$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TnY3OG5HPHzWv_1QqMKcPZ3w1S4.roa File: TnY3OG5HPHzWv_1QqMKcPZ3w1S4.roa (raw, json) Hash identifier: m66JiSNJTdcBSCH/DmiT2vU0uonHPU/FUKak4iRQxO8= Subject key identifier: 4E:76:37:38:6E:47:3C:7C:D6:BF:FD:50:A8:C2:9C:3D:9D:F0:D5:2E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DD9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TnY3OG5HPHzWv_1QqMKcPZ3w1S4.roa Signing time: Tue 01 Apr 2025 02:27:25 +0000 ROA not before: Tue 01 Apr 2025 02:27:25 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 110.163.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3545 (0xdd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:25 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=4E7637386E473C7CD6BFFD50A8C29C3D9DF0D52E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:82:5c:a1:00:ab:3c:f4:53:2e:9a:6f:48: 8a:07:79:dd:91:8d:3f:67:5a:d5:83:68:3e:9f:04: f2:5d:b6:2d:79:29:da:93:d8:e0:2d:a2:4c:97:fc: 02:ce:b1:27:2f:3a:1d:5f:30:dd:a3:42:67:06:53: 62:3c:da:5f:94:38:cc:02:16:92:f1:28:a2:75:98: 83:46:23:28:76:22:dd:39:dd:d2:2f:1f:5e:2f:35: c0:64:ee:24:6f:18:84:52:96:9a:c1:db:22:5f:6f: d3:79:6e:c6:8b:08:3f:1a:be:d0:1c:7f:99:c9:8a: 91:65:20:28:57:25:f1:45:42:8c:16:36:9e:2b:f0: 8f:e3:2e:cf:f2:4e:6b:d8:8a:7d:fb:35:00:5d:d4: 7b:df:9e:70:55:f6:92:0c:a6:b3:d9:27:83:ab:f0: ab:f4:80:4c:d5:eb:de:f6:82:84:46:8c:39:1d:a3: fa:12:b7:92:0c:8f:c6:f6:f8:6e:83:3e:92:d1:99: cb:3a:01:fb:57:c6:76:07:05:21:5b:eb:9e:04:28: 1f:84:99:73:54:68:51:03:05:d3:43:6d:d4:ae:d2: 67:bf:ae:4c:4c:cf:79:ea:75:3b:83:6c:3c:5d:f8: 07:c3:a1:84:7a:19:d0:52:41:3b:a3:18:de:4b:3e: bc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:76:37:38:6E:47:3C:7C:D6:BF:FD:50:A8:C2:9C:3D:9D:F0:D5:2E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TnY3OG5HPHzWv_1QqMKcPZ3w1S4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.163.18.0/24 Signature Algorithm: sha256WithRSAEncryption bc:43:20:26:31:f1:f4:ab:d5:76:b0:5e:1b:fe:6c:9a:ad:d3: ba:d6:29:9a:f0:81:39:a8:84:ca:9f:63:63:6f:47:d0:cf:0c: 82:4e:91:26:15:3d:0d:e2:a6:19:4f:c5:7f:8c:78:2e:bd:78: 6b:69:4d:50:15:ee:7b:c3:59:86:55:be:34:75:ed:e2:b8:9e: a7:20:1e:db:fd:41:0e:c5:5e:47:9a:b0:85:94:03:a6:a2:be: ca:62:7b:a3:45:64:ba:d5:f9:3d:54:21:8b:29:9f:83:cd:49: 0f:a9:41:4c:cd:0e:d0:16:f5:16:a0:2e:df:f5:bd:1d:ae:62: 0b:e0:00:fd:f6:9d:d1:0a:b2:4c:a5:74:78:3a:a9:0e:f6:a6: e5:78:00:e3:1b:cb:aa:0a:ba:cb:8e:17:7e:a4:00:e6:1e:33: 80:d1:db:68:61:9e:1b:b9:bf:b9:01:04:72:e8:47:15:3e:31: c4:04:75:7f:5a:d4:c7:8a:be:64:82:b3:6b:52:39:80:ca:5d: b3:5f:0a:c6:6f:0b:d6:6c:9d:82:c0:6f:38:75:1e:f4:43:07: ec:fa:86:06:9d:d8:ad:0f:1f:28:73:1c:5c:c8:d6:74:c9:82: 9a:16:30:d7:a6:15:72:24:b5:01:18:cc:58:cb:fe:17:7d:47: c0:8d:96:14 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MjVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRFNzYzNzM4NkU0NzND N0NENkJGRkQ1MEE4QzI5QzNEOURGMEQ1MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoYoJcoQCrPPRTLppvSIoHed2RjT9nWtWDaD6fBPJdti15KdqT 2OAtokyX/ALOsScvOh1fMN2jQmcGU2I82l+UOMwCFpLxKKJ1mINGIyh2It053dIv H14vNcBk7iRvGIRSlprB2yJfb9N5bsaLCD8avtAcf5nJipFlIChXJfFFQowWNp4r 8I/jLs/yTmvYin37NQBd1HvfnnBV9pIMprPZJ4Or8Kv0gEzV6972goRGjDkdo/oS t5IMj8b2+G6DPpLRmcs6AftXxnYHBSFb654EKB+EmXNUaFEDBdNDbdSu0me/rkxM z3nqdTuDbDxd+AfDoYR6GdBSQTujGN5LPrxtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTnY3OG5HPHzWv/1QqMKcPZ3w1S4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RuWTNPRzVIUEh6V3ZfMVFxTUtjUFozdzFTNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABuoxIwDQYJKoZIhvcNAQELBQADggEBALxDICYx8fSr1XawXhv+bJqt07rW KZrwgTmohMqfY2NvR9DPDIJOkSYVPQ3iphlPxX+MeC69eGtpTVAV7nvDWYZVvjR1 7eK4nqcgHtv9QQ7FXkeasIWUA6aivspie6NFZLrV+T1UIYspn4PNSQ+pQUzNDtAW 9RagLt/1vR2uYgvgAP32ndEKskyldHg6qQ72puV4AOMby6oKusuOF36kAOYeM4DR 22hhnhu5v7kBBHLoRxU+McQEdX9a1MeKvmSCs2tSOYDKXbNfCsZvC9ZsnYLAbzh1 HvRDB+z6hgad2K0PHyhzHFzI1nTJgpoWMNemFXIktQEYzFjL/hd9R8CNlhQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:21 2025 by rpki-client