$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/d5rnNGv_04UPDaALk3jKXqkkHL8.roa File: d5rnNGv_04UPDaALk3jKXqkkHL8.roa (raw, json) Hash identifier: 4XLUcdOz8MmEaKn8UYjlW50qopyAc7JkIIJkxBfmEBk= Subject key identifier: 77:9A:E7:34:6B:FF:D3:85:0F:0D:A0:0B:93:78:CA:5E:A9:24:1C:BF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CA4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d5rnNGv_04UPDaALk3jKXqkkHL8.roa Signing time: Tue 01 Apr 2025 02:03:30 +0000 ROA not before: Tue 01 Apr 2025 02:03:30 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.103.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:30 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=779AE7346BFFD3850F0DA00B9378CA5EA9241CBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:54:60:67:0f:52:b8:60:fa:57:48:2d:98: 39:15:84:26:ab:98:79:02:16:a1:74:25:17:97:7f: 90:66:14:e0:11:39:32:c4:ed:5a:4e:36:ec:19:76: ec:5c:af:14:93:be:04:a4:8d:56:45:8f:f3:61:b1: 9d:6b:4d:e9:9f:b3:ea:53:47:a0:80:a1:7e:db:8e: 38:40:9b:51:f8:30:cf:63:28:44:8e:a8:be:08:28: 00:7c:37:d2:47:da:04:db:e4:8c:87:bf:6e:00:bd: 0a:6b:87:b8:36:19:eb:a4:d0:94:06:54:91:90:e9: 11:d2:37:64:79:27:51:1b:e4:5d:1b:13:0a:d9:a5: ae:74:a3:8a:70:46:cf:36:56:fa:56:9d:8b:15:f2: 20:13:3a:57:bd:6f:61:ec:bb:ad:33:d0:1e:08:ec: 54:a5:4e:dd:f6:21:39:98:d1:b3:5b:de:0f:0f:65: ee:ad:dd:e1:37:1a:11:a8:a5:b3:f8:4b:bd:ed:df: 25:7e:40:f7:ab:31:87:a5:ee:8f:98:5f:62:01:c3: 96:ff:de:00:af:42:c4:d7:67:0b:fc:a9:95:d0:e7: a6:67:7a:25:53:f4:bf:72:37:d0:66:c4:cd:a1:25: cd:f1:2d:5f:97:aa:e8:5e:2f:de:9c:ad:56:db:aa: d1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9A:E7:34:6B:FF:D3:85:0F:0D:A0:0B:93:78:CA:5E:A9:24:1C:BF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d5rnNGv_04UPDaALk3jKXqkkHL8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.103.16.0/23 Signature Algorithm: sha256WithRSAEncryption 13:fc:ce:cd:a7:c0:25:77:90:5d:5e:5e:71:85:5a:10:cb:ec: 58:bb:de:c3:77:56:46:bc:ea:d5:d9:b5:2d:e1:cc:f1:9c:bf: 60:8e:eb:66:74:0a:cf:68:f3:e1:8d:8e:15:1f:e6:cc:e7:d4: dd:56:a9:aa:b6:ed:cd:28:23:a1:e8:03:c7:2c:d9:a6:9e:b5: 83:34:8b:1b:b9:f5:be:88:75:d3:5c:18:94:62:f6:e1:ad:c4: 22:f8:28:f9:91:b4:fb:97:a9:ec:3f:9d:e1:0b:df:75:91:e0: 5e:83:68:68:c2:c5:8d:cf:86:eb:ae:d3:87:ee:fb:f4:b3:44: 6d:b2:6d:1e:25:06:09:d0:b1:ff:14:06:17:d8:00:f1:50:3b: b7:08:8c:0b:be:7d:83:eb:a1:61:2e:2e:b8:f3:a3:c3:e0:d3: 6c:63:52:ce:9d:62:8b:5b:c6:f1:f7:dc:1c:d9:db:ee:e4:c8: 49:d0:f3:f0:2e:8e:7d:60:34:c9:5c:a2:28:2a:9d:6a:38:81: c6:96:a7:f0:5d:fc:ed:c9:23:5d:14:9d:02:5d:53:b8:5a:59: ef:6b:f5:8a:5f:82:d0:e7:c5:4c:68:e0:a1:47:63:2b:e3:49: 3d:d8:a7:b2:c8:62:fd:ff:c6:c5:6f:14:d4:07:84:28:8f:eb: d4:41:be:c4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMzBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc3OUFFNzM0NkJGRkQz ODUwRjBEQTAwQjkzNzhDQTVFQTkyNDFDQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq1lRgZw9SuGD6V0gtmDkVhCarmHkCFqF0JReXf5BmFOAROTLE 7VpONuwZduxcrxSTvgSkjVZFj/NhsZ1rTemfs+pTR6CAoX7bjjhAm1H4MM9jKESO qL4IKAB8N9JH2gTb5IyHv24AvQprh7g2Geuk0JQGVJGQ6RHSN2R5J1Eb5F0bEwrZ pa50o4pwRs82VvpWnYsV8iATOle9b2Hsu60z0B4I7FSlTt32ITmY0bNb3g8PZe6t 3eE3GhGopbP4S73t3yV+QPerMYel7o+YX2IBw5b/3gCvQsTXZwv8qZXQ56ZneiVT 9L9yN9BmxM2hJc3xLV+XquheL96crVbbqtHFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUd5rnNGv/04UPDaALk3jKXqkkHL8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2Q1cm5OR3ZfMDRVUERhQUxrM2pLWHFra0hMOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExZxAwDQYJKoZIhvcNAQELBQADggEBABP8zs2nwCV3kF1eXnGFWhDL7Fi7 3sN3Vka86tXZtS3hzPGcv2CO62Z0Cs9o8+GNjhUf5szn1N1Wqaq27c0oI6HoA8cs 2aaetYM0ixu59b6IddNcGJRi9uGtxCL4KPmRtPuXqew/neEL33WR4F6DaGjCxY3P huuu04fu+/SzRG2ybR4lBgnQsf8UBhfYAPFQO7cIjAu+fYProWEuLrjzo8Pg02xj Us6dYotbxvH33BzZ2+7kyEnQ8/Aujn1gNMlcoigqnWo4gcaWp/Bd/O3JI10UnQJd U7haWe9r9YpfgtDnxUxo4KFHYyvjST3Yp7LIYv3/xsVvFNQHhCiP69RBvsQ= -----END CERTIFICATE-----Generated at Sat Apr 26 18:23:27 2025 by rpki-client