$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4OBirz80S8cwAa1u7mR1WX-CN4A.roa File: 4OBirz80S8cwAa1u7mR1WX-CN4A.roa (raw, json) Hash identifier: +bdpd0nbw09GsEpYB8rB0sIJSpQqZsPO3ATFQM1AuRE= Subject key identifier: E0:E0:62:AF:3F:34:4B:C7:30:01:AD:6E:EE:64:75:59:7F:82:37:80 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E18 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4OBirz80S8cwAa1u7mR1WX-CN4A.roa Signing time: Tue 01 Apr 2025 02:31:33 +0000 ROA not before: Tue 01 Apr 2025 02:31:33 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 110.163.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3608 (0xe18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:31:33 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E0E062AF3F344BC73001AD6EEE6475597F823780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:bb:9b:f6:49:e9:fe:47:86:71:39:a7:78: a4:cf:1a:0c:60:ca:04:c7:44:fc:ad:dc:2d:14:f4: 69:b6:7c:64:fb:d5:b9:47:88:34:bb:96:e6:56:dc: b5:0d:9e:11:e0:1d:79:2d:a5:ee:0d:f0:5f:0c:09: 52:6d:c2:08:25:68:f7:5d:5d:bf:e9:45:0b:b7:99: 7e:97:d8:7d:9f:e6:41:6d:33:e6:09:6d:b3:4e:07: 5e:5e:44:a0:22:72:c8:c7:0a:0f:3f:8f:87:38:f4: 72:df:cb:b0:d7:69:ac:0b:0e:c1:87:0a:f6:b6:1e: f4:69:7b:87:52:a3:65:bc:38:29:3c:4f:36:96:9f: 91:7f:33:45:40:1f:33:fd:55:0c:3c:36:05:86:03: 5d:d5:7e:ae:a0:17:e5:9b:51:73:f6:ee:05:ae:22: ed:9c:91:ef:48:f5:02:3e:0f:9d:37:36:e9:30:c3: 1e:10:1d:a1:38:74:1c:0c:f3:fa:e8:6b:4f:a2:0a: d0:59:61:80:50:29:9b:0c:2b:fd:3c:25:95:d9:18: d2:cd:b5:0e:a8:6e:2c:03:30:8d:60:e4:06:74:02: 2d:25:05:ec:8d:c2:6d:2e:26:96:17:2e:67:0a:04: 6d:09:1d:3c:63:36:99:cf:d8:38:7b:35:5b:51:e9: a6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E0:62:AF:3F:34:4B:C7:30:01:AD:6E:EE:64:75:59:7F:82:37:80 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4OBirz80S8cwAa1u7mR1WX-CN4A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.163.216.0/23 Signature Algorithm: sha256WithRSAEncryption 96:68:e0:19:42:b7:8b:a5:35:48:f3:c6:25:56:86:b4:d7:bd: ea:f2:32:0a:a4:b7:d4:93:80:4f:a1:73:be:7c:7d:0b:75:10: d0:e0:20:0e:be:a7:37:c5:c0:61:93:41:cf:ce:a5:9b:2d:a8: 9d:f5:02:11:e6:c5:97:a2:29:00:c0:0c:f4:a7:9d:d4:35:e9: 20:1e:19:0e:85:58:08:df:da:db:84:9e:e6:5d:95:40:e8:27: 85:6c:8e:bf:f7:04:4e:6f:86:af:49:d1:c9:b4:16:ca:f9:07: 9f:1f:5a:06:3e:1f:96:5d:53:07:82:01:01:68:14:28:ba:ef: b6:69:7d:66:8f:42:d7:05:ac:c0:1d:e5:a4:24:b4:14:8b:c3: 4e:bf:f5:f5:6a:cf:58:32:9b:55:8d:a8:ca:c0:85:27:9d:1a: eb:70:d3:81:2b:86:8a:b3:ad:a1:0f:dd:c1:62:f0:77:4d:a7: 19:3b:8a:6b:19:22:77:9e:11:ba:60:57:ce:a6:68:59:75:4f: 82:39:42:cd:6d:6c:f5:88:f4:d5:fc:9f:b4:f1:4e:41:d5:4c: 30:ff:9c:ac:da:7c:03:e9:04:8c:d9:32:8e:4c:b2:3c:61:2d: b4:a7:0a:7e:af:b6:73:e4:12:24:38:4b:dc:09:02:4d:c2:7d: 57:75:e1:41 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDhgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMxMzNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUwRTA2MkFGM0YzNDRC QzczMDAxQUQ2RUVFNjQ3NTU5N0Y4MjM3ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6c7ub9knp/keGcTmneKTPGgxgygTHRPyt3C0U9Gm2fGT71blH iDS7luZW3LUNnhHgHXktpe4N8F8MCVJtwgglaPddXb/pRQu3mX6X2H2f5kFtM+YJ bbNOB15eRKAicsjHCg8/j4c49HLfy7DXaawLDsGHCva2HvRpe4dSo2W8OCk8TzaW n5F/M0VAHzP9VQw8NgWGA13Vfq6gF+WbUXP27gWuIu2cke9I9QI+D503Nukwwx4Q HaE4dBwM8/roa0+iCtBZYYBQKZsMK/08JZXZGNLNtQ6obiwDMI1g5AZ0Ai0lBeyN wm0uJpYXLmcKBG0JHTxjNpnP2Dh7NVtR6aZVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4OBirz80S8cwAa1u7mR1WX+CN4AwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzRPQmlyejgwUzhjd0FhMXU3bVIxV1gtQ040QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFuo9gwDQYJKoZIhvcNAQELBQADggEBAJZo4BlCt4ulNUjzxiVWhrTXvery Mgqkt9STgE+hc758fQt1ENDgIA6+pzfFwGGTQc/OpZstqJ31AhHmxZeiKQDADPSn ndQ16SAeGQ6FWAjf2tuEnuZdlUDoJ4Vsjr/3BE5vhq9J0cm0Fsr5B58fWgY+H5Zd UweCAQFoFCi677ZpfWaPQtcFrMAd5aQktBSLw06/9fVqz1gym1WNqMrAhSedGutw 04ErhoqzraEP3cFi8HdNpxk7imsZIneeEbpgV86maFl1T4I5Qs1tbPWI9NX8n7Tx TkHVTDD/nKzafAPpBIzZMo5MsjxhLbSnCn6vtnPkEiQ4S9wJAk3CfVd14UE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:07 2025 by rpki-client