$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HWgOmO_CzVFcuaessbA_XPgU0jc.roa File: HWgOmO_CzVFcuaessbA_XPgU0jc.roa (raw, json) Hash identifier: iDVp+TLJXwPIhefYFdUdhIiIkgxhKWhr3L/l97tkLzI= Subject key identifier: 1D:68:0E:98:EF:C2:CD:51:5C:B9:A7:AC:B1:B0:3F:5C:F8:14:D2:37 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CBB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HWgOmO_CzVFcuaessbA_XPgU0jc.roa Signing time: Tue 01 Apr 2025 02:05:47 +0000 ROA not before: Tue 01 Apr 2025 02:05:47 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3259 (0xcbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:47 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1D680E98EFC2CD515CB9A7ACB1B03F5CF814D237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ea:19:bb:13:26:44:51:08:ee:57:b6:ed:66: e7:ec:ed:49:2c:d0:e1:ae:ad:ad:22:64:7d:53:0d: 94:c2:7d:86:70:a1:d4:d9:e5:2b:61:d2:ad:7e:54: 8f:5b:53:63:2a:77:e9:a4:ae:07:3f:e9:ee:8b:71: 39:cc:e6:94:7f:98:cf:bd:ad:ff:3c:6f:01:8f:84: 41:da:08:dc:6d:0a:79:b9:fc:25:e1:f6:ae:03:af: 6e:9c:2f:ab:f7:a7:bf:10:cd:4c:55:a0:07:12:3b: 51:c0:cf:29:9f:56:e4:9a:1f:e6:b1:67:ff:35:53: 02:ad:7b:94:40:be:0c:5e:20:af:8d:f5:ec:7c:e9: 3b:b9:02:9f:f4:34:d1:4e:d1:7c:a7:2e:4f:65:1e: 09:e5:5d:1e:f3:43:d4:1e:d7:26:82:a5:e5:fc:dd: 6b:90:17:c6:52:20:2c:e6:42:a4:b1:3d:05:e9:73: 2f:42:48:c5:6d:1b:24:a9:49:9b:d5:58:c9:ac:00: 35:39:5c:a4:30:01:35:b5:42:87:1e:26:45:57:af: d5:9d:fa:13:78:02:bb:04:56:30:34:37:cf:35:87: e6:e6:70:b3:1a:e1:69:ae:21:30:b7:30:6a:66:46: 9f:e9:70:da:1e:b8:f7:89:fa:79:46:eb:bc:9e:3b: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:68:0E:98:EF:C2:CD:51:5C:B9:A7:AC:B1:B0:3F:5C:F8:14:D2:37 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HWgOmO_CzVFcuaessbA_XPgU0jc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.70.0/23 Signature Algorithm: sha256WithRSAEncryption c5:97:23:10:bc:ad:d3:f0:b7:e8:b4:50:61:20:56:18:97:c4: 2d:cd:bc:f3:ec:17:8c:1e:57:86:2f:5d:c6:b4:9d:d7:50:1c: cc:7c:e6:c6:d4:8e:49:c1:4a:f8:6e:7a:74:b6:b5:42:46:85: 6e:73:42:d4:98:81:a8:af:09:48:02:2c:6c:b2:f1:5d:ac:88: 1f:ef:b1:4d:aa:30:89:08:8a:9e:e2:16:4a:c7:72:ba:88:69: 64:b6:8a:4d:b2:67:53:e9:4d:00:11:e9:94:ae:6b:e3:bf:f8: 79:72:6d:35:f7:a0:76:3d:af:f9:51:e9:da:61:09:3e:43:df: 82:61:b6:1d:cf:a6:f8:70:97:d1:e2:b1:6a:af:ed:91:ea:19: a5:47:ee:16:9d:08:44:3a:dd:b9:e8:69:34:52:7b:36:97:b0: 20:eb:e4:61:3e:ce:7d:29:4a:27:7f:24:8c:cb:c4:89:76:b2: ba:e5:3f:76:30:eb:18:cc:b1:cb:54:a2:03:df:33:23:d2:95: f7:9a:31:8c:1a:69:b4:ac:62:e6:49:5f:a9:92:48:9b:b4:50: 41:2e:9a:a8:1b:0b:f1:5e:8a:d1:6e:cf:73:81:8e:39:cc:87: 88:c3:7c:00:58:ed:5b:dc:b6:6d:f1:f6:36:06:76:ba:b4:e9: b4:50:0b:b4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDLswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFENjgwRTk4RUZDMkNE NTE1Q0I5QTdBQ0IxQjAzRjVDRjgxNEQyMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh6hm7EyZEUQjuV7btZufs7Uks0OGura0iZH1TDZTCfYZwodTZ 5Sth0q1+VI9bU2Mqd+mkrgc/6e6LcTnM5pR/mM+9rf88bwGPhEHaCNxtCnm5/CXh 9q4Dr26cL6v3p78QzUxVoAcSO1HAzymfVuSaH+axZ/81UwKte5RAvgxeIK+N9ex8 6Tu5Ap/0NNFO0XynLk9lHgnlXR7zQ9Qe1yaCpeX83WuQF8ZSICzmQqSxPQXpcy9C SMVtGySpSZvVWMmsADU5XKQwATW1QoceJkVXr9Wd+hN4ArsEVjA0N881h+bmcLMa 4WmuITC3MGpmRp/pcNoeuPeJ+nlG67yeOyG1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHWgOmO/CzVFcuaessbA/XPgU0jcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hXZ09tT19DelZGY3VhZXNzYkFfWFBnVTBqYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBT0YwDQYJKoZIhvcNAQELBQADggEBAMWXIxC8rdPwt+i0UGEgVhiXxC3N vPPsF4weV4YvXca0nddQHMx85sbUjknBSvhuenS2tUJGhW5zQtSYgaivCUgCLGyy 8V2siB/vsU2qMIkIip7iFkrHcrqIaWS2ik2yZ1PpTQAR6ZSua+O/+HlybTX3oHY9 r/lR6dphCT5D34Jhth3Ppvhwl9HisWqv7ZHqGaVH7hadCEQ63bnoaTRSezaXsCDr 5GE+zn0pSid/JIzLxIl2srrlP3Yw6xjMsctUogPfMyPSlfeaMYwaabSsYuZJX6mS SJu0UEEumqgbC/FeitFuz3OBjjnMh4jDfABY7Vvctm3x9jYGdrq06bRQC7Q= -----END CERTIFICATE-----Generated at Sat Apr 5 23:03:42 2025 by rpki-client