$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CQy1SnFiCp1CbzWSJTlkOyg62Kk.roa File: CQy1SnFiCp1CbzWSJTlkOyg62Kk.roa (raw, json) Hash identifier: Jhuv9FZImdb9zC8P24AqYK4VtBU9G6Zqgw1kNPaeh+M= Subject key identifier: 09:0C:B5:4A:71:62:0A:9D:42:6F:35:92:25:39:64:3B:28:3A:D8:A9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BC5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CQy1SnFiCp1CbzWSJTlkOyg62Kk.roa Signing time: Tue 01 Apr 2025 01:43:47 +0000 ROA not before: Tue 01 Apr 2025 01:43:47 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.76.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:43:47 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=090CB54A71620A9D426F35922539643B283AD8A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:03:78:e6:e1:ed:b8:83:1f:0c:40:08:e2: c3:88:20:8b:7e:a4:3d:7f:8e:e7:9a:b3:e1:62:ad: 58:69:9c:a2:d2:20:92:59:f4:14:31:a0:d7:87:dd: b6:78:d4:e7:85:cc:52:a1:df:b3:5d:de:b9:54:3e: 47:55:c0:70:cd:6f:17:e6:65:95:e2:a6:ba:64:fe: 2c:98:b4:79:84:4f:f2:a2:37:ec:c7:27:79:47:3a: 50:3c:b4:ea:35:18:c9:a6:e7:3a:43:39:dc:58:52: a8:33:53:d6:b4:71:44:e1:52:a7:e5:04:84:d6:e6: 39:67:ad:e5:6c:52:7c:ab:5b:0b:6f:ef:21:0d:49: 67:26:02:f8:59:3f:4f:bf:c1:8d:94:1b:3f:a3:5b: 9f:de:84:54:8c:b2:e5:d1:d5:57:ed:4a:1f:67:f1: d3:ae:fe:24:54:d3:87:83:20:e9:da:64:72:89:bd: d8:93:08:1c:8f:c6:b3:fa:f3:b6:ce:4c:35:29:08: 8a:c7:50:3c:0c:f8:5c:aa:00:a0:78:c2:a4:98:c9: 65:ad:38:81:01:4f:64:7f:4c:0e:e6:fa:94:1b:70: 47:37:9a:3c:ed:14:0a:bd:07:99:01:a7:3b:66:ad: e6:f7:75:9b:b0:1e:a7:d3:d2:9d:74:47:67:d2:e0: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0C:B5:4A:71:62:0A:9D:42:6F:35:92:25:39:64:3B:28:3A:D8:A9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CQy1SnFiCp1CbzWSJTlkOyg62Kk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.32.0/19 Signature Algorithm: sha256WithRSAEncryption 7b:4d:85:1d:b3:a6:6c:ee:1f:7b:82:3f:49:e2:4f:86:21:0c: 50:31:50:1a:04:f4:05:1b:a9:a8:3b:9a:53:4a:b0:68:cd:a0: 95:05:84:28:ef:8d:22:48:ed:64:05:14:c7:10:ad:af:18:87: ba:12:f0:90:98:a0:8a:b9:c3:34:67:f3:27:05:12:0a:83:27: 18:94:11:cf:37:10:48:53:a1:cc:56:c4:46:a7:19:ce:f8:97: db:c5:b5:e1:fb:13:87:cc:5a:89:71:21:94:0c:23:e1:b2:33: e2:32:7c:e8:b6:25:0e:d6:f5:1e:81:1d:40:91:c6:49:ef:ce: fd:3c:bb:8e:32:59:e3:d6:32:db:b1:c6:8f:28:c9:2e:25:39: 0e:da:64:67:35:a9:1e:70:4f:df:0b:72:16:38:d4:e6:c6:a1: 22:df:0b:6b:e2:7b:15:70:ad:80:b7:46:55:5a:fd:46:99:89: c8:b8:2a:f5:f4:81:9f:c1:d1:ba:13:96:27:f5:43:0e:f2:f4: e1:92:e2:a1:b6:62:b2:6c:bf:5f:e0:b1:66:98:91:c2:52:a8: 5b:2e:5a:ae:bc:63:63:19:00:11:c3:fb:f7:2c:35:a4:9f:55: 31:3b:c8:1e:a7:e4:46:fa:bb:ee:11:b6:ae:d8:e1:8f:0a:5c: e1:35:3b:14 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQzNDdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA5MENCNTRBNzE2MjBB OUQ0MjZGMzU5MjI1Mzk2NDNCMjgzQUQ4QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnggN45uHtuIMfDEAI4sOIIIt+pD1/jueas+FirVhpnKLSIJJZ 9BQxoNeH3bZ41OeFzFKh37Nd3rlUPkdVwHDNbxfmZZXiprpk/iyYtHmET/KiN+zH J3lHOlA8tOo1GMmm5zpDOdxYUqgzU9a0cUThUqflBITW5jlnreVsUnyrWwtv7yEN SWcmAvhZP0+/wY2UGz+jW5/ehFSMsuXR1VftSh9n8dOu/iRU04eDIOnaZHKJvdiT CByPxrP687bOTDUpCIrHUDwM+FyqAKB4wqSYyWWtOIEBT2R/TA7m+pQbcEc3mjzt FAq9B5kBpztmreb3dZuwHqfT0p10R2fS4Li7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCQy1SnFiCp1CbzWSJTlkOyg62KkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0NReTFTbkZpQ3AxQ2J6V1NKVGxrT3lnNjJLay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBTCAwDQYJKoZIhvcNAQELBQADggEBAHtNhR2zpmzuH3uCP0niT4YhDFAx UBoE9AUbqag7mlNKsGjNoJUFhCjvjSJI7WQFFMcQra8Yh7oS8JCYoIq5wzRn8ycF EgqDJxiUEc83EEhTocxWxEanGc74l9vFteH7E4fMWolxIZQMI+GyM+IyfOi2JQ7W 9R6BHUCRxknvzv08u44yWePWMtuxxo8oyS4lOQ7aZGc1qR5wT98LchY41ObGoSLf C2viexVwrYC3RlVa/UaZici4KvX0gZ/B0boTlif1Qw7y9OGS4qG2YrJsv1/gsWaY kcJSqFsuWq68Y2MZABHD+/csNaSfVTE7yB6n5Eb6u+4Rtq7Y4Y8KXOE1OxQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:40 2025 by rpki-client