$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yCTyx0eG29ppMUarMzXL07cAVzg.roa File: yCTyx0eG29ppMUarMzXL07cAVzg.roa (raw, json) Hash identifier: uq+CoWuD5SEru36B3Nj2Ccy1lS4K2ecSUOqdM7QrDVI= Subject key identifier: C8:24:F2:C7:47:86:DB:DA:69:31:46:AB:33:35:CB:D3:B7:00:57:38 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E07 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yCTyx0eG29ppMUarMzXL07cAVzg.roa Signing time: Tue 01 Apr 2025 02:31:24 +0000 ROA not before: Tue 01 Apr 2025 02:31:24 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3591 (0xe07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:31:24 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C824F2C74786DBDA693146AB3335CBD3B7005738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:17:f8:e0:e4:43:a6:b2:50:f6:12:0b:7c: ca:38:e7:c1:88:ba:58:47:a9:16:35:fc:df:57:23: 50:bd:d5:8b:52:2c:d9:44:71:70:65:9b:81:e4:f1: cf:8d:f1:69:de:01:cb:df:af:03:22:b4:c4:71:e1: ec:11:ed:d7:57:11:49:cc:a6:0e:e2:77:40:ec:a8: 4d:00:0d:40:da:27:d8:e8:e6:5c:a3:62:2b:d6:d7: 07:83:1f:fc:f1:65:b9:9d:9b:2c:6e:c0:cc:79:30: 6e:4d:fe:8e:2f:da:91:11:73:15:f9:9c:86:24:b1: 11:7a:30:1b:94:04:65:3d:50:ef:7f:1b:39:df:2b: 97:07:9a:db:71:c7:0c:e5:0f:82:f8:5c:95:5a:90: bf:46:81:29:37:60:21:9a:b3:e7:8b:08:b5:e7:b6: 11:4a:bc:c7:c6:5e:cf:c2:7a:8a:78:d2:69:ef:aa: 8d:a6:ae:89:18:89:82:82:cc:82:32:d0:bf:38:18: e5:1c:b1:20:ba:1a:42:4e:17:6f:3c:89:b7:7d:7a: 04:a0:4f:26:3f:81:3b:27:62:3c:07:5b:3d:10:25: 61:03:26:83:d1:88:69:c5:ef:35:f5:24:33:82:f0: 1a:9b:cc:be:66:b8:fb:e2:5d:df:06:d2:c3:87:53: 45:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:24:F2:C7:47:86:DB:DA:69:31:46:AB:33:35:CB:D3:B7:00:57:38 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yCTyx0eG29ppMUarMzXL07cAVzg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.172.0/22 Signature Algorithm: sha256WithRSAEncryption 51:a6:d9:dc:5f:24:eb:d6:aa:49:0c:df:59:98:1d:c9:a8:e4: ec:a9:da:96:88:34:4f:d4:81:fe:b5:73:bc:3a:3e:5c:ef:87: 6e:c0:44:ca:7d:48:c7:58:81:41:0f:ce:fb:2f:a7:54:e5:1c: f7:f5:71:9b:15:e5:31:7e:fb:4a:ac:a4:a2:dc:d0:a6:86:2d: 59:37:72:54:ec:33:25:6c:a5:96:25:e5:03:11:df:e4:d2:a8: 78:6c:2b:fc:f8:81:52:3b:b3:8e:4c:7f:1f:c6:e9:7e:71:fa: 0e:5d:b4:5a:86:35:53:a7:07:c2:10:73:6a:bd:66:09:be:5d: c6:59:63:e6:91:38:1b:3b:b6:8b:cd:40:60:c2:2a:8f:f7:27: a9:31:04:f3:10:56:71:1b:55:af:f9:79:b5:e0:15:ae:b9:59: 72:10:a3:9e:65:53:17:7c:5d:4e:1d:c7:23:74:98:bd:ff:89: 01:77:49:aa:30:c6:74:06:60:8f:ac:33:db:af:52:77:47:dc: c0:0c:7e:4b:83:28:28:56:f8:da:b9:38:3b:7a:e7:6b:19:ea: 89:f8:02:6b:de:ba:72:42:a8:76:76:3a:68:29:d7:6d:df:bf: 87:96:f8:2f:bc:7b:a3:b6:2e:1f:47:e6:3f:6f:c7:4f:60:c1: 32:e6:dc:4b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDgcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMxMjRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM4MjRGMkM3NDc4NkRC REE2OTMxNDZBQjMzMzVDQkQzQjcwMDU3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9fxf44ORDprJQ9hILfMo458GIulhHqRY1/N9XI1C91YtSLNlE cXBlm4Hk8c+N8WneAcvfrwMitMRx4ewR7ddXEUnMpg7id0DsqE0ADUDaJ9jo5lyj YivW1weDH/zxZbmdmyxuwMx5MG5N/o4v2pERcxX5nIYksRF6MBuUBGU9UO9/Gznf K5cHmttxxwzlD4L4XJVakL9GgSk3YCGas+eLCLXnthFKvMfGXs/Ceop40mnvqo2m rokYiYKCzIIy0L84GOUcsSC6GkJOF288ibd9egSgTyY/gTsnYjwHWz0QJWEDJoPR iGnF7zX1JDOC8BqbzL5muPviXd8G0sOHU0XXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUyCTyx0eG29ppMUarMzXL07cAVzgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3lDVHl4MGVHMjlwcE1VYXJNelhMMDdjQVZ6Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYqwwDQYJKoZIhvcNAQELBQADggEBAFGm2dxfJOvWqkkM31mYHcmo5Oyp 2paINE/Ugf61c7w6Plzvh27ARMp9SMdYgUEPzvsvp1TlHPf1cZsV5TF++0qspKLc 0KaGLVk3clTsMyVspZYl5QMR3+TSqHhsK/z4gVI7s45Mfx/G6X5x+g5dtFqGNVOn B8IQc2q9Zgm+XcZZY+aROBs7tovNQGDCKo/3J6kxBPMQVnEbVa/5ebXgFa65WXIQ o55lUxd8XU4dxyN0mL3/iQF3SaowxnQGYI+sM9uvUndH3MAMfkuDKChW+Nq5ODt6 52sZ6on4AmveunJCqHZ2Omgp123fv4eW+C+8e6O2Lh9H5j9vx09gwTLm3Es= -----END CERTIFICATE-----Generated at Sat Apr 26 18:21:31 2025 by rpki-client