$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5ynDXLToW6FR5HNjteipUiqKDXs.roa File: 5ynDXLToW6FR5HNjteipUiqKDXs.roa (raw, json) Hash identifier: yewBgUMxd5v+ta3+TcajJurQXj1xUsw/gUHLA0Vf+sk= Subject key identifier: E7:29:C3:5C:B4:E8:5B:A1:51:E4:73:63:B5:E8:A9:52:2A:8A:0D:7B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D6F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5ynDXLToW6FR5HNjteipUiqKDXs.roa Signing time: Tue 01 Apr 2025 02:19:23 +0000 ROA not before: Tue 01 Apr 2025 02:19:23 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3439 (0xd6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:23 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E729C35CB4E85BA151E47363B5E8A9522A8A0D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:d6:ae:ac:71:b8:ed:3c:2a:f9:71:aa:59: 74:31:e3:a4:88:1e:67:84:09:d7:a5:52:4c:37:ff: 8c:c8:c9:fb:78:20:dd:4f:21:86:b4:7f:be:fb:12: e8:32:53:b1:e1:b7:44:df:0e:3a:43:cb:84:75:20: ea:58:18:12:f2:02:fa:c8:54:7f:bb:6a:e7:8c:30: 22:b5:0f:7c:6e:3d:87:90:d4:c5:22:6f:9f:dc:16: 9c:a5:6f:1c:20:47:c6:46:7a:6d:4b:62:59:0b:4f: 55:21:fd:03:40:2a:cf:f6:0e:3a:81:a4:be:86:2d: 1b:cc:12:9b:aa:40:c5:e1:28:b4:dd:ad:16:fc:bc: a3:03:84:50:09:0c:0f:46:b4:0b:ed:79:f2:9e:09: ac:d7:70:5f:3c:66:96:12:2a:09:52:4a:0d:c5:af: 51:76:12:65:90:aa:60:2c:b3:00:19:c1:f6:1b:07: 5b:bc:4c:c9:92:18:be:d1:53:87:d0:39:62:3a:82: 49:be:b1:88:6c:9a:b5:c7:b6:56:c2:2f:87:b0:7d: dc:ae:56:e4:b7:f2:56:bc:bc:75:44:e7:5a:5d:ec: 68:34:73:9c:14:db:84:69:20:f4:ce:bf:79:e4:e0: fe:ec:ce:48:d4:f4:5c:aa:eb:55:61:9d:0a:2f:f6: 82:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:29:C3:5C:B4:E8:5B:A1:51:E4:73:63:B5:E8:A9:52:2A:8A:0D:7B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5ynDXLToW6FR5HNjteipUiqKDXs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.180.0/23 Signature Algorithm: sha256WithRSAEncryption 99:ca:5e:39:04:f4:b3:fd:88:57:ba:83:03:41:ae:bd:57:c8: 0e:7a:d6:13:53:a8:aa:da:30:02:33:ca:80:a7:44:40:3f:2b: 57:9b:d2:8e:ad:82:df:55:ae:cb:01:25:a1:f2:d0:d0:33:70: 74:c5:0a:50:65:53:b5:78:6d:8b:14:b4:27:a8:43:48:de:a7: 28:a9:e2:82:bd:59:8b:8f:28:65:ac:ad:26:6c:3f:19:e5:4d: 11:d0:ae:9f:49:12:ee:aa:5b:d3:15:0d:f2:bd:08:dc:00:b9: fa:cb:b7:3b:8e:c1:1a:fc:63:e3:da:a1:b6:52:fc:ed:ab:ac: 8d:85:9f:e1:7e:b8:5a:d8:6c:01:ae:6d:24:47:d7:46:77:9f: 24:02:0b:80:f1:49:1b:02:47:53:89:be:42:75:dd:50:18:08: fa:54:5f:38:0e:8c:b6:eb:8d:4d:54:39:23:d0:e3:16:52:26: 3b:00:90:ca:dc:ce:7d:d3:eb:42:87:90:c7:b7:bc:d5:24:8f: 9d:bb:bd:4a:08:38:f6:ba:89:b6:27:2a:9d:c3:5f:9a:30:9c: e1:44:c2:03:dd:7d:70:51:da:70:b8:2f:23:c3:d0:38:16:3c: 8e:e5:45:bc:8f:5d:c7:ef:e7:14:f6:5a:59:1a:a4:2d:d5:a2: 13:84:90:d1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MjNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU3MjlDMzVDQjRFODVC QTE1MUU0NzM2M0I1RThBOTUyMkE4QTBEN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCn8taurHG47Twq+XGqWXQx46SIHmeECdelUkw3/4zIyft4IN1P IYa0f777EugyU7Hht0TfDjpDy4R1IOpYGBLyAvrIVH+7aueMMCK1D3xuPYeQ1MUi b5/cFpylbxwgR8ZGem1LYlkLT1Uh/QNAKs/2DjqBpL6GLRvMEpuqQMXhKLTdrRb8 vKMDhFAJDA9GtAvtefKeCazXcF88ZpYSKglSSg3Fr1F2EmWQqmAsswAZwfYbB1u8 TMmSGL7RU4fQOWI6gkm+sYhsmrXHtlbCL4ewfdyuVuS38la8vHVE51pd7Gg0c5wU 24RpIPTOv3nk4P7szkjU9Fyq61VhnQov9oJDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU5ynDXLToW6FR5HNjteipUiqKDXswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzV5bkRYTFRvVzZGUjVITmp0ZWlwVWlxS0RYcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBT7QwDQYJKoZIhvcNAQELBQADggEBAJnKXjkE9LP9iFe6gwNBrr1XyA56 1hNTqKraMAIzyoCnREA/K1eb0o6tgt9VrssBJaHy0NAzcHTFClBlU7V4bYsUtCeo Q0jepyip4oK9WYuPKGWsrSZsPxnlTRHQrp9JEu6qW9MVDfK9CNwAufrLtzuOwRr8 Y+PaobZS/O2rrI2Fn+F+uFrYbAGubSRH10Z3nyQCC4DxSRsCR1OJvkJ13VAYCPpU XzgOjLbrjU1UOSPQ4xZSJjsAkMrczn3T60KHkMe3vNUkj527vUoIOPa6ibYnKp3D X5ownOFEwgPdfXBR2nC4LyPD0DgWPI7lRbyPXcfv5xT2WlkapC3VohOEkNE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:57 2025 by rpki-client