$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DAqltRuTZmWExcIEWXJHCviC8Es.roa File: DAqltRuTZmWExcIEWXJHCviC8Es.roa (raw, json) Hash identifier: ctu0Tg85VhVHeRYo+zkTlyNW+LhoENeHJ6f4d5lO2Yc= Subject key identifier: 0C:0A:A5:B5:1B:93:66:65:84:C5:C2:04:59:72:47:0A:F8:82:F0:4B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B98 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DAqltRuTZmWExcIEWXJHCviC8Es.roa Signing time: Tue 01 Apr 2025 01:39:49 +0000 ROA not before: Tue 01 Apr 2025 01:39:49 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2968 (0xb98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:39:49 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=0C0AA5B51B93666584C5C2045972470AF882F04B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:01:73:86:b4:a2:e3:9c:cd:17:d3:ce:9c:b5: 6a:b8:92:c3:06:34:c9:0f:cc:0e:4f:89:47:89:6c: ec:b8:9a:54:9e:00:d2:92:49:94:8e:79:1a:c5:f7: 04:30:74:08:5d:0f:dc:e9:00:30:59:b7:07:17:3a: 86:7d:19:af:8a:fc:7f:ef:30:5d:63:d9:1a:49:67: c8:53:5a:4f:6f:27:7e:e3:e1:78:ae:03:90:3b:d6: 03:10:8f:ac:bb:1b:c2:16:b0:03:ec:10:1d:d3:80: f0:3a:17:ef:7d:5e:cd:92:66:fe:67:3a:c5:9c:47: 17:0d:a8:c0:d5:af:8f:c0:d9:a7:e1:9b:cd:b0:12: 3c:6e:0f:27:76:b0:77:eb:8b:de:b2:12:24:da:1b: 54:7a:8e:ed:7c:69:94:b0:29:01:6b:4a:46:3a:e6: 6d:46:57:b3:6f:29:5d:f3:89:1a:d1:d2:bb:df:30: 1d:f7:ad:76:a2:03:ca:71:54:8b:5e:68:07:b9:02: 40:92:2b:31:85:68:c4:9c:ec:13:a9:be:ed:9a:54: c6:26:3f:a3:be:25:08:56:e7:9f:82:28:c3:b3:1a: 03:ac:66:5e:2e:78:fd:42:66:40:52:6e:b2:17:96: e8:c5:bb:41:73:92:a6:33:98:d7:a0:52:93:b4:06: 17:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0A:A5:B5:1B:93:66:65:84:C5:C2:04:59:72:47:0A:F8:82:F0:4B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DAqltRuTZmWExcIEWXJHCviC8Es.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.84.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:6a:2f:9a:2a:60:07:b0:a6:49:79:aa:20:bd:8d:53:22:ae: e5:a5:36:d9:92:17:56:69:cf:ea:be:e9:52:db:b8:a6:53:d1: 24:b0:ef:3c:67:06:71:49:79:4b:3c:d2:03:6c:0b:5a:ad:c1: fd:64:c5:f5:02:50:66:76:6a:f0:f3:5d:4e:e9:74:3a:67:84: d4:cd:9e:08:de:7e:69:46:8b:9a:0c:cf:35:1d:e4:48:6f:08: e5:09:23:26:83:45:e0:9e:1d:2b:80:48:72:ab:eb:dc:c8:82: 6c:51:9a:54:c2:03:b7:50:3f:22:fb:04:9d:ae:5f:23:be:35: c2:48:06:61:87:ef:90:4f:c8:06:a7:c2:b0:c8:76:35:3c:c3: 1d:cf:28:8e:91:ac:cc:c5:f4:3f:1d:9e:d0:0c:78:e7:64:b4: 38:cc:09:d1:9e:8c:70:27:af:c6:11:85:36:20:8e:1a:70:f3: e3:d9:c6:a4:40:ec:c0:71:cb:7b:ca:dd:27:a7:96:e8:7a:35: 06:e0:59:07:5c:52:06:94:bd:e2:a3:75:14:87:15:dc:a9:83: 2f:db:b6:5c:8e:4b:f0:9e:59:89:1a:83:0f:61:ac:74:04:ca: 72:5a:03:1d:85:af:12:3a:5e:76:df:d9:f7:6f:43:c9:ed:c8: ed:f4:e5:ba -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM5NDlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBDMEFBNUI1MUI5MzY2 NjU4NEM1QzIwNDU5NzI0NzBBRjg4MkYwNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkAXOGtKLjnM0X086ctWq4ksMGNMkPzA5PiUeJbOy4mlSeANKS SZSOeRrF9wQwdAhdD9zpADBZtwcXOoZ9Ga+K/H/vMF1j2RpJZ8hTWk9vJ37j4Xiu A5A71gMQj6y7G8IWsAPsEB3TgPA6F+99Xs2SZv5nOsWcRxcNqMDVr4/A2afhm82w EjxuDyd2sHfri96yEiTaG1R6ju18aZSwKQFrSkY65m1GV7NvKV3ziRrR0rvfMB33 rXaiA8pxVIteaAe5AkCSKzGFaMSc7BOpvu2aVMYmP6O+JQhW55+CKMOzGgOsZl4u eP1CZkBSbrIXlujFu0FzkqYzmNegUpO0Bhf5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDAqltRuTZmWExcIEWXJHCviC8EswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0RBcWx0UnVUWm1XRXhjSUVXWEpIQ3ZpQzhFcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT1QwDQYJKoZIhvcNAQELBQADggEBAF5qL5oqYAewpkl5qiC9jVMiruWl NtmSF1Zpz+q+6VLbuKZT0SSw7zxnBnFJeUs80gNsC1qtwf1kxfUCUGZ2avDzXU7p dDpnhNTNngjefmlGi5oMzzUd5EhvCOUJIyaDReCeHSuASHKr69zIgmxRmlTCA7dQ PyL7BJ2uXyO+NcJIBmGH75BPyAanwrDIdjU8wx3PKI6RrMzF9D8dntAMeOdktDjM CdGejHAnr8YRhTYgjhpw8+PZxqRA7MBxy3vK3Senluh6NQbgWQdcUgaUveKjdRSH Fdypgy/btlyOS/CeWYkagw9hrHQEynJaAx2FrxI6Xnbf2fdvQ8ntyO305bo= -----END CERTIFICATE-----Generated at Sat Apr 5 17:37:46 2025 by rpki-client