$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DnXnws-uMAWBSZ_HURfziiOFipk.roa File: DnXnws-uMAWBSZ_HURfziiOFipk.roa (raw, json) Hash identifier: oDKLQuKNKi5dkNchI5ppjVjnT2b1l2M895+h1MjkxbM= Subject key identifier: 0E:75:E7:C2:CF:AE:30:05:81:49:9F:C7:51:17:F3:8A:23:85:8A:99 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B65 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DnXnws-uMAWBSZ_HURfziiOFipk.roa Signing time: Tue 01 Apr 2025 01:33:26 +0000 ROA not before: Tue 01 Apr 2025 01:33:26 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 211.14.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2917 (0xb65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:33:26 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=0E75E7C2CFAE300581499FC75117F38A23858A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:8a:5d:b2:5c:e8:b7:33:65:ab:d4:a1:67: dc:35:b8:6a:58:3d:9b:25:e9:ad:f5:68:c2:ea:5a: 91:15:46:86:36:8f:a6:6c:f4:12:45:2f:cb:dd:81: 0f:23:7f:8f:33:0c:9e:2e:b2:d4:49:e1:77:c0:be: 8b:93:48:c8:13:03:20:ae:fb:f8:b9:6c:45:9d:92: 15:1c:6a:1e:28:6c:63:e9:92:89:87:5f:61:08:f0: 98:3c:40:cb:47:f0:0a:7c:2c:fd:7c:4c:ae:d1:47: 38:33:51:c6:9c:3a:6c:75:23:6d:30:34:3e:5b:d2: b3:66:f4:b9:d0:e2:ea:63:34:06:1a:aa:0c:b2:57: 58:b3:e9:d3:b1:26:bc:5e:93:74:da:1a:ca:fb:81: f9:7b:8c:05:eb:60:fa:ee:10:05:83:f7:c6:60:6e: d7:38:38:0a:48:8a:2a:a4:09:0c:14:e3:f5:30:4f: 6e:18:9e:e5:b8:44:be:b3:7d:ae:f4:29:87:0a:de: 57:51:91:f4:b9:e1:ab:c3:00:24:d9:5f:5e:10:9d: 3a:75:e4:a4:82:89:b5:ed:1b:c2:0b:02:25:1c:dd: de:25:64:f8:56:01:63:d6:d7:df:58:94:82:3b:22: 59:56:32:d8:1c:a1:b0:0b:c1:92:bb:79:6b:7d:38: c8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:75:E7:C2:CF:AE:30:05:81:49:9F:C7:51:17:F3:8A:23:85:8A:99 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DnXnws-uMAWBSZ_HURfziiOFipk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.72.0/23 Signature Algorithm: sha256WithRSAEncryption 33:c2:12:d4:56:65:d2:92:a1:51:4b:8c:fb:d1:c0:71:bb:0c: a5:ef:73:c4:c6:24:29:3c:1a:b4:48:1f:9f:96:ce:9f:d7:80: 2a:f1:5e:90:77:22:5e:29:dd:34:fd:0d:05:1c:17:3d:2f:33: 70:f2:16:ab:be:d7:f1:f0:6b:20:e3:2e:de:df:3e:ef:4d:44: 2d:dc:7f:53:15:9c:c2:7a:05:91:f3:fd:5c:9a:ee:4f:9c:2a: bb:2c:cb:8f:14:72:96:49:5c:db:45:32:37:60:d6:82:3b:78: 7c:fe:0f:15:43:41:25:8a:96:fd:66:e7:fc:34:0b:b1:50:22: 84:b8:33:09:15:a4:27:68:31:e3:ca:b8:4c:7e:45:f3:ac:79: e6:bf:39:7d:c2:9a:1d:a4:30:35:dd:b7:c7:2d:7f:a7:6e:de: ce:2b:45:e7:dc:41:73:1c:cf:da:5b:da:b4:bb:0f:1a:c9:b4: c1:9c:bb:90:ed:65:70:e0:3b:e0:fd:d0:1a:ae:0e:ee:b0:38: f0:14:fb:24:f1:89:f5:52:ed:a4:78:ab:95:c4:b1:1d:da:c1: 50:77:c7:40:ef:ca:bd:ee:74:4c:09:4c:69:eb:1c:7c:b0:be: b4:67:87:d7:44:8d:db:9a:1b:df:57:03:7f:b3:a7:08:4c:f0: 11:6e:5a:51 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC2UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTMzMjZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBFNzVFN0MyQ0ZBRTMw MDU4MTQ5OUZDNzUxMTdGMzhBMjM4NThBOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4+opdslzotzNlq9ShZ9w1uGpYPZsl6a31aMLqWpEVRoY2j6Zs 9BJFL8vdgQ8jf48zDJ4ustRJ4XfAvouTSMgTAyCu+/i5bEWdkhUcah4obGPpkomH X2EI8Jg8QMtH8Ap8LP18TK7RRzgzUcacOmx1I20wND5b0rNm9LnQ4upjNAYaqgyy V1iz6dOxJrxek3TaGsr7gfl7jAXrYPruEAWD98Zgbtc4OApIiiqkCQwU4/UwT24Y nuW4RL6zfa70KYcK3ldRkfS54avDACTZX14QnTp15KSCibXtG8ILAiUc3d4lZPhW AWPW199YlII7IllWMtgcobALwZK7eWt9OMjfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDnXnws+uMAWBSZ/HURfziiOFipkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0RuWG53cy11TUFXQlNaX0hVUmZ6aWlPRmlway5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTDkgwDQYJKoZIhvcNAQELBQADggEBADPCEtRWZdKSoVFLjPvRwHG7DKXv c8TGJCk8GrRIH5+Wzp/XgCrxXpB3Il4p3TT9DQUcFz0vM3DyFqu+1/HwayDjLt7f Pu9NRC3cf1MVnMJ6BZHz/Vya7k+cKrssy48UcpZJXNtFMjdg1oI7eHz+DxVDQSWK lv1m5/w0C7FQIoS4MwkVpCdoMePKuEx+RfOseea/OX3Cmh2kMDXdt8ctf6du3s4r RefcQXMcz9pb2rS7DxrJtMGcu5DtZXDgO+D90BquDu6wOPAU+yTxifVS7aR4q5XE sR3awVB3x0Dvyr3udEwJTGnrHHywvrRnh9dEjduaG99XA3+zpwhM8BFuWlE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:41:38 2025 by rpki-client