$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/w3-OgRmKU4QmaDbWY7pY6mBP7AM.roa File: w3-OgRmKU4QmaDbWY7pY6mBP7AM.roa (raw, json) Hash identifier: UbkCJTreuZTiASY0bH6dArl4G6oYprhJS71Ex31wFI4= Subject key identifier: C3:7F:8E:81:19:8A:53:84:26:68:36:D6:63:BA:58:EA:60:4F:EC:03 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CE6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w3-OgRmKU4QmaDbWY7pY6mBP7AM.roa Signing time: Tue 01 Apr 2025 02:09:21 +0000 ROA not before: Tue 01 Apr 2025 02:09:21 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3302 (0xce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:21 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C37F8E81198A5384266836D663BA58EA604FEC03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8b:3d:8e:f7:25:ed:36:a1:7e:62:06:f2:cd: 8e:f8:60:76:e8:f1:60:5d:17:3b:c4:0e:af:18:67: e3:79:4e:81:82:79:65:fe:80:18:41:c6:c7:5d:d0: f2:66:fc:8e:ed:62:49:b7:a6:13:b5:73:3f:11:ce: 5c:88:b7:00:dd:bb:4a:12:67:1e:ed:c2:98:12:61: a9:c7:30:36:a1:9d:98:89:06:7d:9e:69:49:20:0a: fc:dc:81:f1:b9:37:64:13:a4:54:7b:e8:a7:11:a3: e5:be:12:4a:62:51:d6:e0:39:57:13:90:77:7f:44: 59:fe:58:a1:de:c5:2e:08:6d:a0:a0:67:e2:7c:dd: a7:9a:93:34:1b:ca:dd:c8:e5:c9:c7:1b:8e:ff:53: 74:51:6d:4a:ea:41:ec:08:9f:cf:8f:da:ec:b4:3d: 5d:b1:97:e7:5e:53:81:1c:1d:ee:e5:24:99:c5:ff: 9c:b8:75:37:83:32:bc:87:4a:b6:a0:8a:aa:96:89: 47:d8:9b:dd:58:fa:ed:65:30:fa:cf:2c:6c:2a:cd: b5:47:bd:a7:5a:b2:3a:ca:af:ab:78:bf:30:fa:d8: 45:9f:ea:9f:51:75:b9:29:14:bd:50:6f:8e:eb:88: 15:63:18:07:02:b7:e2:e8:1e:9c:b0:33:c9:90:7d: 2a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7F:8E:81:19:8A:53:84:26:68:36:D6:63:BA:58:EA:60:4F:EC:03 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w3-OgRmKU4QmaDbWY7pY6mBP7AM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.47.0/24 Signature Algorithm: sha256WithRSAEncryption db:55:e4:1b:be:58:a5:71:52:a9:5a:d1:09:80:4c:ee:31:49: f7:78:39:a6:f5:5b:73:68:09:fb:59:87:65:96:ee:3c:63:3f: e6:f5:3b:c6:18:83:9c:fe:e5:44:d1:40:2e:39:4a:6d:b3:a7: 2b:25:76:b5:7f:77:c2:c2:31:94:9e:66:84:07:b7:06:60:55: 94:d0:65:be:1b:35:71:26:96:3e:43:d4:27:ab:ab:9c:9e:cb: d5:c7:19:0e:a2:b8:c4:f9:41:f9:53:f5:92:61:92:9d:3a:de: e2:c1:b6:aa:a0:8d:1f:41:db:74:70:93:6a:0c:63:c0:c0:11: 46:e1:bc:91:f7:6c:db:6c:74:3b:80:fb:0d:1c:4a:71:70:16: 23:20:c4:8e:78:d7:8e:a9:b5:a3:98:81:4a:67:88:43:48:c1: ed:67:01:8c:ad:69:1a:5c:fc:f4:d2:48:c7:63:d8:76:9f:93: 25:11:7c:ee:cf:3b:58:f0:a4:a3:2e:92:7d:94:5e:1b:07:5c: d2:a4:79:28:89:17:42:53:56:95:80:22:85:ed:93:c1:fb:2e: a6:af:31:d4:5c:94:d7:92:a1:ad:b7:f0:9b:31:ad:bd:0b:8a: e2:42:53:3a:16:e9:6f:a4:1d:44:d4:9d:25:4f:c3:ee:56:8a: f2:57:06:9d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MjFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEMzN0Y4RTgxMTk4QTUz ODQyNjY4MzZENjYzQkE1OEVBNjA0RkVDMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDriz2O9yXtNqF+YgbyzY74YHbo8WBdFzvEDq8YZ+N5ToGCeWX+ gBhBxsdd0PJm/I7tYkm3phO1cz8RzlyItwDdu0oSZx7twpgSYanHMDahnZiJBn2e aUkgCvzcgfG5N2QTpFR76KcRo+W+EkpiUdbgOVcTkHd/RFn+WKHexS4IbaCgZ+J8 3aeakzQbyt3I5cnHG47/U3RRbUrqQewIn8+P2uy0PV2xl+deU4EcHe7lJJnF/5y4 dTeDMryHSragiqqWiUfYm91Y+u1lMPrPLGwqzbVHvadasjrKr6t4vzD62EWf6p9R dbkpFL1Qb47riBVjGAcCt+LoHpywM8mQfSppAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUw3+OgRmKU4QmaDbWY7pY6mBP7AMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3czLU9nUm1LVTRRbWFEYldZN3BZNm1CUDdBTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaC8wDQYJKoZIhvcNAQELBQADggEBANtV5Bu+WKVxUqla0QmATO4xSfd4 Oab1W3NoCftZh2WW7jxjP+b1O8YYg5z+5UTRQC45Sm2zpysldrV/d8LCMZSeZoQH twZgVZTQZb4bNXEmlj5D1Cerq5yey9XHGQ6iuMT5QflT9ZJhkp063uLBtqqgjR9B 23Rwk2oMY8DAEUbhvJH3bNtsdDuA+w0cSnFwFiMgxI54146ptaOYgUpniENIwe1n AYytaRpc/PTSSMdj2HafkyURfO7PO1jwpKMukn2UXhsHXNKkeSiJF0JTVpWAIoXt k8H7LqavMdRclNeSoa238Jsxrb0LiuJCUzoW6W+kHUTUnSVPw+5WivJXBp0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:41:55 2025 by rpki-client