$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HeJwW5L0Lupk82ZVteY0uSJCEKA.roa File: HeJwW5L0Lupk82ZVteY0uSJCEKA.roa (raw, json) Hash identifier: EY0jwcOrbLkZCLJ+R0qTOnsE5lXboinXrNFjJNM/Zto= Subject key identifier: 1D:E2:70:5B:92:F4:2E:EA:64:F3:66:55:B5:E6:34:B9:22:42:10:A0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D33 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HeJwW5L0Lupk82ZVteY0uSJCEKA.roa Signing time: Tue 01 Apr 2025 02:13:54 +0000 ROA not before: Tue 01 Apr 2025 02:13:54 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:13:54 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1DE2705B92F42EEA64F36655B5E634B9224210A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fa:01:69:32:84:76:eb:45:b5:37:40:b4:be: 9c:7d:c0:c5:72:80:0d:4c:e3:68:93:69:e4:c6:02: 4c:ba:57:39:e2:30:b3:12:0a:72:26:b7:a3:25:f3: 7d:27:e0:f8:42:e0:41:c8:e3:9a:58:ed:f0:16:02: 08:93:c2:44:d4:e5:e5:f9:25:2b:11:eb:38:6e:d7: 84:51:6e:51:98:e2:e2:53:95:1e:42:e9:91:81:1e: 8a:e7:ae:10:61:9a:10:e8:8b:d2:5d:1b:a7:59:69: 7c:14:ad:f5:ca:2e:f4:d7:3e:f2:8c:93:e1:21:23: a7:38:0f:27:21:26:0d:06:a5:96:03:a1:cd:b7:74: cd:84:8e:70:8f:2f:e5:d6:5d:8d:c6:5e:75:81:4b: 91:36:10:1b:63:86:25:2e:fd:54:c9:04:31:bc:a4: 70:67:38:18:f9:a1:f8:1f:fe:8a:71:ce:7c:39:d3: cb:bd:09:30:2a:c0:ce:c8:05:5b:5c:03:68:da:41: 8b:3e:f8:11:de:89:4a:6a:31:fa:01:76:41:1a:4d: 01:0e:96:a8:b2:b4:ee:f0:41:78:ae:15:95:4b:38: b0:43:17:01:82:39:e5:dd:67:23:b5:a3:d2:52:db: c2:11:25:fe:4f:8a:4c:b1:1d:33:56:cb:af:5b:d0: 62:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E2:70:5B:92:F4:2E:EA:64:F3:66:55:B5:E6:34:B9:22:42:10:A0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HeJwW5L0Lupk82ZVteY0uSJCEKA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.80.0/22 Signature Algorithm: sha256WithRSAEncryption d3:fc:15:ed:d9:a7:b5:8a:bb:79:6e:ba:84:c4:97:eb:7d:39: e7:2c:84:ee:5c:8d:36:19:69:b3:04:9f:ef:f7:06:e6:ab:3c: 4f:09:7f:e5:4c:95:c8:4d:7d:e8:87:ba:ac:eb:90:26:18:91: b8:5a:dc:65:8b:62:21:4f:92:47:7e:71:f3:4d:2f:86:2b:46: 46:df:50:62:90:b2:ae:f5:06:2d:1a:73:72:64:2e:63:28:3a: 68:90:55:62:02:eb:b4:aa:80:90:0e:3a:27:3a:0a:f8:95:b2: fd:87:60:c8:38:09:ec:1f:eb:fd:e3:d6:b9:03:f4:0c:7c:2d: ea:ea:e6:a3:c5:dc:98:40:e6:6e:b9:fc:1d:47:49:85:96:fc: 14:43:f4:f7:60:7d:3a:b6:d4:ef:a5:a5:e8:88:86:d3:4f:ac: db:4d:55:fb:00:47:12:2e:e8:0e:3d:a7:0e:4c:59:bc:95:29: e8:90:67:52:63:27:ec:22:ea:8d:30:bd:4a:da:06:d7:70:2d: e2:3e:69:44:9e:e5:4d:38:b1:25:fe:89:19:e8:ca:b4:91:4a: 7d:06:0a:87:66:db:39:a4:cb:92:bd:2e:b8:89:5d:a5:32:b4: 71:25:76:60:c5:13:ab:27:ba:f7:9d:83:70:54:12:23:cf:da: 02:8e:6b:e8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjEzNTRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFERTI3MDVCOTJGNDJF RUE2NEYzNjY1NUI1RTYzNEI5MjI0MjEwQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDn+gFpMoR260W1N0C0vpx9wMVygA1M42iTaeTGAky6VzniMLMS CnImt6Ml830n4PhC4EHI45pY7fAWAgiTwkTU5eX5JSsR6zhu14RRblGY4uJTlR5C 6ZGBHornrhBhmhDoi9JdG6dZaXwUrfXKLvTXPvKMk+EhI6c4DychJg0GpZYDoc23 dM2EjnCPL+XWXY3GXnWBS5E2EBtjhiUu/VTJBDG8pHBnOBj5ofgf/opxznw508u9 CTAqwM7IBVtcA2jaQYs++BHeiUpqMfoBdkEaTQEOlqiytO7wQXiuFZVLOLBDFwGC OeXdZyO1o9JS28IRJf5PikyxHTNWy69b0GKtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHeJwW5L0Lupk82ZVteY0uSJCEKAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hlSndXNUwwTHVwazgyWlZ0ZVkwdVNKQ0VLQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc0lAwDQYJKoZIhvcNAQELBQADggEBANP8Fe3Zp7WKu3luuoTEl+t9Oecs hO5cjTYZabMEn+/3BuarPE8Jf+VMlchNfeiHuqzrkCYYkbha3GWLYiFPkkd+cfNN L4YrRkbfUGKQsq71Bi0ac3JkLmMoOmiQVWIC67SqgJAOOic6CviVsv2HYMg4Cewf 6/3j1rkD9Ax8Lerq5qPF3JhA5m65/B1HSYWW/BRD9PdgfTq21O+lpeiIhtNPrNtN VfsARxIu6A49pw5MWbyVKeiQZ1JjJ+wi6o0wvUraBtdwLeI+aUSe5U04sSX+iRno yrSRSn0GCodm2zmky5K9LriJXaUytHEldmDFE6snuvedg3BUEiPP2gKOa+g= -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:38 2025 by rpki-client