$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DG0yqcGepY275tYnqH5ufehXzo4.roa File: DG0yqcGepY275tYnqH5ufehXzo4.roa (raw, json) Hash identifier: lr5kRSJeALe6ZVjMcwPgnvIAqLUC0ypNAAwvVRUaX8w= Subject key identifier: 0C:6D:32:A9:C1:9E:A5:8D:BB:E6:D6:27:A8:7E:6E:7D:E8:57:CE:8E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C2D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DG0yqcGepY275tYnqH5ufehXzo4.roa Signing time: Tue 01 Apr 2025 01:54:06 +0000 ROA not before: Tue 01 Apr 2025 01:54:06 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 219.114.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:54:06 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=0C6D32A9C19EA58DBBE6D627A87E6E7DE857CE8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7b:b3:ea:27:6d:36:07:e6:0c:b5:e6:89:f6: e0:bb:6b:bd:48:57:48:67:41:cb:e7:ae:02:0a:8b: 67:1c:54:8d:9a:48:7b:76:66:74:f5:67:65:68:46: f7:0f:38:64:7c:d6:d2:56:b0:7c:4d:60:78:b5:a3: 7c:4a:ad:bc:02:cb:fa:84:9d:49:e4:4e:41:23:78: dc:d0:cf:0c:08:5c:8f:74:72:b1:f8:71:35:e3:98: 7d:07:28:dc:8e:e1:e0:12:7d:f9:e2:d9:18:45:b9: cf:81:e0:3a:c7:1e:41:d7:66:91:f0:61:f2:cd:a3: 77:2e:0d:94:5a:8e:b1:eb:60:23:e8:f0:2d:d0:70: 77:3b:09:b6:bf:46:45:cd:63:8e:a6:7d:fb:48:91: 08:de:38:5c:3c:be:24:26:2e:a3:ed:bb:09:df:45: c5:ff:79:dc:bc:2f:f4:11:d0:b6:60:2c:7a:2b:39: b1:55:c7:8d:d9:83:95:7d:01:27:88:ef:4b:85:6a: f3:34:46:f9:77:c4:e2:ca:21:c3:95:6b:26:dd:79: 11:99:7f:b6:19:02:14:08:33:d2:de:cb:9c:ce:ac: 8f:f8:06:41:eb:09:d4:1a:be:86:82:1c:c5:3d:e7: 3f:8f:ac:60:dd:70:c0:cb:33:0e:93:dd:a3:1b:4a: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6D:32:A9:C1:9E:A5:8D:BB:E6:D6:27:A8:7E:6E:7D:E8:57:CE:8E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DG0yqcGepY275tYnqH5ufehXzo4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.184.0/24 Signature Algorithm: sha256WithRSAEncryption 93:2b:55:42:15:e3:dd:61:b4:ba:e4:80:f7:69:38:8e:a5:6b: 70:83:05:92:ce:a3:ac:3d:f6:5c:8e:09:3e:96:50:13:c7:02: 1f:d4:6a:2c:63:82:ef:37:4a:b9:82:6f:f2:50:8b:29:6f:b0: 00:57:d7:87:1a:e0:1f:4f:86:cc:94:ef:0a:1e:05:ca:20:d7: e1:0b:a6:67:5d:a7:51:e0:19:89:8f:2f:e6:68:fd:03:85:2b: 2f:67:bd:92:33:45:cf:89:ba:e7:1e:bd:2a:60:63:bc:8f:8e: fd:c6:c5:3a:b9:12:3e:44:ff:27:90:95:65:2e:27:71:b2:00: a5:33:b3:58:fe:7d:0c:60:04:42:a6:e1:91:ce:61:b9:9b:8d: 88:9a:4f:13:42:48:e0:12:db:dd:c3:d0:41:55:f0:8d:45:2c: 2d:40:af:88:51:76:17:be:e2:4f:e1:7f:8e:c5:0d:92:49:97: 59:bf:40:8c:25:b1:bc:5b:5f:cc:c5:b9:e6:33:d4:c4:70:f1: b2:17:9e:77:a8:17:0f:6e:1c:dc:bc:90:1b:71:09:b0:e0:30: 73:2b:15:85:02:6f:1f:8d:62:d9:f8:f9:03:08:48:9e:fa:17: 47:13:1c:fa:42:b6:68:12:54:fc:d0:9c:d6:6a:9e:14:97:41: d1:af:45:d0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU0MDZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBDNkQzMkE5QzE5RUE1 OERCQkU2RDYyN0E4N0U2RTdERTg1N0NFOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoe7PqJ202B+YMteaJ9uC7a71IV0hnQcvnrgIKi2ccVI2aSHt2 ZnT1Z2VoRvcPOGR81tJWsHxNYHi1o3xKrbwCy/qEnUnkTkEjeNzQzwwIXI90crH4 cTXjmH0HKNyO4eASffni2RhFuc+B4DrHHkHXZpHwYfLNo3cuDZRajrHrYCPo8C3Q cHc7Cba/RkXNY46mfftIkQjeOFw8viQmLqPtuwnfRcX/edy8L/QR0LZgLHorObFV x43Zg5V9ASeI70uFavM0Rvl3xOLKIcOVaybdeRGZf7YZAhQIM9Ley5zOrI/4BkHr CdQavoaCHMU95z+PrGDdcMDLMw6T3aMbSleFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDG0yqcGepY275tYnqH5ufehXzo4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0RHMHlxY0dlcFkyNzV0WW5xSDV1ZmVoWHpvNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADbcrgwDQYJKoZIhvcNAQELBQADggEBAJMrVUIV491htLrkgPdpOI6la3CD BZLOo6w99lyOCT6WUBPHAh/Uaixjgu83SrmCb/JQiylvsABX14ca4B9PhsyU7woe Bcog1+ELpmddp1HgGYmPL+Zo/QOFKy9nvZIzRc+JuucevSpgY7yPjv3GxTq5Ej5E /yeQlWUuJ3GyAKUzs1j+fQxgBEKm4ZHOYbmbjYiaTxNCSOAS293D0EFV8I1FLC1A r4hRdhe+4k/hf47FDZJJl1m/QIwlsbxbX8zFueYz1MRw8bIXnneoFw9uHNy8kBtx CbDgMHMrFYUCbx+NYtn4+QMISJ76F0cTHPpCtmgSVPzQnNZqnhSXQdGvRdA= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:34 2025 by rpki-client