$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_q5LLcSigR9aeLvX7dmJYaTW9DI.roa File: _q5LLcSigR9aeLvX7dmJYaTW9DI.roa (raw, json) Hash identifier: EaFU4XYa1DHf2o6gM/xftG7HFjLG2cVEuy/a1KBYMJg= Subject key identifier: FE:AE:4B:2D:C4:A2:81:1F:5A:78:BB:D7:ED:D9:89:61:A4:D6:F4:32 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C48 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_q5LLcSigR9aeLvX7dmJYaTW9DI.roa Signing time: Tue 01 Apr 2025 01:57:19 +0000 ROA not before: Tue 01 Apr 2025 01:57:19 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3144 (0xc48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:19 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=FEAE4B2DC4A2811F5A78BBD7EDD98961A4D6F432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:be:55:94:d2:7e:1c:0d:7c:e4:ad:38:b6:27: fd:5c:3b:b4:8c:51:59:3a:21:5e:62:2a:65:51:6a: fc:f4:da:28:68:1f:f7:70:76:eb:18:81:ef:38:85: e1:56:01:c9:a4:e7:58:d1:47:b4:21:ca:6e:b3:8d: 71:63:b6:f8:1f:1e:a3:e8:d2:da:8b:5c:a7:27:83: b1:c9:9e:0b:89:5a:e2:8c:79:f2:c5:18:03:e8:44: 72:35:25:d3:04:3b:5d:65:03:3a:62:fd:08:c6:99: 66:d2:4d:07:d4:07:2a:0f:39:c9:bb:e5:91:d6:6b: fc:a5:a9:27:8b:88:4b:82:8a:80:6c:11:a4:09:ce: 77:93:84:18:49:5d:8b:68:2f:ee:6b:27:42:03:dc: fa:29:8f:d0:3e:21:db:a8:dd:b1:52:00:b4:32:d8: 09:d8:7d:19:f4:16:46:f5:f3:f8:3c:4f:fb:cc:7d: 6e:f7:fb:3e:7b:ba:52:fd:35:9c:86:e7:49:ef:92: 06:f4:1e:a8:52:31:48:7e:41:1c:bf:66:ff:e9:f1: e1:68:3f:fe:37:5f:a2:a7:29:52:4c:a7:d4:c0:74: be:63:ba:25:57:58:ca:ec:61:0b:a0:da:9e:3c:d5: c0:70:bb:b7:02:ef:de:5e:1b:56:b7:6c:47:14:00: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AE:4B:2D:C4:A2:81:1F:5A:78:BB:D7:ED:D9:89:61:A4:D6:F4:32 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_q5LLcSigR9aeLvX7dmJYaTW9DI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.32.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:aa:5b:a0:83:51:b3:6b:12:a0:5a:2c:89:5f:5c:88:e6:1b: 2e:a1:e5:21:bd:cb:a4:8c:33:78:54:29:b8:98:87:c5:7d:9b: 6d:f0:f7:e0:4c:1b:88:fb:60:10:b3:ea:13:c5:13:cb:2b:ff: 53:92:2c:f0:0b:59:3d:bb:e5:e7:df:fa:4f:a4:d9:56:03:fe: eb:79:ff:22:f8:2a:cf:77:4e:24:5c:35:0c:1e:ff:9f:6d:e9: b3:b2:1e:11:f8:d6:7f:77:51:d4:94:0b:c1:6f:e4:5e:bc:1d: 91:9a:c2:3d:55:96:8e:01:7b:be:6e:07:36:27:f0:57:7e:a9: 1f:2c:f2:34:b5:8e:06:75:f3:97:76:28:0b:ef:77:1e:2d:8f: 98:08:21:bf:f7:98:47:9b:e2:3e:a8:0b:b3:3b:de:33:06:e4: a0:d2:af:75:65:87:3a:6d:d6:96:3d:a6:2a:93:bc:32:d0:62: 98:90:03:d9:28:74:69:c2:75:3b:bc:fc:21:57:fe:00:37:df: 71:bd:47:dc:58:bb:58:38:e0:09:82:36:12:d9:a4:ca:ca:e0: a9:75:71:aa:ad:3a:88:b1:00:8c:ce:98:20:e4:e8:9a:98:f3: 6f:a8:9e:f4:dd:06:7b:17:80:cc:bd:ad:2a:5e:36:e5:0e:e8: ed:80:b7:e3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MTlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEZFQUU0QjJEQzRBMjgx MUY1QTc4QkJEN0VERDk4OTYxQTRENkY0MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKvlWU0n4cDXzkrTi2J/1cO7SMUVk6IV5iKmVRavz02ihoH/dw dusYge84heFWAcmk51jRR7Qhym6zjXFjtvgfHqPo0tqLXKcng7HJnguJWuKMefLF GAPoRHI1JdMEO11lAzpi/QjGmWbSTQfUByoPOcm75ZHWa/ylqSeLiEuCioBsEaQJ zneThBhJXYtoL+5rJ0ID3Popj9A+Iduo3bFSALQy2AnYfRn0Fkb18/g8T/vMfW73 +z57ulL9NZyG50nvkgb0HqhSMUh+QRy/Zv/p8eFoP/43X6KnKVJMp9TAdL5juiVX WMrsYQug2p481cBwu7cC795eG1a3bEcUAOExAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/q5LLcSigR9aeLvX7dmJYaTW9DIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L19xNUxMY1NpZ1I5YWVMdlg3ZG1KWWFUVzlESS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYCAwDQYJKoZIhvcNAQELBQADggEBAEuqW6CDUbNrEqBaLIlfXIjmGy6h 5SG9y6SMM3hUKbiYh8V9m23w9+BMG4j7YBCz6hPFE8sr/1OSLPALWT275eff+k+k 2VYD/ut5/yL4Ks93TiRcNQwe/59t6bOyHhH41n93UdSUC8Fv5F68HZGawj1Vlo4B e75uBzYn8Fd+qR8s8jS1jgZ185d2KAvvdx4tj5gIIb/3mEeb4j6oC7M73jMG5KDS r3Vlhzpt1pY9piqTvDLQYpiQA9kodGnCdTu8/CFX/gA333G9R9xYu1g44AmCNhLZ pMrK4Kl1caqtOoixAIzOmCDk6JqY82+onvTdBnsXgMy9rSpeNuUO6O2At+M= -----END CERTIFICATE-----Generated at Sat Apr 26 18:20:25 2025 by rpki-client