$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Nx9cb6poaFsOzxquGAMJdBZzF-E.roa File: Nx9cb6poaFsOzxquGAMJdBZzF-E.roa (raw, json) Hash identifier: DYK6mK1o5JXEIMcZGrk8u8auw/X/Nmqsj5vCF0tvh5I= Subject key identifier: 37:1F:5C:6F:AA:68:68:5B:0E:CF:1A:AE:18:03:09:74:16:73:17:E1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E11 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Nx9cb6poaFsOzxquGAMJdBZzF-E.roa Signing time: Tue 01 Apr 2025 02:31:30 +0000 ROA not before: Tue 01 Apr 2025 02:31:30 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.67.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3601 (0xe11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:31:30 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=371F5C6FAA68685B0ECF1AAE18030974167317E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:e0:f5:33:5e:18:5d:b7:d0:20:84:09:ec: 95:b4:a1:ad:bb:01:6d:96:00:6b:5a:ce:93:4a:32: 33:24:e5:0e:05:f7:db:14:7e:13:72:91:33:0b:9e: 3f:dc:cc:6a:ca:62:a2:3c:30:18:1f:10:b3:4e:cf: c1:03:4a:ac:60:9e:08:d7:03:09:25:8a:a4:8c:40: 24:08:28:93:63:cb:9e:5d:70:79:22:fa:6c:7a:ae: 1e:ae:c6:97:bb:1f:99:2e:45:f6:33:d7:fe:f5:a1: 68:e1:bd:1f:8d:b3:fb:dd:ae:b1:ef:d0:a5:f1:83: d2:26:37:e7:76:5b:e1:bd:6f:bb:fa:63:95:01:25: fb:99:aa:ed:ce:d1:70:40:d6:e4:73:cf:9a:ee:ae: 6f:1d:c1:67:2a:a1:d3:2e:3a:6c:4e:a4:0b:ff:e4: 6f:97:a7:38:9b:e6:07:11:77:a3:3e:3f:2a:68:e4: 01:8c:58:0c:d6:c2:13:9d:ba:7b:a9:99:a8:56:3f: b2:78:8a:f0:d2:49:d6:73:f6:e5:c4:44:fd:12:60: a2:14:9d:4d:d6:e4:eb:e6:65:c9:aa:61:3c:bd:2e: cb:8f:f4:2d:4d:2f:cf:52:4f:25:09:24:82:2f:04: 33:8c:51:55:53:3a:a5:4d:0b:c6:12:32:89:ea:a0: fe:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1F:5C:6F:AA:68:68:5B:0E:CF:1A:AE:18:03:09:74:16:73:17:E1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Nx9cb6poaFsOzxquGAMJdBZzF-E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.236.0/23 Signature Algorithm: sha256WithRSAEncryption b5:e7:b6:c4:a4:e4:1e:d2:43:a1:e1:32:88:a3:8b:8d:ad:10: e1:10:df:55:28:f1:67:35:6f:ed:18:15:32:45:a0:64:81:19: fb:f5:7f:06:c7:0b:4e:7b:bd:07:80:8a:b9:34:ee:be:a2:cb: dc:90:f2:94:59:f3:01:c1:d8:c5:ab:0d:a8:7f:ad:b8:b0:cd: 1b:83:f6:db:9b:01:99:49:33:32:c1:52:3e:a5:47:94:71:d3: 10:1d:3a:e0:6c:33:cc:73:df:61:fb:bd:9e:2a:9f:09:3c:51: fb:3a:7c:01:8b:f2:d1:90:23:83:42:be:00:4b:4e:f3:e8:9a: 7e:59:a7:09:87:b8:81:ca:9e:22:0a:7f:f1:98:15:a1:e3:7b: 41:0d:1c:43:79:0a:7a:bb:e1:34:d8:c9:e9:7b:98:3b:27:39: 9a:f4:0b:d4:c6:61:f0:7f:e7:3e:8f:e2:c9:5d:ed:eb:96:10: 2c:67:ec:5c:94:88:29:2b:b6:0d:26:a0:9b:d0:12:01:b1:13: 51:9d:4f:2d:a9:8c:c2:5e:ab:fb:47:e6:bd:85:b8:5d:fb:b0: 9a:d5:f9:89:7d:7c:be:e6:d2:3f:cd:8a:19:da:ff:1c:4a:85: 5e:ef:b2:c2:0c:9e:4a:af:e2:aa:1f:54:ab:40:07:ef:3f:96: a1:aa:66:61 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDhEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMxMzBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM3MUY1QzZGQUE2ODY4 NUIwRUNGMUFBRTE4MDMwOTc0MTY3MzE3RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEwuD1M14YXbfQIIQJ7JW0oa27AW2WAGtazpNKMjMk5Q4F99sU fhNykTMLnj/czGrKYqI8MBgfELNOz8EDSqxgngjXAwkliqSMQCQIKJNjy55dcHki +mx6rh6uxpe7H5kuRfYz1/71oWjhvR+Ns/vdrrHv0KXxg9ImN+d2W+G9b7v6Y5UB JfuZqu3O0XBA1uRzz5rurm8dwWcqodMuOmxOpAv/5G+Xpzib5gcRd6M+Pypo5AGM WAzWwhOdunupmahWP7J4ivDSSdZz9uXERP0SYKIUnU3W5OvmZcmqYTy9LsuP9C1N L89STyUJJIIvBDOMUVVTOqVNC8YSMonqoP5XAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNx9cb6poaFsOzxquGAMJdBZzF+EwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L054OWNiNnBvYUZzT3p4cXVHQU1KZEJaekYtRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQ+wwDQYJKoZIhvcNAQELBQADggEBALXntsSk5B7SQ6HhMoiji42tEOEQ 31Uo8Wc1b+0YFTJFoGSBGfv1fwbHC057vQeAirk07r6iy9yQ8pRZ8wHB2MWrDah/ rbiwzRuD9tubAZlJMzLBUj6lR5Rx0xAdOuBsM8xz32H7vZ4qnwk8Ufs6fAGL8tGQ I4NCvgBLTvPomn5ZpwmHuIHKniIKf/GYFaHje0ENHEN5Cnq74TTYyel7mDsnOZr0 C9TGYfB/5z6P4sld7euWECxn7FyUiCkrtg0moJvQEgGxE1GdTy2pjMJeq/tH5r2F uF37sJrV+Yl9fL7m0j/Nihna/xxKhV7vssIMnkqv4qofVKtAB+8/lqGqZmE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:30:59 2025 by rpki-client