$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/A69lqUHhaU3fA_xXuuh2QKOsJUY.roa File: A69lqUHhaU3fA_xXuuh2QKOsJUY.roa (raw, json) Hash identifier: slPj7H465Verck8z2VtYgOwsG85DJeA9jagt0nulyj4= Subject key identifier: 03:AF:65:A9:41:E1:69:4D:DF:03:FC:57:BA:E8:76:40:A3:AC:25:46 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B4B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A69lqUHhaU3fA_xXuuh2QKOsJUY.roa Signing time: Thu 06 Mar 2025 07:24:42 +0000 ROA not before: Thu 06 Mar 2025 07:24:42 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 6 07:24:42 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=03AF65A941E1694DDF03FC57BAE87640A3AC2546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:3d:24:a3:56:ea:79:22:18:94:0e:62:94: e6:ea:05:7b:14:17:78:3c:0b:c1:77:49:7e:a2:10: ee:8a:8e:e3:d3:1a:1d:e7:ce:9c:8a:3d:6b:b5:d9: 89:73:6c:cc:2e:68:fa:1d:1a:5b:37:47:de:df:f0: 1a:48:0d:e6:b5:49:fc:38:18:23:01:ce:5b:d6:47: da:9d:71:37:dc:9e:ba:e3:40:24:8b:99:91:5d:20: 1a:9a:2c:9a:dc:9a:e1:9f:7d:0d:36:fb:01:bb:7b: 5f:c1:84:cd:1d:ed:3c:d1:77:4c:e1:16:d7:2f:3b: 3e:eb:55:13:ab:8a:0d:44:90:ab:ce:c6:8c:0b:7f: 43:35:bb:eb:a4:b2:e7:af:ef:38:ef:45:20:a8:0b: f2:e6:3a:45:90:3e:59:bf:41:eb:07:b4:33:2e:89: d4:f6:cd:8f:a6:a4:0e:4d:c6:85:2b:d2:ba:5d:2a: 04:d7:51:8f:14:b2:70:1d:1b:7f:64:21:98:19:dd: 6b:9b:9c:b1:03:83:02:75:3a:c1:6a:70:7b:c7:97: a5:d2:f7:1c:2e:b8:4d:d1:2e:0d:0d:de:40:7d:ef: fc:27:ce:08:94:23:62:7e:a6:d1:b0:af:0e:96:c4: c7:0f:27:46:d1:f7:bc:6f:d1:23:c9:73:b3:30:89: 16:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AF:65:A9:41:E1:69:4D:DF:03:FC:57:BA:E8:76:40:A3:AC:25:46 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A69lqUHhaU3fA_xXuuh2QKOsJUY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.151.0/24 Signature Algorithm: sha256WithRSAEncryption c2:ec:8a:f4:88:16:74:4d:f1:f1:33:f9:5e:d2:fe:70:08:e7: 4c:ee:c4:a0:8c:70:f3:7b:f5:87:a1:be:62:d1:cb:55:1d:eb: 82:34:bb:fd:81:4a:05:31:44:7e:2d:e5:ab:61:0f:3e:7c:7f: 1a:b9:09:86:f8:de:fa:a6:37:99:27:7e:ab:96:bb:37:6c:9e: 4c:26:6b:d0:13:84:47:c1:09:f1:0b:cf:58:04:15:a4:91:11: 6b:ea:ef:04:52:51:78:2f:5b:ef:8a:2a:9b:63:0a:e5:cb:c1: ee:e7:4a:f9:d0:e9:c3:2c:b8:2c:37:b0:af:a3:3b:a6:cf:f2: d8:88:6c:b9:c4:0f:e0:a4:fc:e6:65:da:23:c0:1b:d7:c2:ab: 22:23:c7:7c:32:9c:38:80:c2:cb:c3:6f:80:c2:fa:8b:97:1c: 1a:ae:58:69:d6:f7:58:a6:ef:2e:bf:35:d0:1d:ff:c6:6a:ce: 57:f6:4c:8c:fd:8b:17:e6:d7:0f:36:4c:9a:1b:1f:c1:e3:00: 12:52:28:72:37:b0:c7:08:e0:ae:8a:68:66:ee:10:f4:0d:54: 15:ee:d3:6a:8b:7f:01:43:2d:96:70:dd:6c:45:50:0a:71:59: 85:0c:34:66:3a:1b:2d:54:0a:31:dd:e0:84:27:1d:f3:a3:91: 98:30:63:4e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC0swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAzMDYw NzI0NDJaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAzQUY2NUE5NDFFMTY5 NERERjAzRkM1N0JBRTg3NjQwQTNBQzI1NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8Tj0ko1bqeSIYlA5ilObqBXsUF3g8C8F3SX6iEO6KjuPTGh3n zpyKPWu12YlzbMwuaPodGls3R97f8BpIDea1Sfw4GCMBzlvWR9qdcTfcnrrjQCSL mZFdIBqaLJrcmuGffQ02+wG7e1/BhM0d7TzRd0zhFtcvOz7rVROrig1EkKvOxowL f0M1u+uksuev7zjvRSCoC/LmOkWQPlm/QesHtDMuidT2zY+mpA5NxoUr0rpdKgTX UY8UsnAdG39kIZgZ3WubnLEDgwJ1OsFqcHvHl6XS9xwuuE3RLg0N3kB97/wnzgiU I2J+ptGwrw6WxMcPJ0bR97xv0SPJc7MwiRYhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUA69lqUHhaU3fA/xXuuh2QKOsJUYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0E2OWxxVUhoYVUzZkFfeFh1dWgyUUtPc0pVWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABS5cwDQYJKoZIhvcNAQELBQADggEBAMLsivSIFnRN8fEz+V7S/nAI50zu xKCMcPN79YehvmLRy1Ud64I0u/2BSgUxRH4t5athDz58fxq5CYb43vqmN5knfquW uzdsnkwma9AThEfBCfELz1gEFaSREWvq7wRSUXgvW++KKptjCuXLwe7nSvnQ6cMs uCw3sK+jO6bP8tiIbLnED+Ck/OZl2iPAG9fCqyIjx3wynDiAwsvDb4DC+ouXHBqu WGnW91im7y6/NdAd/8Zqzlf2TIz9ixfm1w82TJobH8HjABJSKHI3sMcI4K6KaGbu EPQNVBXu02qLfwFDLZZw3WxFUApxWYUMNGY6Gy1UCjHd4IQnHfOjkZgwY04= -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:42 2025 by rpki-client