$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/R5u91oNedQQfb-FWpf4x0qT_z2Y.roa File: R5u91oNedQQfb-FWpf4x0qT_z2Y.roa (raw, json) Hash identifier: nz0MarThB97UvcwMc7fkd/AWopdlBdyX8y0383ubUhI= Subject key identifier: 47:9B:BD:D6:83:5E:75:04:1F:6F:E1:56:A5:FE:31:D2:A4:FF:CF:66 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DCB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/R5u91oNedQQfb-FWpf4x0qT_z2Y.roa Signing time: Tue 01 Apr 2025 02:27:18 +0000 ROA not before: Tue 01 Apr 2025 02:27:18 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 14:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3531 (0xdcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:18 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=479BBDD6835E75041F6FE156A5FE31D2A4FFCF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:40:9d:46:ca:b4:51:2a:c6:fc:66:db:b2: 36:3a:6b:77:f0:81:f1:e9:5f:e2:6f:78:38:80:0a: a4:b1:04:e5:ef:88:7e:91:3e:32:8a:90:7d:c8:57: 58:27:b4:e5:94:2f:0e:f3:e9:3f:46:ac:51:8f:86: 29:38:8a:33:f1:bf:78:b7:ef:c7:a4:37:d2:e5:91: 45:e2:1f:b6:ce:7f:7e:ce:12:7e:fd:2f:31:4b:5b: 5d:cd:bb:e1:38:d6:a9:ca:a2:cf:16:2d:56:64:03: df:59:bf:56:95:4b:bb:45:32:de:9a:6f:6b:4f:d0: 9a:6d:ee:48:76:af:ec:00:f5:f5:7e:9b:61:68:76: ff:de:19:7d:72:0b:b8:e7:fd:19:d1:31:c8:2b:ed: 5a:3d:e2:78:51:0f:09:38:51:db:02:50:ce:5c:78: ca:43:8b:aa:4a:b8:51:e0:2d:99:cd:0f:e0:36:f6: c0:ba:f9:3c:5f:7b:af:53:51:e6:c8:db:ab:5e:88: 2e:68:92:f4:4f:8b:0f:30:eb:5a:2e:0e:51:06:26: af:eb:f4:2f:97:2c:06:94:b5:8b:fe:27:b2:58:4b: 43:ce:28:b0:4c:f2:47:1a:09:3d:77:2d:3d:ad:f5: 42:9a:fa:1a:76:95:d4:1b:ea:35:d1:46:7d:a1:be: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9B:BD:D6:83:5E:75:04:1F:6F:E1:56:A5:FE:31:D2:A4:FF:CF:66 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/R5u91oNedQQfb-FWpf4x0qT_z2Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.104.0/21 Signature Algorithm: sha256WithRSAEncryption 55:4b:c8:98:f1:e6:70:8d:09:74:59:86:84:5a:5b:88:c1:9a: 40:c2:f3:2e:e8:42:43:5f:6e:93:08:9d:59:b3:09:cb:cb:f1: e2:21:f6:2e:45:55:7c:b0:b7:eb:59:fd:3c:d2:c1:2a:81:59: e3:b6:13:6c:f3:db:46:68:f2:1b:b5:87:f4:c9:31:38:bf:9f: 4b:ee:28:35:6f:96:e9:e4:83:18:74:11:d7:3a:e2:8b:63:7d: 2d:fa:0d:dc:23:cb:a0:58:2a:e5:23:75:b4:1f:30:9a:bc:ca: 6b:35:57:4d:8d:be:b1:73:77:15:fd:07:25:a0:56:2e:d2:0a: 14:5a:ea:ee:62:37:6e:83:7d:5f:34:da:66:6c:ea:72:27:81: 1b:fc:1f:c0:3f:67:63:99:e9:98:68:4d:8d:20:79:03:25:37: d0:b1:bd:d4:0f:0d:75:25:e4:54:c7:29:6f:b9:cd:60:39:65: 21:23:f2:dc:8f:f7:1d:0e:b9:a7:ff:dc:58:be:59:9e:2e:25: 5f:ab:fc:f8:bf:af:eb:eb:e2:4e:43:9a:3f:9a:01:87:1d:71: c8:45:ff:a5:2d:a7:c7:3f:31:ba:64:4e:32:e2:1c:02:aa:56: 94:7f:80:38:c3:8c:f0:65:8e:08:38:b4:0e:b3:6f:53:a5:2a: 7c:4e:e8:4e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDcswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MThaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ3OUJCREQ2ODM1RTc1 MDQxRjZGRTE1NkE1RkUzMUQyQTRGRkNGNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC44UCdRsq0USrG/GbbsjY6a3fwgfHpX+JveDiACqSxBOXviH6R PjKKkH3IV1gntOWULw7z6T9GrFGPhik4ijPxv3i378ekN9LlkUXiH7bOf37OEn79 LzFLW13Nu+E41qnKos8WLVZkA99Zv1aVS7tFMt6ab2tP0Jpt7kh2r+wA9fV+m2Fo dv/eGX1yC7jn/RnRMcgr7Vo94nhRDwk4UdsCUM5ceMpDi6pKuFHgLZnND+A29sC6 +Txfe69TUebI26teiC5okvRPiw8w61ouDlEGJq/r9C+XLAaUtYv+J7JYS0POKLBM 8kcaCT13LT2t9UKa+hp2ldQb6jXRRn2hvrwXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUR5u91oNedQQfb+FWpf4x0qT/z2YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1I1dTkxb05lZFFRZmItRldwZjR4MHFUX3oyWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBT2gwDQYJKoZIhvcNAQELBQADggEBAFVLyJjx5nCNCXRZhoRaW4jBmkDC 8y7oQkNfbpMInVmzCcvL8eIh9i5FVXywt+tZ/TzSwSqBWeO2E2zz20Zo8hu1h/TJ MTi/n0vuKDVvlunkgxh0Edc64otjfS36Ddwjy6BYKuUjdbQfMJq8yms1V02NvrFz dxX9ByWgVi7SChRa6u5iN26DfV802mZs6nIngRv8H8A/Z2OZ6ZhoTY0geQMlN9Cx vdQPDXUl5FTHKW+5zWA5ZSEj8tyP9x0Ouaf/3Fi+WZ4uJV+r/Pi/r+vr4k5Dmj+a AYcdcchF/6Utp8c/MbpkTjLiHAKqVpR/gDjDjPBljgg4tA6zb1OlKnxO6E4= -----END CERTIFICATE-----Generated at Fri Apr 11 13:04:28 2025 by rpki-client