$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MOgWHoX2Rie6SAxcKn8rE139UWE.roa File: MOgWHoX2Rie6SAxcKn8rE139UWE.roa (raw, json) Hash identifier: l34kVbG4cYzsYOvyxRqdkvvi9k/Z6XIyyvRd9v/IHIY= Subject key identifier: 30:E8:16:1E:85:F6:46:27:BA:48:0C:5C:2A:7F:2B:13:5D:FD:51:61 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C71 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MOgWHoX2Rie6SAxcKn8rE139UWE.roa Signing time: Tue 01 Apr 2025 02:00:34 +0000 ROA not before: Tue 01 Apr 2025 02:00:34 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.73.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3185 (0xc71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:00:34 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=30E8161E85F64627BA480C5C2A7F2B135DFD5161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c6:37:ce:b2:5f:c6:d6:9d:2f:ce:6b:a1:65: d4:03:6d:12:07:66:81:7a:eb:a7:f0:5f:68:10:b1: 1c:26:94:cc:ce:68:4f:40:e9:39:ef:ee:87:2e:b0: ed:3f:1f:09:72:74:83:2f:d2:5a:5f:e8:f4:a8:0c: 7f:34:11:60:c2:e2:00:24:bd:e0:4a:bf:2d:f5:1f: a9:b1:73:17:33:c3:eb:aa:18:44:89:2c:1b:d8:2c: 2e:4d:d8:37:31:d4:5a:92:bf:01:be:40:63:5d:13: 76:8c:3d:d3:d4:ea:91:6c:89:e5:13:ef:85:f7:17: 99:3e:b2:b9:7d:8e:88:ee:4f:8a:b0:8f:21:22:72: c2:84:65:50:5c:20:ed:fa:d7:12:8b:78:43:5d:ed: 83:01:fc:cf:ba:9a:5f:43:5a:8b:75:2f:37:05:52: cc:fa:e1:0c:d0:f1:dc:f9:26:9e:28:ad:09:d4:34: d3:f8:04:af:b4:c5:84:f6:24:9f:f4:ab:91:9f:e8: 8e:44:47:fa:bf:f7:46:16:6e:06:50:37:20:0d:da: cc:a2:02:42:73:b5:16:06:63:15:f4:4f:e3:ba:69: 37:8e:ff:d0:cb:d8:ec:ee:15:4a:63:8e:2a:c1:e4: f1:82:3a:ac:5e:b8:8c:8e:a8:4b:bf:31:66:d5:f0: 2d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E8:16:1E:85:F6:46:27:BA:48:0C:5C:2A:7F:2B:13:5D:FD:51:61 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MOgWHoX2Rie6SAxcKn8rE139UWE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.64.0/21 Signature Algorithm: sha256WithRSAEncryption 89:67:3e:e5:ca:01:ea:72:58:9f:b4:f1:08:5e:3a:11:5c:d1: 50:d7:4b:3b:04:a6:f8:40:c4:63:d4:a9:4e:c9:f1:f0:25:76: 36:6d:f8:71:7a:4d:9c:ee:1d:cc:96:37:97:27:11:db:39:cc: 5e:0a:d6:3b:ef:f4:34:98:d3:40:6c:a7:65:f0:bc:5b:29:6a: af:77:c3:46:0c:a2:4b:3f:3e:40:17:30:18:0f:b9:16:d1:48: a1:58:1e:85:8d:5d:92:ad:11:20:2d:39:f3:f4:4b:ce:99:ca: f9:0f:94:90:20:51:86:da:50:f9:a3:1a:a8:32:17:ff:07:e8: f7:d2:23:e2:b4:0a:b6:7b:c4:35:99:68:56:71:38:e5:29:df: 91:e3:ae:f7:56:4c:f9:27:30:01:e0:38:8c:d0:fa:91:27:e7: 9f:a5:44:be:98:80:70:0e:f6:5d:3f:1a:16:97:bd:f2:4e:14: 5f:46:79:fc:4f:68:e4:62:ac:2d:73:7a:43:af:e1:ec:2e:da: 3d:db:31:1d:54:da:6a:77:a2:58:f6:39:91:85:7c:89:ef:6e: 21:c9:0f:b7:a9:dc:31:65:35:aa:e5:7e:51:ec:28:1f:29:e9: 8d:1a:95:0a:6f:14:9c:ff:49:ed:ed:98:f2:21:26:d3:dd:81: 47:a2:c9:9c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDHEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAwMzRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMwRTgxNjFFODVGNjQ2 MjdCQTQ4MEM1QzJBN0YyQjEzNURGRDUxNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaxjfOsl/G1p0vzmuhZdQDbRIHZoF666fwX2gQsRwmlMzOaE9A 6Tnv7ocusO0/HwlydIMv0lpf6PSoDH80EWDC4gAkveBKvy31H6mxcxczw+uqGESJ LBvYLC5N2Dcx1FqSvwG+QGNdE3aMPdPU6pFsieUT74X3F5k+srl9jojuT4qwjyEi csKEZVBcIO361xKLeENd7YMB/M+6ml9DWot1LzcFUsz64QzQ8dz5Jp4orQnUNNP4 BK+0xYT2JJ/0q5Gf6I5ER/q/90YWbgZQNyAN2syiAkJztRYGYxX0T+O6aTeO/9DL 2OzuFUpjjirB5PGCOqxeuIyOqEu/MWbV8C0TAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMOgWHoX2Rie6SAxcKn8rE139UWEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L01PZ1dIb1gyUmllNlNBeGNLbjhyRTEzOVVXRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBSUAwDQYJKoZIhvcNAQELBQADggEBAIlnPuXKAepyWJ+08QheOhFc0VDX SzsEpvhAxGPUqU7J8fAldjZt+HF6TZzuHcyWN5cnEds5zF4K1jvv9DSY00Bsp2Xw vFspaq93w0YMoks/PkAXMBgPuRbRSKFYHoWNXZKtESAtOfP0S86ZyvkPlJAgUYba UPmjGqgyF/8H6PfSI+K0CrZ7xDWZaFZxOOUp35HjrvdWTPknMAHgOIzQ+pEn55+l RL6YgHAO9l0/GhaXvfJOFF9GefxPaORirC1zekOv4ewu2j3bMR1U2mp3olj2OZGF fInvbiHJD7ep3DFlNarlflHsKB8p6Y0alQpvFJz/Se3tmPIhJtPdgUeiyZw= -----END CERTIFICATE-----Generated at Sat Apr 5 17:48:13 2025 by rpki-client