$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UuyWK9RDBLA0CHZ3kJg9sR0deUo.roa File: UuyWK9RDBLA0CHZ3kJg9sR0deUo.roa (raw, json) Hash identifier: XY7o9E7AsYxPkrhXdkGZCsLsWjvX+xx7ulJKbhXyG1c= Subject key identifier: 52:EC:96:2B:D4:43:04:B0:34:08:76:77:90:98:3D:B1:1D:1D:79:4A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C8F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UuyWK9RDBLA0CHZ3kJg9sR0deUo.roa Signing time: Tue 01 Apr 2025 02:03:21 +0000 ROA not before: Tue 01 Apr 2025 02:03:21 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3215 (0xc8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:21 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=52EC962BD44304B03408767790983DB11D1D794A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:56:cd:16:fe:a4:5a:6b:8f:6c:46:b9:f6: 82:a7:2f:50:a8:71:48:e3:aa:62:8f:40:80:8d:e6: 20:c2:10:5d:d8:d2:12:22:72:34:b4:32:1a:0a:42: 66:ab:b9:f2:a4:23:83:45:fd:82:2c:34:af:1b:d3: b3:2f:79:55:5d:17:eb:dd:1f:42:60:e1:11:37:14: 5e:40:b6:37:5a:d4:43:72:c2:11:61:de:5e:d6:a0: c3:63:ea:ef:42:4c:34:1e:ee:03:ba:5e:55:57:a0: 12:8f:22:d8:2f:53:30:20:69:69:4f:86:f7:d6:0f: 4a:ce:a7:9d:e4:b4:85:a9:83:dd:d9:55:64:e7:c8: 2c:27:0a:fe:e9:11:97:fe:6d:f3:42:64:27:7e:df: 16:0d:71:9e:25:91:70:43:b4:bf:d8:0f:b9:cc:9b: 7b:8f:2b:c8:5b:d4:ba:b5:8b:66:f0:bb:1b:c0:1a: f1:ae:36:3b:3b:2b:59:ce:41:e7:28:09:a2:84:bf: 7b:fe:f4:1f:a4:c2:bb:a6:c3:b2:88:da:30:ae:47: 5b:7d:56:1d:c3:bc:23:bc:11:88:b5:23:d5:1a:c1: e6:55:c6:45:27:76:00:e5:7b:77:41:cb:b2:65:eb: 1e:99:51:ff:09:ad:2a:f5:a3:dc:dd:dc:9c:0d:5a: ce:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EC:96:2B:D4:43:04:B0:34:08:76:77:90:98:3D:B1:1D:1D:79:4A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UuyWK9RDBLA0CHZ3kJg9sR0deUo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.216.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:a2:d0:6c:94:dc:a4:8d:cb:9b:6c:59:2d:3b:3b:76:52:93: 9e:7e:de:eb:19:cd:93:62:42:54:79:31:9b:5a:7e:2f:c2:88: 6f:12:12:b9:6c:bc:c5:ba:19:59:58:ce:ea:f8:91:9f:4c:00: 17:b0:10:59:d8:e5:9c:d4:99:a7:a9:b4:d7:dc:c6:3a:12:3f: 79:12:05:fa:6c:f6:02:a9:87:f4:70:ff:9a:58:08:ee:97:ac: 05:99:df:dc:5a:47:17:ba:11:e6:93:a2:87:9e:d2:d7:fd:97: 72:f4:39:24:52:02:dc:97:0e:b0:45:27:96:81:19:c6:88:8b: b2:7e:c9:2b:83:1e:f6:a8:07:da:c8:f0:ee:40:42:ea:64:ed: 83:d6:db:6e:f7:e2:07:8f:8b:9d:d3:cd:63:b4:5f:24:8d:d8: 14:8d:04:87:63:48:7b:2b:a2:95:e1:6f:fa:18:53:6c:64:93: 66:91:cf:79:a2:52:8d:50:41:7d:4b:f8:bd:1d:62:a0:40:a1: 2e:68:86:a2:dd:51:a0:52:14:d9:41:ec:95:2a:61:5b:9f:c6: a8:c8:db:8d:52:fd:cb:81:ba:bd:3b:ec:fd:97:e4:1b:c1:8a: 38:a1:f4:f7:3f:af:0a:9f:e2:d6:6a:ed:04:32:c7:09:25:0b: 78:77:15:89 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMjFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDUyRUM5NjJCRDQ0MzA0 QjAzNDA4NzY3NzkwOTgzREIxMUQxRDc5NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnJFbNFv6kWmuPbEa59oKnL1CocUjjqmKPQICN5iDCEF3Y0hIi cjS0MhoKQmarufKkI4NF/YIsNK8b07MveVVdF+vdH0Jg4RE3FF5Atjda1ENywhFh 3l7WoMNj6u9CTDQe7gO6XlVXoBKPItgvUzAgaWlPhvfWD0rOp53ktIWpg93ZVWTn yCwnCv7pEZf+bfNCZCd+3xYNcZ4lkXBDtL/YD7nMm3uPK8hb1Lq1i2bwuxvAGvGu Njs7K1nOQecoCaKEv3v+9B+kwrumw7KI2jCuR1t9Vh3DvCO8EYi1I9UaweZVxkUn dgDle3dBy7Jl6x6ZUf8JrSr1o9zd3JwNWs4bAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUuyWK9RDBLA0CHZ3kJg9sR0deUowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1V1eVdLOVJEQkxBMENIWjNrSmc5c1IwZGVVby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExatgwDQYJKoZIhvcNAQELBQADggEBAIqi0GyU3KSNy5tsWS07O3ZSk55+ 3usZzZNiQlR5MZtafi/CiG8SErlsvMW6GVlYzur4kZ9MABewEFnY5ZzUmaeptNfc xjoSP3kSBfps9gKph/Rw/5pYCO6XrAWZ39xaRxe6EeaTooee0tf9l3L0OSRSAtyX DrBFJ5aBGcaIi7J+ySuDHvaoB9rI8O5AQupk7YPW22734gePi53TzWO0XySN2BSN BIdjSHsropXhb/oYU2xkk2aRz3miUo1QQX1L+L0dYqBAoS5ohqLdUaBSFNlB7JUq YVufxqjI241S/cuBur077P2X5BvBijih9Pc/rwqf4tZq7QQyxwklC3h3FYk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:09:39 2025 by rpki-client