d:00:40:7f:3f:13:aa: 37:1d:9b:a0:2f:73:df:5c:ca:a7:41:51:43:d5:3f: a4:69:c5:40:26:3c:f3:bf:84:b5:1d:f9:7f:59:2c: 49:fc:44:ea:55:55:72:95:8f:83:f3:b3:f9:0d:30: 72:f5:95:b5:51:1c:3f:6a:ac:32:3c:d8:a1:cb:dc: be:9e:da:7b:84:3e:52:a7:ab:42:c9:b7:db:33:e5: f4:de:20:43:44:58:15:0a:46:16:19:fc:35:a9:d4: 4f:50:02:07:04:68:84:f1:21:f3:d0:de:2e:de:80: f6:a1:13:87:fc:3b:02:28:99:de:84:3d:4a:52:d3: 16:65:ff:42:00:8d:54:fb:cd:88:8c:b1:e9:17:f2: 30:4f:d1:a5:15:70:f5:db:11:80:db:f8:ee:d1:ae: 0d:84:fb:ff:16:42:eb:7f:cb:67:d9:df:0a:e2:38: a5:09:39:34:1d:e3:7a:24:76:e9:20:e2:16:0d:f7: 2a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DA:5D:A5:2B:FC:A8:8B:C4:AA:17:4A:97:4B:9E:43:1B:04:46:DF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JNpdpSv8qIvEqhdKl0ueQxsERt8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.30.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:be:82:7e:16:1e:a9:cc:85:75:c5:97:02:59:35:2b:12:46: 5f:77:de:49:29:31:8d:d0:db:08:1d:22:e2:c7:9d:18:bc:d4: f5:f7:2b:b0:6d:68:b0:9c:e8:a6:d0:33:9e:af:6e:c3:fe:90: db:36:57:55:8e:8d:95:6d:e5:f4:2b:fb:39:6e:08:34:a2:fb: 47:cd:b2:dc:c6:5b:62:ff:0c:40:fe:42:45:84:aa:bd:d6:e6: 71:d3:48:f3:70:07:1a:c6:68:1e:16:0b:ad:e0:3e:0e:e6:53: f8:e6:31:ad:6d:a8:7e:15:28:27:40:2a:0c:74:7e:a9:86:ec: a9:24:86:e0:5b:ce:ed:86:a9:a0:6c:34:a0:81:7f:8e:3f:5e: 4a:77:8a:07:62:ce:cb:6f:24:59:96:0a:96:8b:77:a3:c5:c4: cc:93:f7:03:4a:52:d7:64:fd:1f:f5:5b:91:99:e8:d7:e6:0c: b1:1b:a6:75:34:b9:52:35:31:0c:79:52:7d:10:cd:b6:b6:21: 81:36:11:1e:c2:d9:ed:eb:29:5c:fd:a9:d3:dd:2c:6e:49:4f: 14:3f:14:12:7c:b2:54:06:6a:ec:98:a6:4f:4e:8f:69:ac:d2: 5e:65:66:9a:c3:be:d4:30:b0:8e:e7:52:63:4a:90:c5:fe:b1: c0:52:1d:0b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE3MTNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI0REE1REE1MkJGQ0E4 OEJDNEFBMTc0QTk3NEI5RTQzMUIwNDQ2REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGyYlrwosAh5Kb8+uNgcM2XBEIxBL+KtFwhr410n2Pu0xdJNR/ o4or8dEYUVcbNxMssUYnw2G+u8eodc2aNK4CfAPWjQBAfz8Tqjcdm6Avc99cyqdB UUPVP6RpxUAmPPO/hLUd+X9ZLEn8ROpVVXKVj4Pzs/kNMHL1lbVRHD9qrDI82KHL 3L6e2nuEPlKnq0LJt9sz5fTeIENEWBUKRhYZ/DWp1E9QAgcEaITxIfPQ3i7egPah E4f8OwIomd6EPUpS0xZl/0IAjVT7zYiMsekX8jBP0aUVcPXbEYDb+O7Rrg2E+/8W Qut/y2fZ3wriOKUJOTQd43okdukg4hYN9yoHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJNpdpSv8qIvEqhdKl0ueQxsERt8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0pOcGRwU3Y4cUl2RXFoZEtsMHVlUXhzRVJ0OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYh4wDQYJKoZIhvcNAQELBQADggEBAC2+gn4WHqnMhXXFlwJZNSsSRl93 3kkpMY3Q2wgdIuLHnRi81PX3K7BtaLCc6KbQM56vbsP+kNs2V1WOjZVt5fQr+zlu CDSi+0fNstzGW2L/DED+QkWEqr3W5nHTSPNwBxrGaB4WC63gPg7mU/jmMa1tqH4V KCdAKgx0fqmG7KkkhuBbzu2GqaBsNKCBf44/Xkp3igdizstvJFmWCpaLd6PFxMyT 9wNKUtdk/R/1W5GZ6NfmDLEbpnU0uVI1MQx5Un0Qzba2IYE2ER7C2e3rKVz9qdPd LG5JTxQ/FBJ8slQGauyYpk9Oj2ms0l5lZprDvtQwsI7nUmNKkMX+scBSHQs= -----END CERTIFICATE-----Generated at Sat Apr 26 18:21:38 2025 by rpki-client