$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/L1Kqwa3XXE9TlXR5zp3YNUBRYqU.roa File: L1Kqwa3XXE9TlXR5zp3YNUBRYqU.roa (raw, json) Hash identifier: WSRKDbYmNOj1cIWmsvmiIQLeKaKz6dmG5zmYKVlLdK8= Subject key identifier: 2F:52:AA:C1:AD:D7:5C:4F:53:95:74:79:CE:9D:D8:35:40:51:62:A5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D78 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L1Kqwa3XXE9TlXR5zp3YNUBRYqU.roa Signing time: Tue 01 Apr 2025 02:19:27 +0000 ROA not before: Tue 01 Apr 2025 02:19:27 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3448 (0xd78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:27 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=2F52AAC1ADD75C4F53957479CE9DD835405162A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dd:ed:a4:d2:b4:6d:c6:64:3a:e8:48:e0:ad: a9:e1:3a:f8:e7:b3:ec:f7:f9:80:b0:4b:fc:d2:31: b7:64:c3:46:90:8b:20:f6:c5:a6:46:aa:13:80:44: 83:cd:e0:5a:8d:bf:39:2b:41:90:7b:33:39:20:a7: fb:99:39:39:5c:91:1f:66:dd:2a:3a:d8:e0:74:cf: c3:b8:12:c3:59:eb:05:c7:7f:1a:71:be:78:cc:fb: ba:46:c3:ea:2d:b9:88:20:57:e5:f4:d8:b7:70:7c: fb:18:6e:7d:45:d1:74:b6:53:50:c6:32:de:3d:10: 69:44:14:0c:c2:08:1c:74:0a:df:81:41:88:5e:74: 92:f4:ed:aa:da:35:52:3f:9d:22:6d:ce:34:b6:42: 6e:0b:2c:0f:de:4c:9a:0a:d1:26:f5:e0:e5:6b:19: 74:47:0e:fc:f7:ed:5d:92:f9:de:94:73:ca:17:fc: e8:a6:ed:45:1f:71:6a:87:93:6b:3f:51:49:23:ad: 65:e1:ca:2c:a6:fc:52:9e:83:31:4d:68:f7:71:a6: 58:65:b7:df:3d:5a:9a:fd:c9:ae:b7:96:9a:a9:5c: 4a:00:31:c0:54:05:2d:2f:19:56:c3:b6:fc:87:fe: e1:de:b2:b5:61:50:fa:b9:9a:06:45:ac:7d:87:ae: 32:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:52:AA:C1:AD:D7:5C:4F:53:95:74:79:CE:9D:D8:35:40:51:62:A5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L1Kqwa3XXE9TlXR5zp3YNUBRYqU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.36.0/22 Signature Algorithm: sha256WithRSAEncryption 93:35:d8:a3:2f:c7:f2:4a:ea:14:4c:86:dd:b4:c1:4e:e8:c9: 9b:bd:e2:b1:fe:c4:ea:0b:d8:59:2e:ea:1b:2b:9c:0f:19:94: 12:9c:73:ac:92:56:ae:44:17:8a:60:49:ed:ca:87:e6:56:c3: 7f:93:54:ab:20:3f:aa:58:53:17:a3:7a:eb:b7:95:0a:7c:b9: 71:1a:c2:6c:e6:97:43:5e:a9:fd:f3:4a:4a:65:6c:13:55:ca: 75:d1:90:18:61:29:34:b4:db:e6:c2:bc:58:c5:cb:e3:8e:38: dc:29:5c:b0:21:23:ec:47:c7:a8:c5:de:18:a4:31:8f:bd:36: ce:a1:2c:ca:4a:fe:db:5f:78:bc:5b:c0:f8:1a:a5:50:0f:a0: 42:7f:9f:78:81:4e:40:d6:17:d7:22:22:78:39:12:0b:ca:14: 29:3a:95:55:ca:bb:a8:b6:3b:69:f7:30:a1:bc:b7:d4:27:ef: 20:59:30:9b:42:14:b9:74:5b:40:9c:26:12:ba:d1:18:28:9e: 84:ac:fb:44:6b:68:22:a3:7e:02:d9:ef:45:22:c5:ef:ba:e0: 4f:6b:0d:8e:ba:02:63:29:59:b2:d8:05:43:3f:f0:88:b0:c1: c2:40:f8:6a:f7:d6:fd:04:a8:bd:c7:c8:bf:c3:3f:cf:21:1a: 10:ca:73:e4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MjdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJGNTJBQUMxQURENzVD NEY1Mzk1NzQ3OUNFOUREODM1NDA1MTYyQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb3e2k0rRtxmQ66EjgranhOvjns+z3+YCwS/zSMbdkw0aQiyD2 xaZGqhOARIPN4FqNvzkrQZB7Mzkgp/uZOTlckR9m3So62OB0z8O4EsNZ6wXHfxpx vnjM+7pGw+otuYggV+X02LdwfPsYbn1F0XS2U1DGMt49EGlEFAzCCBx0Ct+BQYhe dJL07araNVI/nSJtzjS2Qm4LLA/eTJoK0Sb14OVrGXRHDvz37V2S+d6Uc8oX/Oim 7UUfcWqHk2s/UUkjrWXhyiym/FKegzFNaPdxplhlt989Wpr9ya63lpqpXEoAMcBU BS0vGVbDtvyH/uHesrVhUPq5mgZFrH2HrjKpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUL1Kqwa3XXE9TlXR5zp3YNUBRYqUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0wxS3F3YTNYWEU5VGxYUjV6cDNZTlVCUllxVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTyQwDQYJKoZIhvcNAQELBQADggEBAJM12KMvx/JK6hRMht20wU7oyZu9 4rH+xOoL2Fku6hsrnA8ZlBKcc6ySVq5EF4pgSe3Kh+ZWw3+TVKsgP6pYUxejeuu3 lQp8uXEawmzml0Neqf3zSkplbBNVynXRkBhhKTS02+bCvFjFy+OOONwpXLAhI+xH x6jF3hikMY+9Ns6hLMpK/ttfeLxbwPgapVAPoEJ/n3iBTkDWF9ciIng5EgvKFCk6 lVXKu6i2O2n3MKG8t9Qn7yBZMJtCFLl0W0CcJhK60RgonoSs+0RraCKjfgLZ70Ui xe+64E9rDY66AmMpWbLYBUM/8IiwwcJA+Gr31v0EqL3HyL/DP88hGhDKc+Q= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:09 2025 by rpki-client