$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y22opIHWlS3wsCuUS1rIR6U51GA.roa File: y22opIHWlS3wsCuUS1rIR6U51GA.roa (raw, json) Hash identifier: TByU+AuvZtQr+weYAffUvXNL7paETJxQU15PxAtnKCs= Subject key identifier: CB:6D:A8:A4:81:D6:95:2D:F0:B0:2B:94:4B:5A:C8:47:A5:39:D4:60 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B6F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y22opIHWlS3wsCuUS1rIR6U51GA.roa Signing time: Tue 01 Apr 2025 01:36:44 +0000 ROA not before: Tue 01 Apr 2025 01:36:44 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2927 (0xb6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:36:44 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=CB6DA8A481D6952DF0B02B944B5AC847A539D460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:4f:d0:42:96:e0:0a:07:24:af:a8:14:d8: 09:78:8d:7c:2a:b4:1a:bd:65:50:a0:7d:55:3d:e9: fb:86:73:a9:55:fe:b3:8e:47:72:d0:39:5c:b1:a2: 4c:d6:f5:f9:53:b1:20:0b:a8:5d:b4:83:09:05:32: 3f:54:a4:a5:ea:b5:54:5d:33:ba:0e:fb:9a:6e:eb: df:45:b1:bc:3f:20:52:5a:18:5e:2c:b8:ad:e1:53: 8e:91:1f:38:ad:fd:ab:8c:9d:0c:db:e3:b2:3d:0e: d1:37:fb:59:65:ca:2f:8c:67:30:66:f9:6e:53:ae: 2e:c3:be:50:5c:96:c7:8d:ff:9a:28:f8:4b:71:e8: 5d:2f:ad:98:d3:4e:91:dc:2e:2e:c4:dc:22:24:c9: 82:29:19:e8:fd:47:71:17:65:b5:72:d2:3a:3b:de: 8a:3e:4e:bd:3d:ac:74:f0:b8:74:73:64:d9:2e:c0: ed:00:e7:d3:15:e4:1a:f7:7c:b7:50:ad:8a:dd:f7: c5:df:c6:0f:97:ce:3a:8c:d9:13:c3:19:e2:2b:1e: 68:de:c2:da:65:2a:4c:75:64:0f:6e:dc:25:61:e1: 2b:dc:20:4e:1f:b6:fa:ba:94:93:68:05:23:c3:e6: 6c:45:f3:bc:ce:d5:17:24:60:e6:4b:86:a3:d1:77: 7c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6D:A8:A4:81:D6:95:2D:F0:B0:2B:94:4B:5A:C8:47:A5:39:D4:60 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y22opIHWlS3wsCuUS1rIR6U51GA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.202.0/24 Signature Algorithm: sha256WithRSAEncryption d4:15:92:48:63:93:2e:9d:d7:77:53:2f:92:a8:fd:e4:d3:fc: 02:8e:db:61:81:a9:1e:e4:b7:78:1e:15:73:98:17:4d:9a:26: 0e:57:eb:26:ee:d2:7b:39:92:a2:7a:d5:cc:cd:02:c8:60:e1: 7d:04:53:55:88:ab:7c:8d:83:b4:87:62:f7:6e:be:e3:e3:d6: fe:4a:ed:75:ec:3f:eb:2f:6c:26:2e:5b:4d:db:da:57:f2:42: cf:cb:38:bc:55:be:71:db:6e:ec:f0:9e:42:40:82:37:a9:60: bd:25:3d:23:be:8c:94:26:ed:b2:3e:f5:be:b7:b6:49:ec:78: 7d:12:ee:12:0b:f8:6d:63:5f:b6:34:03:8e:0f:18:07:f6:0c: 5f:49:77:df:e6:2e:0f:93:3a:97:95:cf:3a:08:07:89:ce:43: 0d:d7:71:87:f5:b3:12:36:41:ef:35:09:82:5f:16:9a:e4:74: c2:95:f5:fb:6b:a9:64:9a:3e:e0:5d:21:f5:59:c1:5f:6d:f8: 7f:56:62:6c:2c:88:e7:c7:19:ae:57:e9:83:2f:c1:06:39:aa: 20:96:57:59:6f:fa:79:3d:3b:79:d7:6c:08:2b:83:d4:dd:1f: b6:85:0b:a7:f8:3e:62:d9:f7:53:ba:d7:e8:26:9b:04:35:f9: c7:dd:bf:b4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM2NDRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENCNkRBOEE0ODFENjk1 MkRGMEIwMkI5NDRCNUFDODQ3QTUzOUQ0NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSzE/QQpbgCgckr6gU2Al4jXwqtBq9ZVCgfVU96fuGc6lV/rOO R3LQOVyxokzW9flTsSALqF20gwkFMj9UpKXqtVRdM7oO+5pu699Fsbw/IFJaGF4s uK3hU46RHzit/auMnQzb47I9DtE3+1llyi+MZzBm+W5Tri7DvlBclseN/5oo+Etx 6F0vrZjTTpHcLi7E3CIkyYIpGej9R3EXZbVy0jo73oo+Tr09rHTwuHRzZNkuwO0A 59MV5Br3fLdQrYrd98Xfxg+XzjqM2RPDGeIrHmjewtplKkx1ZA9u3CVh4SvcIE4f tvq6lJNoBSPD5mxF87zO1RckYOZLhqPRd3znAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUy22opIHWlS3wsCuUS1rIR6U51GAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3kyMm9wSUhXbFMzd3NDdVVTMXJJUjZVNTFHQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxasowDQYJKoZIhvcNAQELBQADggEBANQVkkhjky6d13dTL5Ko/eTT/AKO 22GBqR7kt3geFXOYF02aJg5X6ybu0ns5kqJ61czNAshg4X0EU1WIq3yNg7SHYvdu vuPj1v5K7XXsP+svbCYuW03b2lfyQs/LOLxVvnHbbuzwnkJAgjepYL0lPSO+jJQm 7bI+9b63tknseH0S7hIL+G1jX7Y0A44PGAf2DF9Jd9/mLg+TOpeVzzoIB4nOQw3X cYf1sxI2Qe81CYJfFprkdMKV9ftrqWSaPuBdIfVZwV9t+H9WYmwsiOfHGa5X6YMv wQY5qiCWV1lv+nk9O3nXbAgrg9TdH7aFC6f4PmLZ91O61+gmmwQ1+cfdv7Q= -----END CERTIFICATE-----Generated at Sat Apr 26 18:20:51 2025 by rpki-client