$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xlEhkBsljTFS77hCge5F45pRkzk.roa File: xlEhkBsljTFS77hCge5F45pRkzk.roa (raw, json) Hash identifier: +EzSuKVPEN5KssFx87YVqzOmIqa/CzQEifKBnXjcD9E= Subject key identifier: C6:51:21:90:1B:25:8D:31:52:EF:B8:42:81:EE:45:E3:9A:51:93:39 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C9B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xlEhkBsljTFS77hCge5F45pRkzk.roa Signing time: Tue 01 Apr 2025 02:03:26 +0000 ROA not before: Tue 01 Apr 2025 02:03:26 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.110.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3227 (0xc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:26 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C65121901B258D3152EFB84281EE45E39A519339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:44:e5:8b:93:bb:0a:fb:f2:22:56:60:c8: 3d:d4:c2:dc:9d:b7:c8:6d:a8:6e:8c:d8:0d:43:9a: f6:03:8e:75:f9:0c:f7:a6:df:fc:89:fb:fc:d1:12: 7d:12:dc:1c:9a:c8:fe:4b:9e:e0:37:2e:d1:1c:ed: f3:56:16:fb:24:10:74:96:ca:c8:48:6a:da:d6:cd: 26:16:c9:d4:56:9a:2b:ad:fe:59:f7:65:08:e0:2a: 00:01:db:e8:e9:66:29:d5:dc:ba:af:19:79:96:6f: 0e:65:b5:09:f7:3a:72:23:11:c5:5e:51:ea:ab:90: 89:84:09:52:c6:57:ad:6b:ca:57:5a:cf:ef:ce:77: ba:8d:72:8a:95:82:2d:6e:35:1e:80:65:2f:3b:a5: a2:65:97:51:25:0c:6d:87:0b:c5:ef:3d:18:36:ef: 90:b8:e5:55:94:94:f8:3f:ec:7b:5b:79:7a:73:9a: 6e:c0:85:6a:34:fc:f7:5b:2b:cf:89:9e:ff:93:cb: 3f:18:12:55:4b:15:bb:8b:bb:af:12:f1:26:24:03: 06:4a:c1:06:93:74:c0:63:57:6f:87:3c:10:49:50: 36:ce:67:f5:ce:85:4e:06:5b:e5:e8:b8:9a:ed:f9: d0:0e:38:9f:ae:ea:37:9e:bc:14:ca:48:b5:d1:e5: 30:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:51:21:90:1B:25:8D:31:52:EF:B8:42:81:EE:45:E3:9A:51:93:39 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xlEhkBsljTFS77hCge5F45pRkzk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.110.128.0/17 Signature Algorithm: sha256WithRSAEncryption d0:27:e6:e7:d5:0d:6f:b6:d1:44:0f:6e:74:8d:7a:04:e7:b0: 4f:2b:d0:68:36:bb:c3:95:6c:ab:92:5b:76:94:54:78:3d:a7: 99:a4:e5:df:d4:7c:4a:2b:b3:b6:5a:aa:83:ed:3b:11:e6:9b: 48:1a:6c:d0:c8:3e:65:52:cc:bd:bd:25:fa:39:90:0a:1c:3b: 5b:70:19:ca:b0:c1:ad:f3:a5:49:60:f7:6e:f9:80:62:b4:d5: fb:1d:e1:59:0e:b5:c0:ba:69:00:cd:b0:17:b7:69:eb:79:17: b1:55:70:ff:b5:96:c5:ec:ea:08:e9:2e:68:1c:db:09:dc:70: 42:fa:09:46:94:7d:69:3e:15:1d:6b:cd:a3:de:b5:63:40:55: 5f:e3:27:71:c0:17:e5:ed:c2:e4:94:40:0a:3d:b2:21:4a:e2: 70:08:dd:a3:36:ab:f8:7a:ca:64:c0:82:7f:cd:f1:0f:e2:1a: f1:21:47:b8:af:d2:ac:58:f8:b7:f2:09:e3:ef:cc:0b:61:cd: 4a:43:a5:f1:77:0d:5c:5f:fa:f1:47:61:a5:bb:f0:d3:fe:3f: 98:75:fb:22:a2:90:92:5e:3b:c9:1b:43:13:cb:eb:d5:50:f8: 3d:4c:70:d9:36:e8:91:12:82:6c:67:72:f3:cc:39:1f:36:08: b0:5a:3d:a0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMjZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM2NTEyMTkwMUIyNThE MzE1MkVGQjg0MjgxRUU0NUUzOUE1MTkzMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDANkTli5O7CvvyIlZgyD3Uwtydt8htqG6M2A1DmvYDjnX5DPem 3/yJ+/zREn0S3ByayP5LnuA3LtEc7fNWFvskEHSWyshIatrWzSYWydRWmiut/ln3 ZQjgKgAB2+jpZinV3LqvGXmWbw5ltQn3OnIjEcVeUeqrkImECVLGV61ryldaz+/O d7qNcoqVgi1uNR6AZS87paJll1ElDG2HC8XvPRg275C45VWUlPg/7HtbeXpzmm7A hWo0/PdbK8+Jnv+Tyz8YElVLFbuLu68S8SYkAwZKwQaTdMBjV2+HPBBJUDbOZ/XO hU4GW+XouJrt+dAOOJ+u6jeevBTKSLXR5TBdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxlEhkBsljTFS77hCge5F45pRkzkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3hsRWhrQnNsalRGUzc3aENnZTVGNDVwUmt6ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcxboAwDQYJKoZIhvcNAQELBQADggEBANAn5ufVDW+20UQPbnSNegTnsE8r 0Gg2u8OVbKuSW3aUVHg9p5mk5d/UfEors7ZaqoPtOxHmm0gabNDIPmVSzL29Jfo5 kAocO1twGcqwwa3zpUlg9275gGK01fsd4VkOtcC6aQDNsBe3aet5F7FVcP+1lsXs 6gjpLmgc2wnccEL6CUaUfWk+FR1rzaPetWNAVV/jJ3HAF+XtwuSUQAo9siFK4nAI 3aM2q/h6ymTAgn/N8Q/iGvEhR7iv0qxY+LfyCePvzAthzUpDpfF3DVxf+vFHYaW7 8NP+P5h1+yKikJJeO8kbQxPL69VQ+D1McNk26JESgmxncvPMOR82CLBaPaA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:39:54 2025 by rpki-client