$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y-EZPzdNb3TWd4dr1OYDYEmk7Us.roa File: Y-EZPzdNb3TWd4dr1OYDYEmk7Us.roa (raw, json) Hash identifier: K8S26yx6YPVoyT6qeWJR+VaJTc+hcw1hqTZ6Gpa+yF4= Subject key identifier: 63:E1:19:3F:37:4D:6F:74:D6:77:87:6B:D4:E6:03:60:49:A4:ED:4B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C99 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y-EZPzdNb3TWd4dr1OYDYEmk7Us.roa Signing time: Tue 01 Apr 2025 02:03:25 +0000 ROA not before: Tue 01 Apr 2025 02:03:25 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:25 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=63E1193F374D6F74D677876BD4E6036049A4ED4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ad:e7:ba:03:92:21:3d:1e:f8:81:b2:42:b4: a8:95:b0:22:9e:ed:0e:18:7f:c4:ac:4f:71:30:6c: bf:cd:9f:c4:a4:12:e0:e2:34:bb:c5:33:b4:6c:27: 2d:f5:86:0c:73:52:66:3e:b2:b7:71:a7:4f:fb:85: c1:8f:20:cd:6e:07:4d:34:e7:c3:e1:8d:01:d9:66: 17:88:28:37:f5:f1:3f:0f:9e:b8:1d:14:54:a2:33: 6e:4f:1e:f8:8d:b4:7a:11:65:81:eb:ef:7f:9d:e5: 6c:e0:7c:9d:8b:65:91:fa:fa:2c:c2:8e:b4:7c:40: 44:62:79:89:c0:2b:8c:3b:a0:40:b4:c4:cc:70:99: 0d:8e:e4:62:e4:5a:52:75:b7:eb:31:b0:b0:ea:27: 1d:a7:ea:58:b2:11:82:47:8a:47:77:3a:85:c3:7a: 85:6b:cf:11:83:d4:43:f6:67:76:53:e4:99:56:67: 4a:11:ef:ff:de:98:31:1a:65:38:55:cd:ad:d5:e6: fc:6e:a6:a2:9a:ee:b7:4c:96:33:51:c7:9c:37:e2: cf:ac:f0:a1:11:06:4b:55:b7:4a:fc:10:d1:c1:a6: c9:09:d3:03:df:83:20:2a:69:d7:78:58:54:cd:c7: bd:cb:b9:cd:eb:f3:d6:72:c4:e9:58:70:80:8b:6a: 56:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E1:19:3F:37:4D:6F:74:D6:77:87:6B:D4:E6:03:60:49:A4:ED:4B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y-EZPzdNb3TWd4dr1OYDYEmk7Us.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.72.0/22 Signature Algorithm: sha256WithRSAEncryption de:6a:53:2e:0d:5c:dc:57:d2:e1:fe:7d:c4:4a:7f:62:aa:9d: 3d:08:4a:83:ae:52:85:8e:f2:70:0c:d5:26:7c:86:4d:f1:b5: 81:ff:f2:17:dc:e1:dd:49:75:b4:92:57:81:8a:b4:c4:a5:9c: 85:c7:dc:59:10:af:79:f3:bb:b1:e0:0f:38:3c:e4:29:83:e3: 3e:ef:dd:51:07:a6:3a:24:56:8e:f2:40:b4:ab:ae:4f:f9:e4: b3:eb:be:c2:b6:a1:e3:97:6e:90:23:d2:c0:f8:f8:20:c9:61: 5f:c1:85:8d:92:07:0b:4c:ef:c3:63:a8:b8:48:83:aa:f3:5d: 8d:89:15:45:ec:f1:d2:41:6d:aa:82:0b:bc:d1:57:0e:b9:dc: aa:3e:e9:38:31:a2:68:6e:78:d8:8b:7a:c7:d0:97:b6:f4:be: f9:bc:71:de:52:14:96:86:88:f6:49:11:5e:1b:c9:7e:f0:c5: 5b:e6:c1:c7:7a:79:42:a4:04:86:5c:db:c9:4d:d1:81:ee:a8: 08:17:75:a8:fc:99:4d:a6:c0:c8:98:39:ad:97:f4:99:50:62: 34:c4:8f:1e:3c:cb:ef:4b:3f:83:1b:fc:e1:f7:46:41:86:26: b1:48:68:1b:b4:d6:96:4d:65:fe:b7:ac:e9:d3:f7:d7:1e:38: 35:26:b7:3c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMjVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYzRTExOTNGMzc0RDZG NzRENjc3ODc2QkQ0RTYwMzYwNDlBNEVENEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRree6A5IhPR74gbJCtKiVsCKe7Q4Yf8SsT3EwbL/Nn8SkEuDi NLvFM7RsJy31hgxzUmY+srdxp0/7hcGPIM1uB00058PhjQHZZheIKDf18T8Pnrgd FFSiM25PHviNtHoRZYHr73+d5WzgfJ2LZZH6+izCjrR8QERieYnAK4w7oEC0xMxw mQ2O5GLkWlJ1t+sxsLDqJx2n6liyEYJHikd3OoXDeoVrzxGD1EP2Z3ZT5JlWZ0oR 7//emDEaZThVza3V5vxupqKa7rdMljNRx5w34s+s8KERBktVt0r8ENHBpskJ0wPf gyAqadd4WFTNx73Luc3r89ZyxOlYcICLalaBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUY+EZPzdNb3TWd4dr1OYDYEmk7UswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ktRVpQemROYjNUV2Q0ZHIxT1lEWUVtazdVcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxaEgwDQYJKoZIhvcNAQELBQADggEBAN5qUy4NXNxX0uH+fcRKf2KqnT0I SoOuUoWO8nAM1SZ8hk3xtYH/8hfc4d1JdbSSV4GKtMSlnIXH3FkQr3nzu7HgDzg8 5CmD4z7v3VEHpjokVo7yQLSrrk/55LPrvsK2oeOXbpAj0sD4+CDJYV/BhY2SBwtM 78NjqLhIg6rzXY2JFUXs8dJBbaqCC7zRVw653Ko+6TgxomhueNiLesfQl7b0vvm8 cd5SFJaGiPZJEV4byX7wxVvmwcd6eUKkBIZc28lN0YHuqAgXdaj8mU2mwMiYOa2X 9JlQYjTEjx48y+9LP4Mb/OH3RkGGJrFIaBu01pZNZf63rOnT99ceODUmtzw= -----END CERTIFICATE-----Generated at Sat Apr 26 18:22:41 2025 by rpki-client