$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8Nu1kH_qr90bm94mNzbPPdlSa6I.roa File: 8Nu1kH_qr90bm94mNzbPPdlSa6I.roa (raw, json) Hash identifier: tq4QgljrIK4Rdo0WCCKuvJR3uB/mg1/Qs6BwHbGj6JM= Subject key identifier: F0:DB:B5:90:7F:EA:AF:DD:1B:9B:DE:26:37:36:CF:3D:D9:52:6B:A2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C45 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8Nu1kH_qr90bm94mNzbPPdlSa6I.roa Signing time: Tue 01 Apr 2025 01:57:19 +0000 ROA not before: Tue 01 Apr 2025 01:57:19 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.159.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3141 (0xc45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:19 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=F0DBB5907FEAAFDD1B9BDE263736CF3DD9526BA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:a9:03:45:73:83:e1:47:85:bc:ce:5c:5e: 47:d6:ef:34:cb:37:70:23:7f:91:5f:67:2f:ae:f4: 9b:62:33:ee:33:55:f7:2e:5c:8f:c1:d5:23:b3:a2: 51:a2:f4:7f:85:82:ef:3d:1c:44:7e:28:b2:94:da: 1b:05:1e:f0:82:79:d5:4e:de:a9:36:3d:64:31:28: 02:15:2f:de:b1:54:41:bb:fe:e4:25:51:98:0c:64: 5f:e9:ea:22:c8:84:be:d7:7d:53:c7:15:9a:1f:2b: 58:95:78:24:5d:b4:c7:59:80:53:3c:2d:2b:a7:65: a8:2b:73:66:70:0c:08:ef:af:c0:45:f4:87:69:13: 51:75:c8:91:de:69:44:ff:87:38:90:28:ae:e7:bc: 37:8d:e0:c3:c9:80:0d:aa:f8:f5:0d:07:1f:fe:ca: 01:b3:fa:3d:ec:7b:b3:af:26:39:06:39:eb:2c:96: c4:01:c6:ea:cb:de:a7:66:8e:b2:72:d3:2c:02:20: ab:d0:1e:11:39:d0:9d:ec:48:25:0b:c4:45:d6:2e: d9:36:e6:ae:0f:04:63:c5:76:8c:43:65:16:03:e1: fc:2f:32:2b:99:19:78:52:b1:fe:de:a8:74:89:07: dc:91:5a:71:b6:32:69:ab:84:e2:b5:96:15:98:60: 5d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DB:B5:90:7F:EA:AF:DD:1B:9B:DE:26:37:36:CF:3D:D9:52:6B:A2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8Nu1kH_qr90bm94mNzbPPdlSa6I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.238.0/23 Signature Algorithm: sha256WithRSAEncryption 29:f2:97:17:8e:05:3f:69:8e:f3:41:f4:8b:1a:e7:3c:a4:aa: f4:5d:a1:a7:7b:6d:10:08:d6:aa:0b:e0:29:43:8d:c6:4b:2a: 14:ba:48:d2:bc:51:ce:26:1f:a5:43:11:42:fa:e1:44:3c:a9: f9:aa:5d:34:b8:7c:1c:09:f1:b0:b8:f9:f9:99:8a:dc:45:20: 6a:18:fb:b5:ae:cb:db:60:f9:2e:7a:1f:3d:5f:89:7a:0c:0d: 83:b5:3b:cc:8f:18:1a:3d:59:cf:db:4f:06:c2:fe:30:e9:68: bd:e8:4e:f6:d0:bc:54:e6:b5:d5:96:85:5b:1f:22:bd:b9:ed: 1d:aa:fb:cc:e0:3c:65:ef:09:53:0f:ab:31:54:06:8d:17:da: 6c:20:3d:e7:d8:c1:89:27:ac:bc:a6:d1:6f:5c:8f:fb:d6:be: cb:3f:d3:52:a5:d1:19:6c:0c:ef:d1:33:b7:16:66:d2:4b:75: c3:c6:a1:6f:8e:2a:29:3f:6b:d8:cc:07:57:c0:97:4c:89:0c: ed:b5:21:38:d7:f1:dd:82:57:c3:de:f8:43:22:62:a1:d9:97: 94:c8:52:e1:67:67:25:43:04:e5:17:bc:92:66:46:75:4d:99: 2b:47:1e:93:66:f1:56:8e:1e:5b:77:e2:ac:16:36:e4:95:76: f5:72:d8:5c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MTlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYwREJCNTkwN0ZFQUFG REQxQjlCREUyNjM3MzZDRjNERDk1MjZCQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz36kDRXOD4UeFvM5cXkfW7zTLN3Ajf5FfZy+u9JtiM+4zVfcu XI/B1SOzolGi9H+Fgu89HER+KLKU2hsFHvCCedVO3qk2PWQxKAIVL96xVEG7/uQl UZgMZF/p6iLIhL7XfVPHFZofK1iVeCRdtMdZgFM8LSunZagrc2ZwDAjvr8BF9Idp E1F1yJHeaUT/hziQKK7nvDeN4MPJgA2q+PUNBx/+ygGz+j3se7OvJjkGOesslsQB xurL3qdmjrJy0ywCIKvQHhE50J3sSCULxEXWLtk25q4PBGPFdoxDZRYD4fwvMiuZ GXhSsf7eqHSJB9yRWnG2MmmrhOK1lhWYYF2xAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8Nu1kH/qr90bm94mNzbPPdlSa6IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzhOdTFrSF9xcjkwYm05NG1OemJQUGRsU2E2SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHcn+4wDQYJKoZIhvcNAQELBQADggEBACnylxeOBT9pjvNB9Isa5zykqvRd oad7bRAI1qoL4ClDjcZLKhS6SNK8Uc4mH6VDEUL64UQ8qfmqXTS4fBwJ8bC4+fmZ itxFIGoY+7Wuy9tg+S56Hz1fiXoMDYO1O8yPGBo9Wc/bTwbC/jDpaL3oTvbQvFTm tdWWhVsfIr257R2q+8zgPGXvCVMPqzFUBo0X2mwgPefYwYknrLym0W9cj/vWvss/ 01Kl0RlsDO/RM7cWZtJLdcPGoW+OKik/a9jMB1fAl0yJDO21ITjX8d2CV8Pe+EMi YqHZl5TIUuFnZyVDBOUXvJJmRnVNmStHHpNm8VaOHlt34qwWNuSVdvVy2Fw= -----END CERTIFICATE-----Generated at Sat Apr 5 17:48:01 2025 by rpki-client