$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XVV6uZZuYeFiBbjrq1Z7AvpDKM0.roa File: XVV6uZZuYeFiBbjrq1Z7AvpDKM0.roa (raw, json) Hash identifier: POmJkrM1fN01kOdJIqts6kGHHBHCAmrMSWaJFKFEfks= Subject key identifier: 5D:55:7A:B9:96:6E:61:E1:62:05:B8:EB:AB:56:7B:02:FA:43:28:CD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C1D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XVV6uZZuYeFiBbjrq1Z7AvpDKM0.roa Signing time: Tue 01 Apr 2025 01:53:59 +0000 ROA not before: Tue 01 Apr 2025 01:53:59 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3101 (0xc1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:53:59 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=5D557AB9966E61E16205B8EBAB567B02FA4328CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:4a:99:15:53:65:dd:11:4d:b6:04:5c:b8: ed:e7:bb:1c:e9:3e:d3:5a:1e:7e:95:09:85:31:df: c0:20:24:12:89:cc:69:87:24:33:78:42:bf:7a:04: 36:4c:39:c1:e1:29:bd:4b:4d:08:c9:21:8f:0a:45: 5e:14:cd:da:47:36:0a:76:f9:bd:28:9f:6c:61:68: 46:1e:42:6d:13:96:ca:fa:cb:eb:8f:f7:0a:cb:d7: cc:99:3f:02:f4:1e:d7:51:9c:95:90:ec:83:de:e5: e9:72:4c:7c:5d:ad:13:2e:28:f1:4d:c2:a0:75:0f: c0:83:38:de:98:f3:b4:da:47:26:05:02:cf:33:84: 93:3f:f2:ad:59:11:fa:1a:12:be:64:8c:35:0c:12: d9:9c:29:4a:c3:54:8e:17:71:02:1c:3f:60:10:da: 3f:60:03:4b:78:94:17:2d:b2:94:7a:6f:e2:f0:a8: 7e:26:06:51:e2:a6:dd:c9:e5:c4:b9:6c:5b:c7:80: 40:4e:95:59:07:ba:1f:a9:56:96:65:cd:9d:35:c5: ac:5d:b6:58:e8:6a:07:8d:f7:d4:6e:3e:22:77:d3: fb:58:c9:76:a8:af:da:9a:38:3d:12:95:23:9e:52: 2a:55:3f:cc:36:81:3c:ae:f9:dc:92:4d:79:45:2c: 99:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:55:7A:B9:96:6E:61:E1:62:05:B8:EB:AB:56:7B:02:FA:43:28:CD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XVV6uZZuYeFiBbjrq1Z7AvpDKM0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.248.0/22 Signature Algorithm: sha256WithRSAEncryption 16:6c:be:23:69:21:e9:4b:f1:5e:6e:3d:c0:8c:c3:55:ea:91: 16:88:a5:9c:b3:cc:25:22:9a:1c:82:2c:d2:00:a5:d8:e2:77: e0:08:ce:28:42:fb:92:0b:08:e5:26:d1:78:31:82:57:7d:17: 02:c3:94:53:01:0e:b5:c5:6c:4e:ec:88:25:4f:5d:cd:80:53: cf:aa:e0:c0:70:f0:d4:66:de:22:b1:a3:ed:23:e3:6d:90:56: 32:b5:54:f2:2c:d1:7b:d8:df:f7:48:3e:75:8c:9f:4e:49:55: a4:a8:54:f4:a2:21:46:66:e0:df:ff:0f:0e:f9:9d:18:64:c2: 72:20:03:52:42:d0:a8:e2:45:81:00:6b:84:44:ad:58:c7:ed: 04:75:3f:60:b4:82:53:a8:89:90:e8:05:79:2d:b4:11:d3:9c: 7e:a3:b0:fa:68:66:01:95:c4:f8:51:3f:f0:ab:8a:ed:77:95: b3:0a:35:2e:d4:00:01:56:37:24:8a:9e:84:94:6c:9c:75:70: dc:3f:a3:ab:c3:d0:26:85:11:6a:25:5d:f7:dd:2b:df:69:2b: ea:2b:b8:af:95:78:fa:45:b6:87:b7:e0:d8:e8:f1:af:11:e9: 45:8a:f0:3f:4d:83:6e:56:e1:32:bc:3d:99:43:b5:58:0f:96: ce:9c:24:37 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDB0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUzNTlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVENTU3QUI5OTY2RTYx RTE2MjA1QjhFQkFCNTY3QjAyRkE0MzI4Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvmUqZFVNl3RFNtgRcuO3nuxzpPtNaHn6VCYUx38AgJBKJzGmH JDN4Qr96BDZMOcHhKb1LTQjJIY8KRV4UzdpHNgp2+b0on2xhaEYeQm0Tlsr6y+uP 9wrL18yZPwL0HtdRnJWQ7IPe5elyTHxdrRMuKPFNwqB1D8CDON6Y87TaRyYFAs8z hJM/8q1ZEfoaEr5kjDUMEtmcKUrDVI4XcQIcP2AQ2j9gA0t4lBctspR6b+LwqH4m BlHipt3J5cS5bFvHgEBOlVkHuh+pVpZlzZ01xaxdtljoageN99RuPiJ30/tYyXao r9qaOD0SlSOeUipVP8w2gTyu+dySTXlFLJkdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXVV6uZZuYeFiBbjrq1Z7AvpDKM0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hWVjZ1Wlp1WWVGaUJianJxMVo3QXZwREtNMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxaPgwDQYJKoZIhvcNAQELBQADggEBABZsviNpIelL8V5uPcCMw1XqkRaI pZyzzCUimhyCLNIApdjid+AIzihC+5ILCOUm0Xgxgld9FwLDlFMBDrXFbE7siCVP Xc2AU8+q4MBw8NRm3iKxo+0j422QVjK1VPIs0XvY3/dIPnWMn05JVaSoVPSiIUZm 4N//Dw75nRhkwnIgA1JC0KjiRYEAa4RErVjH7QR1P2C0glOoiZDoBXkttBHTnH6j sPpoZgGVxPhRP/Criu13lbMKNS7UAAFWNySKnoSUbJx1cNw/o6vD0CaFEWolXffd K99pK+oruK+VePpFtoe34Njo8a8R6UWK8D9Ng25W4TK8PZlDtVgPls6cJDc= -----END CERTIFICATE-----Generated at Sat Apr 26 20:12:00 2025 by rpki-client