$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1z5Iv0evVcFrHHIhgqZKkzSdtSI.roa File: 1z5Iv0evVcFrHHIhgqZKkzSdtSI.roa (raw, json) Hash identifier: 7vgujbtjzhZs3tlGpnGnOOCQN2eiOhq4L2LS3zYfokg= Subject key identifier: D7:3E:48:BF:47:AF:55:C1:6B:1C:72:21:82:A6:4A:93:34:9D:B5:22 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B3D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1z5Iv0evVcFrHHIhgqZKkzSdtSI.roa Signing time: Thu 06 Mar 2025 06:52:39 +0000 ROA not before: Thu 06 Mar 2025 06:52:39 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 6 06:52:39 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=D73E48BF47AF55C16B1C722182A64A93349DB522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:97:80:5a:76:9b:0d:0b:bb:13:47:bf:00:c6: 68:e4:d3:c9:49:62:48:94:1b:b2:b7:ef:78:e7:97: 1d:d6:75:6f:5f:26:a1:de:1d:ae:fd:45:41:bb:1f: 51:ba:c2:4f:2c:36:74:99:88:b4:07:bc:59:41:ac: 66:16:75:ee:d1:08:fc:db:37:4f:d9:9c:18:cd:39: e0:db:bc:5d:2f:ce:3c:f6:72:d3:2e:f5:38:1f:bd: 46:ba:d7:6d:07:a6:22:5b:7e:fd:36:7f:e6:0f:51: 12:75:ba:1f:8e:ce:7f:d1:f3:e7:d9:f3:b4:82:51: 59:f1:29:d4:13:cc:6c:0c:08:4a:a0:3f:c5:df:57: 38:13:75:c9:b5:ef:9c:37:12:ca:85:c7:56:ce:e3: 44:3d:cb:6d:ec:48:50:c7:07:13:0e:f6:87:3c:96: 5a:92:ad:11:01:56:c2:52:1f:3a:f5:b5:3e:98:09: 7b:08:9e:d2:cb:51:a8:7d:e9:da:65:91:3d:84:a7: a9:96:45:c9:67:36:cf:64:52:ee:de:5a:f6:a3:80: 61:8c:ee:a7:98:ce:21:2e:e4:20:22:6f:91:a9:58: 3f:b5:e4:a6:aa:09:6e:5c:2b:aa:ee:44:6c:c8:35: 32:ae:b2:5a:88:d1:34:86:38:e6:78:66:dd:eb:c7: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3E:48:BF:47:AF:55:C1:6B:1C:72:21:82:A6:4A:93:34:9D:B5:22 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1z5Iv0evVcFrHHIhgqZKkzSdtSI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.117.0/24 Signature Algorithm: sha256WithRSAEncryption 73:ae:7a:3f:de:6b:8e:df:29:0d:fd:97:24:4a:ec:f5:6b:bf: 2c:2f:d1:ab:1c:5b:1e:4a:7f:af:f6:dd:a1:5d:d2:d4:88:0c: 60:36:de:a6:59:85:d0:b7:56:b2:38:7a:32:de:a4:99:cf:c6: 34:f3:3e:4e:a7:2e:3e:bd:76:9a:57:53:f3:0d:4a:0f:7d:3a: 2d:35:a0:58:a4:01:5f:61:0e:ac:b7:4e:6e:a5:b3:d7:08:8f: fd:83:26:d5:50:66:b5:ce:e0:33:42:22:97:82:8d:0f:e5:6e: 3e:b8:fa:8f:ba:1f:1b:d0:20:5c:f5:33:51:db:fa:02:24:c3: 0d:be:0c:d9:27:9b:a7:35:a7:cb:b2:a3:28:68:28:b6:6e:df: f0:1e:78:4f:55:f1:9e:4f:ff:a0:de:87:f2:01:0a:32:4d:8c: 59:85:ae:dc:97:db:1a:a2:06:c9:c5:0d:c8:be:92:f1:5b:99: 7c:5b:a1:93:cb:5f:ec:8e:47:95:c6:8d:30:81:86:26:c2:05: 87:3e:20:ab:1b:3a:7b:e6:97:c3:6d:67:64:a2:99:55:bc:69: 11:da:e7:65:1f:1e:66:a9:41:45:d2:02:61:1b:bb:4f:42:44: 0f:1c:a4:77:3b:4b:21:e1:68:19:fd:2c:c6:ed:e0:58:c1:ff: bf:d6:ff:3e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAzMDYw NjUyMzlaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ3M0U0OEJGNDdBRjU1 QzE2QjFDNzIyMTgyQTY0QTkzMzQ5REI1MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRl4BadpsNC7sTR78Axmjk08lJYkiUG7K373jnlx3WdW9fJqHe Ha79RUG7H1G6wk8sNnSZiLQHvFlBrGYWde7RCPzbN0/ZnBjNOeDbvF0vzjz2ctMu 9TgfvUa6120HpiJbfv02f+YPURJ1uh+Ozn/R8+fZ87SCUVnxKdQTzGwMCEqgP8Xf VzgTdcm175w3EsqFx1bO40Q9y23sSFDHBxMO9oc8llqSrREBVsJSHzr1tT6YCXsI ntLLUah96dplkT2Ep6mWRclnNs9kUu7eWvajgGGM7qeYziEu5CAib5GpWD+15Kaq CW5cK6ruRGzINTKuslqI0TSGOOZ4Zt3rx91TAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1z5Iv0evVcFrHHIhgqZKkzSdtSIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzF6NUl2MGV2VmNGckhISWhncVpLa3pTZHRTSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABS3UwDQYJKoZIhvcNAQELBQADggEBAHOuej/ea47fKQ39lyRK7PVrvywv 0ascWx5Kf6/23aFd0tSIDGA23qZZhdC3VrI4ejLepJnPxjTzPk6nLj69dppXU/MN Sg99Oi01oFikAV9hDqy3Tm6ls9cIj/2DJtVQZrXO4DNCIpeCjQ/lbj64+o+6HxvQ IFz1M1Hb+gIkww2+DNknm6c1p8uyoyhoKLZu3/AeeE9V8Z5P/6Deh/IBCjJNjFmF rtyX2xqiBsnFDci+kvFbmXxboZPLX+yOR5XGjTCBhibCBYc+IKsbOnvml8NtZ2Si mVW8aRHa52UfHmapQUXSAmEbu09CRA8cpHc7SyHhaBn9LMbt4FjB/7/W/z4= -----END CERTIFICATE-----Generated at Sat Apr 5 17:42:16 2025 by rpki-client