$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tJ_Zu1SXbgMuX3FRj1GdY0hhREI.roa File: tJ_Zu1SXbgMuX3FRj1GdY0hhREI.roa (raw, json) Hash identifier: 0OGiqYFoyqm2cW4IpE9TlYhJmoW8RfwUXO7oEGuvd7w= Subject key identifier: B4:9F:D9:BB:54:97:6E:03:2E:5F:71:51:8F:51:9D:63:48:61:44:42 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D46 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tJ_Zu1SXbgMuX3FRj1GdY0hhREI.roa Signing time: Tue 01 Apr 2025 02:17:09 +0000 ROA not before: Tue 01 Apr 2025 02:17:09 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3398 (0xd46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:17:09 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=B49FD9BB54976E032E5F71518F519D6348614442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:49:23:0e:5f:ce:07:70:80:01:9e:ad:80: 64:2d:41:90:c7:d7:df:ee:b1:43:06:d9:b7:b8:f7: 47:44:92:53:74:24:c6:62:00:53:81:40:f3:0c:89: fe:0a:77:19:e3:05:cf:e3:69:95:3f:b1:32:c2:04: e5:49:09:67:81:6a:ca:a2:b3:8c:bb:99:ac:0f:a9: 8e:21:5e:f3:aa:23:ec:66:31:67:80:24:2d:b7:66: 50:f6:52:78:7a:6a:92:1d:d4:f1:c3:aa:c9:dc:7e: 2a:f6:c8:8a:c8:3c:55:cf:98:5d:53:82:ed:cf:c3: 46:32:bf:85:65:b9:f4:ed:87:38:96:0a:31:b3:8a: 51:10:22:4e:80:f1:6e:2b:fc:73:c3:d5:6c:48:f1: 9d:89:99:5d:ce:cf:a8:8c:2a:1f:18:79:1c:be:73: c8:0a:15:d7:07:29:57:16:42:35:05:9a:86:c0:f3: d7:8f:9b:cc:19:2d:7c:98:8a:0b:45:71:09:c7:b8: 57:b8:b7:54:78:fd:66:24:d0:e5:72:f9:78:a8:ce: 35:10:30:9c:1d:b0:f3:0e:c0:84:17:6b:7c:5b:ce: 83:f1:9a:fb:3a:75:91:09:61:20:a0:ce:63:a4:24: f8:67:d2:1f:74:42:c4:53:cd:6e:d7:15:ba:c0:86: 7a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9F:D9:BB:54:97:6E:03:2E:5F:71:51:8F:51:9D:63:48:61:44:42 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tJ_Zu1SXbgMuX3FRj1GdY0hhREI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.36.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:f2:17:97:4f:db:29:b8:0e:5c:48:16:ea:b0:43:e2:89:82: 6c:84:33:1e:71:7f:c4:b5:f1:d5:15:f1:3d:b1:38:b8:5d:7f: a5:b5:5a:eb:78:25:e1:cb:18:45:64:ae:a1:26:81:ef:49:60: 20:37:7a:eb:09:8e:fb:11:99:e2:75:80:f1:dc:2d:92:12:95: 95:ff:b7:95:59:32:de:e2:ff:48:15:ee:ca:c3:c2:68:1b:6a: 3d:02:05:64:49:72:f2:0d:67:8e:75:09:10:d0:2f:48:96:95: c1:94:88:14:77:ad:70:a8:62:c9:46:4e:f1:83:17:d8:f8:dc: 34:cf:78:eb:9d:42:5b:4d:eb:a5:2c:76:b4:04:f3:74:ab:c1: 90:fc:37:24:6b:e6:06:2b:50:ce:bc:ec:80:a3:61:85:14:c5: fa:6c:b4:79:0a:c5:d7:52:5c:3a:53:8a:d8:64:2b:9e:16:93: 25:9d:b1:15:58:64:e5:90:11:6c:c2:17:e1:d0:ef:fb:f6:81: 80:ca:88:5b:a5:21:a5:3d:7a:99:d9:d6:57:e0:21:7c:e3:f4: 99:8a:3c:7f:4e:43:60:b6:b2:fc:9e:06:7c:9c:99:a1:15:46: c1:02:7b:88:56:5d:05:d1:d8:0a:f1:50:8e:58:1f:c5:08:cd: c6:e0:ba:03 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE3MDlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI0OUZEOUJCNTQ5NzZF MDMyRTVGNzE1MThGNTE5RDYzNDg2MTQ0NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/sUkjDl/OB3CAAZ6tgGQtQZDH19/usUMG2be490dEklN0JMZi AFOBQPMMif4KdxnjBc/jaZU/sTLCBOVJCWeBasqis4y7mawPqY4hXvOqI+xmMWeA JC23ZlD2Unh6apId1PHDqsncfir2yIrIPFXPmF1Tgu3Pw0Yyv4VlufTthziWCjGz ilEQIk6A8W4r/HPD1WxI8Z2JmV3Oz6iMKh8YeRy+c8gKFdcHKVcWQjUFmobA89eP m8wZLXyYigtFcQnHuFe4t1R4/WYk0OVy+XiozjUQMJwdsPMOwIQXa3xbzoPxmvs6 dZEJYSCgzmOkJPhn0h90QsRTzW7XFbrAhnodAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUtJ/Zu1SXbgMuX3FRj1GdY0hhREIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3RKX1p1MVNYYmdNdVgzRlJqMUdkWTBoaFJFSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYCQwDQYJKoZIhvcNAQELBQADggEBAHvyF5dP2ym4DlxIFuqwQ+KJgmyE Mx5xf8S18dUV8T2xOLhdf6W1Wut4JeHLGEVkrqEmge9JYCA3eusJjvsRmeJ1gPHc LZISlZX/t5VZMt7i/0gV7srDwmgbaj0CBWRJcvINZ451CRDQL0iWlcGUiBR3rXCo YslGTvGDF9j43DTPeOudQltN66UsdrQE83SrwZD8NyRr5gYrUM687ICjYYUUxfps tHkKxddSXDpTithkK54WkyWdsRVYZOWQEWzCF+HQ7/v2gYDKiFulIaU9epnZ1lfg IXzj9JmKPH9OQ2C2svyeBnycmaEVRsECe4hWXQXR2ArxUI5YH8UIzcbgugM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:15:11 2025 by rpki-client