$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wy0JteGj0X1JvY3XDBTBdtQZazo.roa File: Wy0JteGj0X1JvY3XDBTBdtQZazo.roa (raw, json) Hash identifier: vgT/skj0kmIlfOoNfdSRk67t8qahMkB+8NINgI6yZlM= Subject key identifier: 5B:2D:09:B5:E1:A3:D1:7D:49:BD:8D:D7:0C:14:C1:76:D4:19:6B:3A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B45 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wy0JteGj0X1JvY3XDBTBdtQZazo.roa Signing time: Thu 06 Mar 2025 07:12:36 +0000 ROA not before: Thu 06 Mar 2025 07:12:36 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2885 (0xb45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 6 07:12:36 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=5B2D09B5E1A3D17D49BD8DD70C14C176D4196B3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:13:48:83:ca:83:f8:a2:0d:c8:2f:9d:fd:f4: 99:e1:e2:ee:bb:c9:c8:10:f9:15:04:fb:e6:be:f5: 75:05:b3:d0:58:2e:f1:6f:3b:b0:43:f0:8a:c7:3e: 0d:ae:66:4c:1f:47:08:66:c6:31:ae:23:f9:4e:62: 51:fb:c6:e4:5c:d4:a5:8d:81:41:f9:12:76:14:e8: 02:68:ed:7a:0a:38:f0:c5:77:1d:e5:67:f3:17:7c: b5:b6:3a:38:43:2e:69:bb:4f:a9:8f:44:5e:f3:17: 25:13:62:9c:47:6f:f1:de:c3:55:a7:9b:be:19:03: 5a:f6:45:ae:69:0a:13:1a:40:13:35:56:7d:86:30: 8e:21:eb:3d:d5:0a:11:8a:79:e0:b6:41:38:5e:7c: da:4e:e9:ae:d7:a3:d4:06:ae:64:c2:27:39:1e:c4: dc:24:13:61:40:be:7a:1b:ce:43:69:59:96:b0:0d: c5:28:2d:6d:8c:ed:7c:f4:cc:68:8f:9f:80:eb:ec: f8:81:e7:88:d0:5e:0c:db:c7:0d:4f:ac:5a:86:d7: 9f:69:f0:8d:ae:44:f9:6c:79:26:19:7e:a3:c2:8b: f3:03:b1:33:9d:fa:5a:c0:6f:aa:a0:95:de:32:17: 90:f0:43:81:62:f5:f8:c2:ed:13:3d:bb:26:aa:08: 1c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2D:09:B5:E1:A3:D1:7D:49:BD:8D:D7:0C:14:C1:76:D4:19:6B:3A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wy0JteGj0X1JvY3XDBTBdtQZazo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.144.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:0d:39:73:c2:74:ce:eb:aa:a8:08:9e:8c:b2:86:23:eb:5d: 35:df:3e:f0:6f:da:9b:be:bf:14:11:3e:e6:12:cd:c3:b6:c6: 05:31:de:9b:65:46:f2:56:12:d3:af:bd:a6:d4:2e:d8:b4:47: 23:4d:b1:ef:4f:24:de:35:08:39:ab:9d:39:51:fe:74:18:b2: 11:2f:8c:08:64:1f:cd:58:5b:d3:a8:42:0c:70:b3:f1:19:65: 37:69:c4:79:c5:2a:ff:d5:ad:02:2b:2a:b3:4a:3f:b9:28:58: 09:2e:e6:a2:93:fb:7e:05:2b:b7:36:0b:58:77:8c:ee:80:2a: ba:a4:19:c3:a5:b2:43:e5:22:18:ac:40:54:77:54:8f:a9:95: 32:a8:01:21:eb:7b:5c:3a:f7:ee:56:97:c9:a3:1e:f1:ad:ca: fc:2b:47:60:15:61:7c:15:bb:15:05:b3:e3:56:f6:bf:b3:83: ce:9a:51:7d:84:eb:e2:9b:dc:e7:a4:ae:9b:82:17:9b:61:8d: 1c:54:84:85:eb:71:12:89:c6:90:62:68:b4:38:7f:2f:0f:7a: 47:70:84:83:8a:8b:ce:16:03:2c:23:30:ce:4f:3e:c6:06:45: 8a:9d:fd:ea:65:31:41:d4:00:6a:1f:ea:b9:cc:2a:74:3b:51: 14:ff:ad:65 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC0UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAzMDYw NzEyMzZaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVCMkQwOUI1RTFBM0Qx N0Q0OUJEOERENzBDMTRDMTc2RDQxOTZCM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkE0iDyoP4og3IL5399Jnh4u67ycgQ+RUE++a+9XUFs9BYLvFv O7BD8IrHPg2uZkwfRwhmxjGuI/lOYlH7xuRc1KWNgUH5EnYU6AJo7XoKOPDFdx3l Z/MXfLW2OjhDLmm7T6mPRF7zFyUTYpxHb/Hew1Wnm74ZA1r2Ra5pChMaQBM1Vn2G MI4h6z3VChGKeeC2QThefNpO6a7Xo9QGrmTCJzkexNwkE2FAvnobzkNpWZawDcUo LW2M7Xz0zGiPn4Dr7PiB54jQXgzbxw1PrFqG159p8I2uRPlseSYZfqPCi/MDsTOd +lrAb6qgld4yF5DwQ4Fi9fjC7RM9uyaqCBytAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWy0JteGj0X1JvY3XDBTBdtQZazowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1d5MEp0ZUdqMFgxSnZZM1hEQlRCZHRRWmF6by5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABS5AwDQYJKoZIhvcNAQELBQADggEBAJ8NOXPCdM7rqqgInoyyhiPrXTXf PvBv2pu+vxQRPuYSzcO2xgUx3ptlRvJWEtOvvabULti0RyNNse9PJN41CDmrnTlR /nQYshEvjAhkH81YW9OoQgxws/EZZTdpxHnFKv/VrQIrKrNKP7koWAku5qKT+34F K7c2C1h3jO6AKrqkGcOlskPlIhisQFR3VI+plTKoASHre1w69+5Wl8mjHvGtyvwr R2AVYXwVuxUFs+NW9r+zg86aUX2E6+Kb3OekrpuCF5thjRxUhIXrcRKJxpBiaLQ4 fy8PekdwhIOKi84WAywjMM5PPsYGRYqd/eplMUHUAGof6rnMKnQ7URT/rWU= -----END CERTIFICATE-----Generated at Sat Apr 5 17:48:09 2025 by rpki-client