$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rDE6t-xLHfbtpAlmuGwkF0kn5uQ.roa File: rDE6t-xLHfbtpAlmuGwkF0kn5uQ.roa (raw, json) Hash identifier: F2w9tz04zsIOAXrGMrqyJ+Ldc5GqAs4a2J9HDROLsvo= Subject key identifier: AC:31:3A:B7:EC:4B:1D:F6:ED:A4:09:66:B8:6C:24:17:49:27:E6:E4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DFD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rDE6t-xLHfbtpAlmuGwkF0kn5uQ.roa Signing time: Tue 01 Apr 2025 02:29:12 +0000 ROA not before: Tue 01 Apr 2025 02:29:12 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3581 (0xdfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:29:12 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=AC313AB7EC4B1DF6EDA40966B86C24174927E6E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:cf:9f:ee:89:22:4e:fc:61:21:23:d3:a4: 36:74:75:fc:a3:f3:fd:bb:ac:e4:b0:c2:f7:8e:d2: 20:c8:da:e2:41:aa:4a:e8:0b:f0:df:a0:54:2d:13: b8:74:7c:6b:83:b4:65:2e:ac:de:95:f5:fc:d7:5c: a3:71:cb:a6:9a:e8:46:32:3d:f4:51:f2:01:6c:4e: 70:16:69:a1:b0:45:2c:a2:98:85:94:06:76:d1:37: 09:dd:5f:c3:2f:37:8b:2e:a6:25:a6:4f:ce:90:b1: a0:ea:1a:ac:bf:f0:12:19:df:08:ef:bb:27:5f:60: d7:03:6e:7e:34:f8:04:f3:e9:56:7a:08:d1:93:3c: f1:0d:da:27:9b:2c:f3:97:ee:7c:c1:b3:d5:65:d7: 66:3b:26:49:ec:13:f0:87:38:26:27:fa:92:8d:57: 17:17:aa:6c:bd:95:b5:06:cb:2e:51:0a:9f:37:35: a7:d9:11:bb:74:1b:91:af:70:82:88:b2:4a:66:d4: cb:7e:7e:96:27:eb:73:b7:11:4e:df:b8:46:b3:37: 1b:48:e1:b7:fb:00:ac:f6:4c:fb:56:f0:f9:81:c1: d2:fb:63:f1:c1:8b:1d:2f:94:67:23:17:eb:09:5b: 3e:e5:6e:17:e2:65:c5:1b:59:65:38:24:23:00:49: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:31:3A:B7:EC:4B:1D:F6:ED:A4:09:66:B8:6C:24:17:49:27:E6:E4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rDE6t-xLHfbtpAlmuGwkF0kn5uQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.2.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:25:63:f2:33:75:95:25:6e:fb:c1:1f:5d:32:98:4b:ae:1d: b0:de:94:a6:f1:10:1a:87:0c:8a:cf:71:20:73:5d:36:a3:02: ed:11:b9:79:0a:9c:41:5b:97:3a:c8:d9:e0:26:fd:e5:81:b0: f5:ea:9a:7a:87:ab:64:8b:d7:e0:eb:6c:2a:79:03:56:99:33: 0d:4e:f2:30:97:de:33:92:83:be:52:fe:13:bd:7c:d9:8a:d6: 8a:43:91:51:28:fb:8d:cb:8d:83:31:14:0b:5c:b4:a4:36:f7: 9e:20:2e:0f:f3:36:f2:31:0c:7b:bf:ac:20:fb:1c:4d:87:48: 85:a2:ae:51:9c:ae:a9:b9:56:1a:e9:73:db:fc:5b:41:18:92: 59:b6:3a:06:1c:9b:f8:3d:b1:49:74:3b:6c:d7:0e:40:d9:8e: 86:88:5a:8e:18:5e:67:5c:a0:36:ff:20:de:01:85:dc:7f:de: f7:ca:9c:aa:db:a5:83:f9:d5:45:24:ba:26:3d:5d:bb:ca:9b: 34:3f:31:ba:64:2b:19:a2:37:3b:25:ff:e6:a5:87:d3:98:90: bd:46:46:44:cf:84:d3:4b:27:73:00:c1:87:e1:e9:12:b5:88: b8:ba:97:6e:db:2c:af:d9:bc:dc:9e:cd:3b:73:3e:a5:b3:82: 6f:0f:8a:12 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDf0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI5MTJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFDMzEzQUI3RUM0QjFE RjZFREE0MDk2NkI4NkMyNDE3NDkyN0U2RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCa8+f7okiTvxhISPTpDZ0dfyj8/27rOSwwveO0iDI2uJBqkro C/DfoFQtE7h0fGuDtGUurN6V9fzXXKNxy6aa6EYyPfRR8gFsTnAWaaGwRSyimIWU BnbRNwndX8MvN4supiWmT86QsaDqGqy/8BIZ3wjvuydfYNcDbn40+ATz6VZ6CNGT PPEN2iebLPOX7nzBs9Vl12Y7JknsE/CHOCYn+pKNVxcXqmy9lbUGyy5RCp83NafZ Ebt0G5GvcIKIskpm1Mt+fpYn63O3EU7fuEazNxtI4bf7AKz2TPtW8PmBwdL7Y/HB ix0vlGcjF+sJWz7lbhfiZcUbWWU4JCMASRJ7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrDE6t+xLHfbtpAlmuGwkF0kn5uQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3JERTZ0LXhMSGZidHBBbG11R3drRjBrbjV1US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYAIwDQYJKoZIhvcNAQELBQADggEBAJ8lY/IzdZUlbvvBH10ymEuuHbDe lKbxEBqHDIrPcSBzXTajAu0RuXkKnEFblzrI2eAm/eWBsPXqmnqHq2SL1+DrbCp5 A1aZMw1O8jCX3jOSg75S/hO9fNmK1opDkVEo+43LjYMxFAtctKQ2954gLg/zNvIx DHu/rCD7HE2HSIWirlGcrqm5Vhrpc9v8W0EYklm2OgYcm/g9sUl0O2zXDkDZjoaI Wo4YXmdcoDb/IN4Bhdx/3vfKnKrbpYP51UUkuiY9XbvKmzQ/MbpkKxmiNzsl/+al h9OYkL1GRkTPhNNLJ3MAwYfh6RK1iLi6l27bLK/ZvNyezTtzPqWzgm8PihI= -----END CERTIFICATE-----Generated at Sat Apr 26 18:21:51 2025 by rpki-client