$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-2dt-RXSi_P92qRLgKhT54kRqCQ.roa File: -2dt-RXSi_P92qRLgKhT54kRqCQ.roa (raw, json) Hash identifier: Jmqr8Zj9UcFzbL5rS5F3Sc1TvZRqQUu988CkJBgRVQg= Subject key identifier: FB:67:6D:F9:15:D2:8B:F3:FD:DA:A4:4B:80:A8:53:E7:89:11:A8:24 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DA2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-2dt-RXSi_P92qRLgKhT54kRqCQ.roa Signing time: Tue 01 Apr 2025 02:24:36 +0000 ROA not before: Tue 01 Apr 2025 02:24:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.159.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3490 (0xda2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=FB676DF915D28BF3FDDAA44B80A853E78911A824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:04:39:6b:be:5f:1e:81:c7:5c:18:eb:6e:aa: 37:d5:07:97:77:04:b2:b5:dd:61:a4:ef:cd:e3:eb: b6:a6:a6:f1:d6:e1:bf:e1:36:70:c2:1b:3a:65:0b: a5:ef:e9:db:bc:57:e3:bd:0c:f0:9f:ea:c6:f3:29: ae:6b:f9:59:8b:48:ac:f3:a5:bd:9e:fc:f7:12:12: 9d:96:b4:e9:10:9e:52:bf:69:86:54:6f:32:f1:fe: cc:1d:74:c4:15:38:5c:a2:4d:9a:97:47:bb:ad:e9: 6f:b0:15:ce:20:a5:91:93:e7:b5:72:d4:d2:9a:3b: ca:56:18:af:5d:ac:b4:a5:93:7f:af:e8:82:ea:00: c8:68:3f:69:5c:34:d5:fe:1e:c2:a0:39:9f:16:d8: 13:fa:a1:e2:1b:68:18:34:53:e0:e7:8d:1f:a9:22: 7e:1e:30:0d:9a:dc:2d:7b:91:d0:b5:c2:88:3b:21: 89:d7:c3:4d:54:b0:36:80:43:11:c5:4e:96:b8:02: 3c:04:f6:85:b7:18:c3:c4:7b:2d:06:16:48:46:dd: 88:ff:68:f0:43:93:ef:68:89:41:cf:8e:65:79:8f: 4d:6a:48:60:17:67:ac:ff:63:4f:09:8b:5b:93:c7: 90:8a:47:2f:d3:ac:0c:ef:8a:43:52:76:91:35:71: fb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:67:6D:F9:15:D2:8B:F3:FD:DA:A4:4B:80:A8:53:E7:89:11:A8:24 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-2dt-RXSi_P92qRLgKhT54kRqCQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.53.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:a8:89:04:6a:e2:09:48:bf:d7:4f:6c:df:bb:95:99:50:c7: be:66:38:8b:ef:2c:d5:cd:10:6b:fc:3c:6e:69:3f:cc:2c:ce: 6d:6b:3d:c2:61:32:00:1e:ff:5a:a1:8c:e8:46:04:e4:23:c7: 10:58:92:53:97:b3:24:aa:74:86:82:b4:67:67:30:85:12:79: aa:ce:75:18:a6:6f:5e:3c:01:1a:5f:9d:68:ed:16:55:63:ca: c8:25:dc:12:74:e3:0c:bf:51:b3:6e:66:ac:95:04:e9:e7:f0: 1b:16:12:b4:87:87:a0:59:e9:a1:1a:d1:68:e4:55:3f:b8:6d: 48:52:8c:b0:b1:15:6e:aa:95:53:0b:51:c2:d5:c1:03:e0:0b: 41:76:25:53:8f:fc:8a:11:b4:0d:34:6f:a6:90:e1:24:ce:be: 4e:c7:9e:0b:00:bf:2d:17:80:3c:96:27:de:2a:8e:9a:dc:56: 28:7c:f9:d5:86:e0:ce:a4:20:5c:b4:ea:d6:df:98:a1:4c:42: 85:ee:3c:52:6d:ea:cf:78:01:d6:a9:43:6e:49:67:99:c1:77: 1c:fa:6c:52:56:75:18:a8:ed:9d:c8:15:5a:8d:ba:9f:e1:87: 58:28:97:eb:55:e4:d6:f7:8d:b6:08:44:47:cb:c0:6a:f4:e8: 05:43:a2:0f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0MzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEZCNjc2REY5MTVEMjhC RjNGRERBQTQ0QjgwQTg1M0U3ODkxMUE4MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDABDlrvl8egcdcGOtuqjfVB5d3BLK13WGk783j67ampvHW4b/h NnDCGzplC6Xv6du8V+O9DPCf6sbzKa5r+VmLSKzzpb2e/PcSEp2WtOkQnlK/aYZU bzLx/swddMQVOFyiTZqXR7ut6W+wFc4gpZGT57Vy1NKaO8pWGK9drLSlk3+v6ILq AMhoP2lcNNX+HsKgOZ8W2BP6oeIbaBg0U+DnjR+pIn4eMA2a3C17kdC1wog7IYnX w01UsDaAQxHFTpa4AjwE9oW3GMPEey0GFkhG3Yj/aPBDk+9oiUHPjmV5j01qSGAX Z6z/Y08Ji1uTx5CKRy/TrAzvikNSdpE1cfvrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+2dt+RXSi/P92qRLgKhT54kRqCQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Ly0yZHQtUlhTaV9QOTJxUkxnS2hUNTRrUnFDUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcnzUwDQYJKoZIhvcNAQELBQADggEBAD2oiQRq4glIv9dPbN+7lZlQx75m OIvvLNXNEGv8PG5pP8wszm1rPcJhMgAe/1qhjOhGBOQjxxBYklOXsySqdIaCtGdn MIUSearOdRimb148ARpfnWjtFlVjysgl3BJ04wy/UbNuZqyVBOnn8BsWErSHh6BZ 6aEa0WjkVT+4bUhSjLCxFW6qlVMLUcLVwQPgC0F2JVOP/IoRtA00b6aQ4STOvk7H ngsAvy0XgDyWJ94qjprcVih8+dWG4M6kIFy06tbfmKFMQoXuPFJt6s94AdapQ25J Z5nBdxz6bFJWdRio7Z3IFVqNup/hh1gol+tV5Nb3jbYIREfLwGr06AVDog8= -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:04 2025 by rpki-client