$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VLSbKjLlfO5BnreIgwnM69sfcQ0.roa File: VLSbKjLlfO5BnreIgwnM69sfcQ0.roa (raw, json) Hash identifier: R/N3UoCd94SiyJU9Y9hSlpHQ4n4TTNUdoB/T7W2R9/g= Subject key identifier: 54:B4:9B:2A:32:E5:7C:EE:41:9E:B7:88:83:09:CC:EB:DB:1F:71:0D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E37 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VLSbKjLlfO5BnreIgwnM69sfcQ0.roa Signing time: Tue 01 Apr 2025 02:33:37 +0000 ROA not before: Tue 01 Apr 2025 02:33:37 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3639 (0xe37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:33:37 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=54B49B2A32E57CEE419EB7888309CCEBDB1F710D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:18:91:4b:cf:9f:c2:c0:b0:12:41:46:43:a6: 2a:4a:e7:12:19:24:fb:a1:e6:e7:c3:a5:5c:b5:a8: 6d:63:3d:24:0e:d4:df:8f:64:d3:e9:87:f7:43:18: a8:f4:b6:92:d7:95:fb:fd:d0:0d:b1:a9:df:6d:14: b2:46:d3:2a:77:08:88:ed:1a:99:66:a9:20:44:c7: 8c:35:9b:0e:18:b2:31:a6:d9:ca:6a:5c:af:63:38: 23:e6:6c:f8:b6:07:52:13:cd:a6:a0:37:b5:92:47: 64:48:4f:f5:51:b1:46:55:9c:01:b3:5d:da:c9:29: 6a:a6:0b:f1:15:a9:da:d2:db:7c:2b:3f:ff:4c:54: 89:a1:f6:21:ba:75:00:05:17:8a:a1:2b:44:e5:4e: d0:68:7d:f3:ee:aa:df:24:a1:b0:1b:c9:0f:ad:61: 65:a7:e2:d8:bf:13:a4:4b:06:ba:5a:8c:c0:34:b0: f7:ba:57:be:17:92:dc:8f:4f:e3:36:cc:65:60:fd: f6:f2:14:60:aa:08:8d:27:9f:9f:d4:94:9a:6d:6b: 0e:4e:2d:ae:41:7d:79:7f:15:7f:af:75:5f:cb:59: 8c:f4:b5:c8:d6:54:5e:d2:57:91:4a:12:2d:3a:bc: f3:43:aa:79:e2:a2:1e:67:64:e2:d7:da:8d:60:b7: a1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B4:9B:2A:32:E5:7C:EE:41:9E:B7:88:83:09:CC:EB:DB:1F:71:0D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VLSbKjLlfO5BnreIgwnM69sfcQ0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.248.0/21 Signature Algorithm: sha256WithRSAEncryption 77:84:1d:32:35:b5:f9:d5:0c:a4:d6:06:a3:33:ec:07:9d:55: 97:36:81:dd:0a:69:26:16:86:8b:04:81:af:93:6b:01:45:2e: 37:d2:a7:65:5b:63:3d:45:38:bc:ff:50:a3:c5:61:63:3a:e4: aa:12:44:a7:87:e4:32:c4:72:d2:14:a4:68:3e:18:34:4e:13: 40:bb:0e:da:13:a8:ce:b2:03:34:77:7e:77:5f:8f:85:7e:3f: e0:73:4c:06:09:75:57:8a:96:34:c5:76:94:c9:9d:13:94:67: c3:84:39:36:b9:62:78:f2:29:12:8e:d7:70:3b:d7:2c:21:e5: ef:87:94:14:7e:a9:e8:21:68:02:ad:79:32:59:3e:fe:b2:70: 0e:8d:e3:39:f0:ca:e4:88:c6:4f:6d:79:d8:4a:e9:92:eb:39: b6:78:7b:6a:ef:b4:1f:a8:c9:45:32:c8:3c:a0:f3:ba:9d:87: 4c:ab:a8:9b:27:7b:d5:ff:49:3c:fe:c0:e3:23:73:60:09:02: f1:4b:18:0b:dc:8c:ce:d7:d9:83:2d:a3:e2:d0:65:49:59:95: ce:8b:2b:91:9c:c8:95:db:f1:c1:2b:51:03:b5:57:08:48:08: 82:e3:c4:c5:cd:93:c9:e5:6a:7a:67:cd:47:c1:4c:58:0c:e9: 20:71:65:7a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMzMzdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU0QjQ5QjJBMzJFNTdD RUU0MTlFQjc4ODgzMDlDQ0VCREIxRjcxMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3GJFLz5/CwLASQUZDpipK5xIZJPuh5ufDpVy1qG1jPSQO1N+P ZNPph/dDGKj0tpLXlfv90A2xqd9tFLJG0yp3CIjtGplmqSBEx4w1mw4YsjGm2cpq XK9jOCPmbPi2B1ITzaagN7WSR2RIT/VRsUZVnAGzXdrJKWqmC/EVqdrS23wrP/9M VImh9iG6dQAFF4qhK0TlTtBoffPuqt8kobAbyQ+tYWWn4ti/E6RLBrpajMA0sPe6 V74XktyPT+M2zGVg/fbyFGCqCI0nn5/UlJptaw5OLa5BfXl/FX+vdV/LWYz0tcjW VF7SV5FKEi06vPNDqnnioh5nZOLX2o1gt6G5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVLSbKjLlfO5BnreIgwnM69sfcQ0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ZMU2JLakxsZk81Qm5yZUlnd25NNjlzZmNRMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBS/gwDQYJKoZIhvcNAQELBQADggEBAHeEHTI1tfnVDKTWBqMz7AedVZc2 gd0KaSYWhosEga+TawFFLjfSp2VbYz1FOLz/UKPFYWM65KoSRKeH5DLEctIUpGg+ GDROE0C7DtoTqM6yAzR3fndfj4V+P+BzTAYJdVeKljTFdpTJnROUZ8OEOTa5Ynjy KRKO13A71ywh5e+HlBR+qeghaAKteTJZPv6ycA6N4znwyuSIxk9tedhK6ZLrObZ4 e2rvtB+oyUUyyDyg87qdh0yrqJsne9X/STz+wOMjc2AJAvFLGAvcjM7X2YMto+LQ ZUlZlc6LK5GcyJXb8cErUQO1VwhICILjxMXNk8nlanpnzUfBTFgM6SBxZXo= -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:34 2025 by rpki-client