$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HTSwFlPzGIsLBWm4SVFgKlbEYYE.roa File: HTSwFlPzGIsLBWm4SVFgKlbEYYE.roa (raw, json) Hash identifier: cxrtEI5MmrJmOBqdlNkAgqJwmBkQlvEN3B4ej2dFZ9U= Subject key identifier: 1D:34:B0:16:53:F3:18:8B:0B:05:69:B8:49:51:60:2A:56:C4:61:81 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CD9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HTSwFlPzGIsLBWm4SVFgKlbEYYE.roa Signing time: Tue 01 Apr 2025 02:09:16 +0000 ROA not before: Tue 01 Apr 2025 02:09:16 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:16 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1D34B01653F3188B0B0569B84951602A56C46181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:ff:d3:08:8d:fb:98:85:d9:08:f1:c5:7c: db:99:70:0f:be:6e:9e:dc:49:0d:92:30:b2:69:e4: 8d:28:86:7e:fe:f2:32:42:24:ce:2c:5d:66:70:9e: 3d:36:f3:3e:50:78:e6:99:fb:68:62:c0:9c:26:23: 84:1b:59:9f:d0:42:b3:d8:00:c4:15:ec:2e:1f:ac: 0f:b0:47:7c:5d:80:08:54:03:6f:84:22:2c:1d:7e: dd:54:2d:8d:11:46:70:60:8c:51:7d:97:53:33:00: 86:fa:15:19:d9:36:43:e4:9f:8a:bd:e6:7a:49:f4: 39:ce:7a:d6:78:27:1f:60:21:8e:2d:5f:e3:b7:27: bf:84:73:07:8a:85:79:34:f6:b0:ab:ce:2d:9e:a8: e6:de:9a:f4:f3:2e:ba:45:c9:01:d0:0a:36:09:a3: 05:2a:46:50:40:dd:42:35:82:89:f5:15:eb:51:d8: b5:f7:2c:fa:74:74:3f:58:cd:09:be:4a:87:d1:ce: 0a:13:82:4b:42:28:44:7d:03:d2:2f:cf:c1:04:63: 6d:88:76:03:d9:15:b5:ed:fa:48:4e:42:39:ca:e8: fa:e3:1e:d3:6a:60:ad:a0:0a:d8:0f:cf:43:6f:34: 26:00:94:60:74:91:dc:b3:f8:9e:8a:5e:b4:ee:df: d0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:34:B0:16:53:F3:18:8B:0B:05:69:B8:49:51:60:2A:56:C4:61:81 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HTSwFlPzGIsLBWm4SVFgKlbEYYE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.26.0/23 Signature Algorithm: sha256WithRSAEncryption 44:8a:f2:d4:a8:98:b2:aa:23:36:f2:a3:aa:1f:f1:ee:d6:c6: cb:37:1b:5d:cf:f4:28:ef:d2:44:d3:74:7e:0f:e8:66:37:10: 56:b6:fc:fe:92:b1:b3:89:95:6f:99:96:1d:9d:fc:6b:29:47: 57:34:b1:63:c3:c2:0b:87:91:3b:2e:ba:57:9c:9b:0a:87:8f: 0c:6a:58:cb:7e:dd:c5:9a:69:ed:79:ae:5c:f1:2e:d8:0f:c3: bd:bc:10:0d:9f:50:07:e0:64:fc:df:7c:29:3a:c1:59:dc:33: 27:71:58:62:92:3e:d2:bd:fc:fa:cb:2a:55:64:e4:da:c1:82: d0:d5:4b:45:49:6e:8d:16:67:42:17:75:20:99:a3:39:17:9c: 85:3c:32:a4:f7:f5:f4:1e:12:83:f5:10:2c:ef:e6:30:fe:f9: 37:8a:73:75:1c:1c:eb:0e:8c:c0:d6:84:35:88:80:71:ca:c0: da:a7:03:97:38:c5:bf:fd:6e:c5:20:0b:35:61:2e:50:45:4d: 8e:e7:40:21:68:8a:ae:e6:74:95:98:a0:c1:40:a7:61:d1:de: 57:e6:24:3d:20:27:f7:95:ec:30:f1:56:fb:29:86:d0:ca:0d: 10:87:70:4a:65:72:f6:56:35:3d:bc:b2:19:93:93:bb:59:8c: 83:7c:98:51 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MTZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFEMzRCMDE2NTNGMzE4 OEIwQjA1NjlCODQ5NTE2MDJBNTZDNDYxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLeP/TCI37mIXZCPHFfNuZcA++bp7cSQ2SMLJp5I0ohn7+8jJC JM4sXWZwnj028z5QeOaZ+2hiwJwmI4QbWZ/QQrPYAMQV7C4frA+wR3xdgAhUA2+E Iiwdft1ULY0RRnBgjFF9l1MzAIb6FRnZNkPkn4q95npJ9DnOetZ4Jx9gIY4tX+O3 J7+EcweKhXk09rCrzi2eqObemvTzLrpFyQHQCjYJowUqRlBA3UI1gon1FetR2LX3 LPp0dD9YzQm+SofRzgoTgktCKER9A9Ivz8EEY22IdgPZFbXt+khOQjnK6PrjHtNq YK2gCtgPz0NvNCYAlGB0kdyz+J6KXrTu39BrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHTSwFlPzGIsLBWm4SVFgKlbEYYEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hUU3dGbFB6R0lzTEJXbTRTVkZnS2xiRVlZRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTxowDQYJKoZIhvcNAQELBQADggEBAESK8tSomLKqIzbyo6of8e7Wxss3 G13P9Cjv0kTTdH4P6GY3EFa2/P6SsbOJlW+Zlh2d/GspR1c0sWPDwguHkTsuulec mwqHjwxqWMt+3cWaae15rlzxLtgPw728EA2fUAfgZPzffCk6wVncMydxWGKSPtK9 /PrLKlVk5NrBgtDVS0VJbo0WZ0IXdSCZozkXnIU8MqT39fQeEoP1ECzv5jD++TeK c3UcHOsOjMDWhDWIgHHKwNqnA5c4xb/9bsUgCzVhLlBFTY7nQCFoiq7mdJWYoMFA p2HR3lfmJD0gJ/eV7DDxVvsphtDKDRCHcEplcvZWNT28shmTk7tZjIN8mFE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:27:36 2025 by rpki-client