$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fv2hHAJCpCH9cAkqWsZCC_eilHw.roa File: fv2hHAJCpCH9cAkqWsZCC_eilHw.roa (raw, json) Hash identifier: 9xUKkC9v/rXVohLuFNvXEBjhSXVt+wDd2cKKP5YcOTA= Subject key identifier: 7E:FD:A1:1C:02:42:A4:21:FD:70:09:2A:5A:C6:42:0B:F7:A2:94:7C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C91 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fv2hHAJCpCH9cAkqWsZCC_eilHw.roa Signing time: Tue 01 Apr 2025 02:03:22 +0000 ROA not before: Tue 01 Apr 2025 02:03:22 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3217 (0xc91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:22 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=7EFDA11C0242A421FD70092A5AC6420BF7A2947C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:60:6c:19:dd:ce:88:de:4a:d7:5c:98:db:21: 2d:82:cb:56:24:a6:07:30:88:9b:53:a6:59:47:c5: 92:12:a0:21:dd:68:79:94:4c:7a:cb:be:52:39:3b: 27:f9:1e:98:02:ac:77:de:68:d6:db:56:7e:ec:8e: 48:05:82:dd:07:ab:53:bf:3b:7b:49:09:8b:8e:55: af:ff:1e:6d:f9:f1:89:ec:a8:0e:aa:73:f9:32:d9: f6:50:dc:d8:98:fd:9d:76:66:c7:42:eb:c0:d7:12: 8f:a7:1f:2c:93:aa:56:43:03:e9:c1:85:63:24:f7: c0:d8:4f:d6:43:bb:18:ca:5f:c0:0b:19:4a:18:4d: ba:07:09:44:47:ca:19:96:cb:14:9c:0c:75:4a:3c: 5e:ae:15:2a:dc:d4:cd:cc:91:1e:5e:07:9e:0f:04: 3d:5c:7c:ab:b4:b8:e2:31:7f:90:cc:10:3a:c7:a8: 88:e2:1f:82:9f:b6:74:4e:41:98:3d:0f:55:d2:6c: 31:d8:a4:14:09:d3:55:00:69:cd:1e:c3:c4:4e:cf: b8:db:35:66:85:d0:5c:b2:36:f6:bf:08:e3:ce:57: 73:57:b9:f8:4f:ac:1e:bf:2a:ec:aa:62:da:91:37: 55:0d:15:99:66:05:ee:d9:ee:1d:78:3f:0f:8a:e3: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FD:A1:1C:02:42:A4:21:FD:70:09:2A:5A:C6:42:0B:F7:A2:94:7C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fv2hHAJCpCH9cAkqWsZCC_eilHw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.35.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:42:5a:bb:1e:92:c6:0b:ab:79:c1:f3:93:01:0e:ea:d3:b2: 93:42:94:e9:91:0c:f8:1b:28:41:9a:4d:62:f5:8b:2c:ea:a1: b4:01:a1:b8:f5:dc:07:fa:ca:e1:95:3b:c9:e4:06:4b:c7:5a: 09:2c:45:49:c8:42:69:0f:43:6e:6f:46:5e:98:62:1b:c3:fb: 0f:ae:57:fa:1f:3f:45:9b:08:78:68:ac:9e:cc:e9:59:94:17: 6d:f6:0d:e1:57:b7:63:10:61:4e:0a:62:02:f1:5d:83:a4:43: 7f:28:08:63:95:34:44:1f:37:dc:93:3c:fe:98:c8:d4:b5:8e: 4d:11:fe:b6:a7:1a:42:c7:13:7a:0d:89:2a:2d:25:f9:37:2d: 07:f4:bf:f6:50:19:64:0c:36:14:d2:fd:57:8b:9a:45:31:4d: 65:44:36:8f:9c:f3:28:b0:94:fe:08:79:96:ba:d2:3f:f0:f6: dd:96:f0:0e:16:3a:3e:67:93:9b:34:fa:aa:36:12:44:fc:53: d2:5b:8e:3b:d3:d6:d8:09:3c:d6:0d:41:38:65:bc:24:d5:0d: dc:ae:57:af:07:1e:40:d2:36:0f:4d:a4:ab:1f:31:4d:af:aa: db:f1:52:cc:63:8f:af:ae:d7:86:19:a7:e1:e6:f7:2c:0a:07: f9:92:69:13 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMjJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdFRkRBMTFDMDI0MkE0 MjFGRDcwMDkyQTVBQzY0MjBCRjdBMjk0N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkYGwZ3c6I3krXXJjbIS2Cy1YkpgcwiJtTpllHxZISoCHdaHmU THrLvlI5Oyf5HpgCrHfeaNbbVn7sjkgFgt0Hq1O/O3tJCYuOVa//Hm358YnsqA6q c/ky2fZQ3NiY/Z12ZsdC68DXEo+nHyyTqlZDA+nBhWMk98DYT9ZDuxjKX8ALGUoY TboHCURHyhmWyxScDHVKPF6uFSrc1M3MkR5eB54PBD1cfKu0uOIxf5DMEDrHqIji H4KftnROQZg9D1XSbDHYpBQJ01UAac0ew8ROz7jbNWaF0FyyNva/COPOV3NXufhP rB6/KuyqYtqRN1UNFZlmBe7Z7h14Pw+K43ChAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfv2hHAJCpCH9cAkqWsZCC/eilHwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2Z2MmhIQUpDcENIOWNBa3FXc1pDQ19laWxIdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYiMwDQYJKoZIhvcNAQELBQADggEBAJ9CWrseksYLq3nB85MBDurTspNC lOmRDPgbKEGaTWL1iyzqobQBobj13Af6yuGVO8nkBkvHWgksRUnIQmkPQ25vRl6Y YhvD+w+uV/ofP0WbCHhorJ7M6VmUF232DeFXt2MQYU4KYgLxXYOkQ38oCGOVNEQf N9yTPP6YyNS1jk0R/ranGkLHE3oNiSotJfk3LQf0v/ZQGWQMNhTS/VeLmkUxTWVE No+c8yiwlP4IeZa60j/w9t2W8A4WOj5nk5s0+qo2EkT8U9JbjjvT1tgJPNYNQThl vCTVDdyuV68HHkDSNg9NpKsfMU2vqtvxUsxjj6+u14YZp+Hm9ywKB/mSaRM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:43:08 2025 by rpki-client