$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cDYlgKuj2YmefKbhasMjO86ee14.roa File: cDYlgKuj2YmefKbhasMjO86ee14.roa (raw, json) Hash identifier: 63jYolHr1hRdzs4X1IMoh8rzfe5RvVqgNB+PynWnaFk= Subject key identifier: 70:36:25:80:AB:A3:D9:89:9E:7C:A6:E1:6A:C3:23:3B:CE:9E:7B:5E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BCC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cDYlgKuj2YmefKbhasMjO86ee14.roa Signing time: Tue 01 Apr 2025 01:47:31 +0000 ROA not before: Tue 01 Apr 2025 01:47:31 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3020 (0xbcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:47:31 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=70362580ABA3D9899E7CA6E16AC3233BCE9E7B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:63:70:76:a0:e9:a5:a2:35:17:4d:b0:7c: a7:88:60:63:d3:c6:fc:13:bd:79:b1:0d:27:51:31: 00:64:0b:1e:9f:eb:aa:0a:0e:e5:3a:62:2e:96:41: cd:77:59:17:70:6e:4c:db:3d:9d:cc:32:23:89:1b: 82:6f:d3:fb:b6:66:38:23:13:c9:5a:8b:67:5a:5d: e8:a5:28:b5:3c:d0:e5:ec:ee:2d:70:bf:cc:3e:dd: ee:96:0a:0a:76:b7:a1:4d:62:bc:dc:3c:59:40:bd: c8:e8:34:f0:30:89:0f:f9:cd:ec:47:78:c2:6e:54: 8e:e2:ca:e3:26:3a:ef:35:5f:5b:f8:83:19:a9:8d: 9a:8c:ac:f6:af:78:d4:67:cc:84:eb:39:38:6d:27: 55:fe:a5:d4:9d:9d:9e:41:ea:11:0e:cd:6e:ca:ca: 7e:fe:bb:6c:4d:de:58:22:f2:4c:a3:31:c3:a2:3b: ce:ae:00:e9:fa:1a:04:12:a4:d2:38:98:10:b9:63: a3:c4:45:aa:a3:9e:2e:1e:ce:8e:0a:41:0e:6d:c6: be:9c:e7:24:7e:08:75:7f:6c:ec:09:b9:19:29:ff: da:2f:00:8d:66:dd:15:ba:c6:97:3d:8a:06:a5:11: 9f:0a:37:46:dc:f9:25:e6:2b:d2:a6:54:9d:18:c8: 04:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:36:25:80:AB:A3:D9:89:9E:7C:A6:E1:6A:C3:23:3B:CE:9E:7B:5E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cDYlgKuj2YmefKbhasMjO86ee14.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.96.0/23 Signature Algorithm: sha256WithRSAEncryption b8:5f:bc:0a:50:a5:87:1c:54:cc:fd:9c:9f:8b:2d:4c:b2:fa: 30:0b:64:2b:2f:d4:fc:23:ed:5e:87:5b:97:9b:f4:af:71:1c: d2:06:76:3d:1d:00:fc:71:25:af:ca:66:97:05:9d:f3:98:8a: bf:7a:8f:e0:94:cc:f7:ed:50:fb:43:7d:45:81:68:2a:29:1d: 82:11:24:9c:5c:2d:93:d3:93:b9:9a:42:4e:0b:2b:6a:89:21: 43:d1:38:71:64:e5:00:d7:2b:e1:0c:6e:65:0a:21:04:93:eb: 52:79:75:6f:79:e3:f8:af:d3:5e:f9:6e:9a:4f:e6:d3:d3:37: d9:3c:c7:91:a4:00:39:05:fe:e8:62:ee:a1:37:9b:da:cf:dc: 25:8d:98:64:17:d2:29:db:77:9a:df:bc:00:51:3c:0a:b2:39: e0:39:60:26:ac:07:f4:2b:48:58:69:47:fc:38:80:67:bf:5e: 45:67:05:78:09:95:b1:71:3a:b8:e1:c1:63:99:64:5a:f2:b3: a3:c1:e3:9b:cc:52:77:0b:f6:41:32:c8:66:5f:a6:14:da:bf: 3a:a6:e6:68:1c:87:02:37:83:a3:cf:67:55:18:be:14:9f:a8: ad:be:46:27:58:5c:55:40:d9:d5:16:15:3c:0e:1e:49:b3:0c: 38:98:01:5a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQ3MzFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDcwMzYyNTgwQUJBM0Q5 ODk5RTdDQTZFMTZBQzMyMzNCQ0U5RTdCNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5D2NwdqDppaI1F02wfKeIYGPTxvwTvXmxDSdRMQBkCx6f66oK DuU6Yi6WQc13WRdwbkzbPZ3MMiOJG4Jv0/u2ZjgjE8lai2daXeilKLU80OXs7i1w v8w+3e6WCgp2t6FNYrzcPFlAvcjoNPAwiQ/5zexHeMJuVI7iyuMmOu81X1v4gxmp jZqMrPaveNRnzITrOThtJ1X+pdSdnZ5B6hEOzW7Kyn7+u2xN3lgi8kyjMcOiO86u AOn6GgQSpNI4mBC5Y6PERaqjni4ezo4KQQ5txr6c5yR+CHV/bOwJuRkp/9ovAI1m 3RW6xpc9igalEZ8KN0bc+SXmK9KmVJ0YyATDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcDYlgKuj2YmefKbhasMjO86ee14wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2NEWWxnS3VqMlltZWZLYmhhc01qTzg2ZWUxNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEb5mAwDQYJKoZIhvcNAQELBQADggEBALhfvApQpYccVMz9nJ+LLUyy+jAL ZCsv1Pwj7V6HW5eb9K9xHNIGdj0dAPxxJa/KZpcFnfOYir96j+CUzPftUPtDfUWB aCopHYIRJJxcLZPTk7maQk4LK2qJIUPROHFk5QDXK+EMbmUKIQST61J5dW954/iv 0175bppP5tPTN9k8x5GkADkF/uhi7qE3m9rP3CWNmGQX0inbd5rfvABRPAqyOeA5 YCasB/QrSFhpR/w4gGe/XkVnBXgJlbFxOrjhwWOZZFrys6PB45vMUncL9kEyyGZf phTavzqm5mgchwI3g6PPZ1UYvhSfqK2+RidYXFVA2dUWFTwOHkmzDDiYAVo= -----END CERTIFICATE-----Generated at Sat Apr 26 18:20:37 2025 by rpki-client