$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/B0dhDlniNHegjP-Ag-4Jy6JX598.roa File: B0dhDlniNHegjP-Ag-4Jy6JX598.roa (raw, json) Hash identifier: 35g0HFsXla9gopKccLh7WTMcmCqUNtcCPB5yndlzf3Q= Subject key identifier: 07:47:61:0E:59:E2:34:77:A0:8C:FF:80:83:EE:09:CB:A2:57:E7:DF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C7D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/B0dhDlniNHegjP-Ag-4Jy6JX598.roa Signing time: Tue 01 Apr 2025 02:00:41 +0000 ROA not before: Tue 01 Apr 2025 02:00:41 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3197 (0xc7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:00:41 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=0747610E59E23477A08CFF8083EE09CBA257E7DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c3:37:2f:9c:c0:19:6a:23:0b:ee:84:6b:fa: ee:ee:b2:a6:cd:ce:f1:5e:fa:6f:04:18:99:14:83: a6:7e:13:78:72:9e:4b:b2:1b:a9:27:8f:88:79:94: 6c:26:8f:12:85:62:29:59:e3:46:0a:3d:3a:57:cf: ef:85:26:70:08:fd:dc:e4:00:4a:1c:53:54:f9:12: ec:4e:77:f8:4a:5f:80:47:2b:dc:a7:48:df:c3:61: c6:19:a9:9e:43:78:be:7c:36:a8:a3:3f:4e:d5:f6: 0d:93:4f:ff:e8:d6:74:2a:bb:f7:2d:dc:eb:5c:c8: 59:d7:5e:9b:8b:b6:7e:e4:9f:1d:ca:c5:ba:35:a6: f1:84:4c:23:3e:5e:5a:5b:48:2d:43:c5:18:32:25: 13:e8:1c:02:d8:dc:49:06:6a:8b:49:b8:b2:68:41: 15:d4:51:81:88:29:59:fc:83:08:a1:a3:ee:f4:eb: 2e:d4:ae:43:00:b7:47:ed:ac:07:79:54:23:ca:3b: 56:86:0c:92:84:ab:06:84:4c:ff:c9:f2:03:be:08: 8d:89:0c:fc:94:cb:e2:ad:33:8e:57:20:0f:e5:f0: 99:b7:33:ae:6a:5d:7e:d1:74:68:5f:18:05:d6:49: 0c:48:68:2c:8f:4a:5f:89:21:c5:0d:68:c6:c9:f9: 41:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:47:61:0E:59:E2:34:77:A0:8C:FF:80:83:EE:09:CB:A2:57:E7:DF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/B0dhDlniNHegjP-Ag-4Jy6JX598.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.32.0/23 Signature Algorithm: sha256WithRSAEncryption b9:77:09:8a:8b:60:05:56:7a:13:b1:0b:b8:fc:1a:81:e4:71: b8:90:35:97:65:44:c2:ac:82:4b:85:83:ce:04:61:5a:48:db: f8:fb:5c:1b:83:f4:e0:04:cc:79:30:a9:e2:37:ff:f9:86:23: 5c:03:2a:92:c4:bf:0e:5c:0b:20:73:ec:40:af:e2:a1:92:26: ad:ec:38:50:70:44:cb:98:fe:82:5b:18:10:fa:b0:6d:74:d5: a6:b6:39:c0:8b:ae:5b:76:22:0e:78:d9:3b:8d:6c:af:87:f7: 59:5e:ae:e3:66:cd:de:5c:1e:30:7b:69:7f:70:8c:e3:1f:ea: 98:ea:d9:51:ca:67:c0:57:5b:fd:cb:1a:1e:68:76:3c:72:86: 64:45:d9:c5:db:80:87:15:7b:83:d6:7f:ac:df:a1:89:a0:bb: a9:85:6a:6d:7c:91:52:68:03:53:17:8f:6a:3e:a8:80:f8:43: 93:31:46:fd:17:1e:c6:2a:65:1f:0d:1d:7b:d7:fb:8e:38:fe: 87:d6:6f:a5:75:7b:96:0f:c6:3b:3c:ea:35:14:de:c0:c2:e1: cf:f0:6e:c5:0f:b1:c8:4a:f2:4d:0a:d9:d0:1c:da:cd:0a:e8: 87:a9:08:df:be:7a:be:fc:86:6d:20:24:a9:8a:9e:f7:ef:91: 71:78:06:c2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAwNDFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA3NDc2MTBFNTlFMjM0 NzdBMDhDRkY4MDgzRUUwOUNCQTI1N0U3REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZwzcvnMAZaiML7oRr+u7usqbNzvFe+m8EGJkUg6Z+E3hynkuy G6knj4h5lGwmjxKFYilZ40YKPTpXz++FJnAI/dzkAEocU1T5EuxOd/hKX4BHK9yn SN/DYcYZqZ5DeL58NqijP07V9g2TT//o1nQqu/ct3OtcyFnXXpuLtn7knx3Kxbo1 pvGETCM+XlpbSC1DxRgyJRPoHALY3EkGaotJuLJoQRXUUYGIKVn8gwiho+706y7U rkMAt0ftrAd5VCPKO1aGDJKEqwaETP/J8gO+CI2JDPyUy+KtM45XIA/l8Jm3M65q XX7RdGhfGAXWSQxIaCyPSl+JIcUNaMbJ+UEBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUB0dhDlniNHegjP+Ag+4Jy6JX598wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0IwZGhEbG5pTkhlZ2pQLUFnLTRKeTZKWDU5OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTyAwDQYJKoZIhvcNAQELBQADggEBALl3CYqLYAVWehOxC7j8GoHkcbiQ NZdlRMKsgkuFg84EYVpI2/j7XBuD9OAEzHkwqeI3//mGI1wDKpLEvw5cCyBz7ECv 4qGSJq3sOFBwRMuY/oJbGBD6sG101aa2OcCLrlt2Ig542TuNbK+H91leruNmzd5c HjB7aX9wjOMf6pjq2VHKZ8BXW/3LGh5odjxyhmRF2cXbgIcVe4PWf6zfoYmgu6mF am18kVJoA1MXj2o+qID4Q5MxRv0XHsYqZR8NHXvX+444/ofWb6V1e5YPxjs86jUU 3sDC4c/wbsUPschK8k0K2dAc2s0K6IepCN++er78hm0gJKmKnvfvkXF4BsI= -----END CERTIFICATE-----Generated at Sat Apr 5 17:45:57 2025 by rpki-client