$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Kr059JzIiVT2c4N9xj9HOeGAGqU.roa File: Kr059JzIiVT2c4N9xj9HOeGAGqU.roa (raw, json) Hash identifier: T4DfgNbqUe6ChpgqtLdPbX6Pt78/vL4M5VRC4qRy9Aw= Subject key identifier: 2A:BD:39:F4:9C:C8:89:54:F6:73:83:7D:C6:3F:47:39:E1:80:1A:A5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DE3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Kr059JzIiVT2c4N9xj9HOeGAGqU.roa Signing time: Tue 01 Apr 2025 02:27:28 +0000 ROA not before: Tue 01 Apr 2025 02:27:28 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3555 (0xde3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:28 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=2ABD39F49CC88954F673837DC63F4739E1801AA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:2d:31:74:7f:9d:7f:cf:40:85:9a:28:e4: 96:51:9a:d8:f3:b7:15:c7:df:28:04:e1:11:d2:5a: dc:e9:97:88:75:18:f3:73:85:04:87:7e:8d:82:af: 7c:6a:cb:60:24:37:0a:d1:e7:27:25:18:b6:00:9d: fc:44:f3:2c:60:5f:1f:bd:aa:de:6b:6a:f2:25:e7: f6:fb:79:d1:50:a7:8b:96:36:49:3e:04:73:f1:8b: eb:7f:0b:05:dd:dc:32:f2:3d:03:c2:0d:50:66:2d: b1:f4:bc:f9:b1:83:36:dc:96:6c:b0:17:e5:c6:d9: 57:0e:63:2d:f2:fd:e8:17:03:34:98:41:61:01:78: 8a:54:a5:33:eb:fc:bd:e4:f5:cb:ee:c2:83:e3:b5: 9e:0d:4e:92:9e:d7:6a:c6:72:98:9c:2f:dc:ec:2a: 46:23:50:e9:6f:7c:a2:9c:07:5d:d3:96:01:ea:59: 7f:58:e2:5a:f4:d2:74:22:53:2f:19:1c:b5:f9:12: f4:6a:b6:40:df:61:66:36:bd:51:e9:72:1c:48:f1: e7:97:5d:92:6c:0d:2b:fb:45:55:d3:c2:5e:ab:4b: 7f:70:13:02:02:32:60:e5:82:94:da:27:9c:43:d4: a2:2e:8b:5b:33:db:11:3b:2e:36:a1:c0:0c:ab:fe: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BD:39:F4:9C:C8:89:54:F6:73:83:7D:C6:3F:47:39:E1:80:1A:A5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Kr059JzIiVT2c4N9xj9HOeGAGqU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.152.0/23 Signature Algorithm: sha256WithRSAEncryption 21:81:7d:95:21:f5:dd:aa:b8:a2:a8:4a:1d:e6:a3:0e:55:86: 75:49:b2:89:11:f7:b9:eb:02:35:9a:46:66:21:de:2d:82:31: cf:96:a3:b9:22:57:1f:75:bf:c7:cf:b6:e9:55:d5:d8:2e:83: 87:2e:da:a3:b2:b0:f6:15:89:7a:aa:12:5d:04:2c:58:cd:72: 57:c9:3f:87:90:77:2d:54:2d:2f:6f:1a:fd:ba:11:34:cd:d0: 71:3a:c1:24:c7:f3:a8:a6:42:4c:5c:36:51:a0:4b:10:ec:92: 46:ef:0a:bb:15:a7:e6:a3:f6:e1:5f:10:b0:44:4a:e8:b1:a9: f6:d3:3a:cd:ea:cd:67:96:2a:25:01:2d:ab:a3:3a:c8:14:b9: 20:17:a9:28:e5:70:20:d0:8d:c8:7f:08:18:af:99:89:4b:c0: 6e:4f:47:19:e0:b8:bd:4b:d8:88:47:89:79:16:1d:a0:69:ff: b1:f2:72:cd:60:79:93:81:25:db:4b:d1:03:2e:93:2a:fb:a3: 11:12:0d:65:f7:db:06:66:d7:71:5a:43:b6:e7:3d:8f:1b:1a: c1:3a:48:29:31:ce:3d:cf:de:d2:f6:8d:3a:5d:54:73:c9:36: fa:a4:8f:4a:32:7f:08:51:69:ba:09:7d:08:d9:55:3f:6b:75: 7b:fd:06:7c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MjhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJBQkQzOUY0OUNDODg5 NTRGNjczODM3REM2M0Y0NzM5RTE4MDFBQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrXS0xdH+df89AhZoo5JZRmtjztxXH3ygE4RHSWtzpl4h1GPNz hQSHfo2Cr3xqy2AkNwrR5yclGLYAnfxE8yxgXx+9qt5ravIl5/b7edFQp4uWNkk+ BHPxi+t/CwXd3DLyPQPCDVBmLbH0vPmxgzbclmywF+XG2VcOYy3y/egXAzSYQWEB eIpUpTPr/L3k9cvuwoPjtZ4NTpKe12rGcpicL9zsKkYjUOlvfKKcB13TlgHqWX9Y 4lr00nQiUy8ZHLX5EvRqtkDfYWY2vVHpchxI8eeXXZJsDSv7RVXTwl6rS39wEwIC MmDlgpTaJ5xD1KIui1sz2xE7LjahwAyr/u8fAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKr059JzIiVT2c4N9xj9HOeGAGqUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0tyMDU5SnpJaVZUMmM0Tjl4ajlIT2VHQUdxVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYpgwDQYJKoZIhvcNAQELBQADggEBACGBfZUh9d2quKKoSh3mow5VhnVJ sokR97nrAjWaRmYh3i2CMc+Wo7kiVx91v8fPtulV1dgug4cu2qOysPYViXqqEl0E LFjNclfJP4eQdy1ULS9vGv26ETTN0HE6wSTH86imQkxcNlGgSxDskkbvCrsVp+aj 9uFfELBESuixqfbTOs3qzWeWKiUBLaujOsgUuSAXqSjlcCDQjch/CBivmYlLwG5P RxnguL1L2IhHiXkWHaBp/7Hycs1geZOBJdtL0QMukyr7oxESDWX32wZm13FaQ7bn PY8bGsE6SCkxzj3P3tL2jTpdVHPJNvqkj0oyfwhRaboJfQjZVT9rdXv9Bnw= -----END CERTIFICATE-----Generated at Sat Apr 26 18:24:14 2025 by rpki-client