$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XQYHx1JiQK-HzavyvgJxCybZqlY.roa File: XQYHx1JiQK-HzavyvgJxCybZqlY.roa (raw, json) Hash identifier: HQ85T9f0FpLc6elt0ZB2zCyhGU4lkLSbH2W+SIzA6dE= Subject key identifier: 5D:06:07:C7:52:62:40:AF:87:CD:AB:F2:BE:02:71:0B:26:D9:AA:56 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BA2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XQYHx1JiQK-HzavyvgJxCybZqlY.roa Signing time: Tue 01 Apr 2025 01:39:53 +0000 ROA not before: Tue 01 Apr 2025 01:39:53 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.159.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2978 (0xba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:39:53 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=5D0607C7526240AF87CDABF2BE02710B26D9AA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:f6:2b:16:ef:10:b9:b8:f8:d8:36:15:bc: 01:c6:16:7a:82:07:ec:bf:36:f9:ac:7c:35:fa:a9: 7b:24:1e:59:eb:bf:7f:b6:98:c6:58:93:f9:1e:53: 0c:1c:9d:12:3e:90:6e:4a:fc:bf:4c:1e:7c:d7:3c: 82:f6:66:83:1d:75:d3:97:ec:ae:d4:21:d3:ae:3e: 8e:1a:06:d6:14:7a:3f:da:44:38:8a:85:c3:78:a2: ce:7d:88:10:d9:b7:d7:89:f6:fa:56:c8:8b:2e:bf: e1:53:e6:ee:4b:7e:d9:70:59:66:99:28:0a:1f:d4: c3:97:5c:c7:77:15:66:0b:54:cc:c9:ff:4d:16:c6: 7f:42:45:a9:cd:2f:5e:e3:27:24:bf:2e:63:37:c2: 79:c9:e7:48:54:a8:85:3c:b1:c1:89:34:26:1f:2c: f1:ac:ac:2b:bc:81:c3:67:9a:89:b5:f5:d2:48:f0: 88:13:a3:b1:27:da:33:b8:be:88:88:ec:60:85:42: ec:86:ce:a2:c3:89:b2:8b:ec:e5:75:69:45:2e:98: 92:5b:d1:c2:fa:cb:ae:e4:3a:49:4a:55:68:f1:b1: a9:94:2f:5d:8b:0f:b9:b8:d2:cf:62:fb:44:70:1e: c2:48:6d:1c:20:11:52:04:9d:15:54:98:39:10:7d: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:06:07:C7:52:62:40:AF:87:CD:AB:F2:BE:02:71:0B:26:D9:AA:56 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XQYHx1JiQK-HzavyvgJxCybZqlY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.224.0/22 Signature Algorithm: sha256WithRSAEncryption c3:93:45:99:e1:e1:8d:55:4f:e8:95:2d:48:f6:24:1b:f9:b6: 54:b2:af:80:6c:86:50:61:08:8b:85:60:0b:86:87:41:e8:0a: 9d:2c:66:1e:e7:1e:9b:f4:96:46:4f:c6:12:e5:df:2a:0f:60: 5d:4e:6e:08:71:19:c0:42:33:4a:d5:65:d8:a7:7f:c8:71:00: f4:c0:77:b7:1a:3f:72:01:a0:b4:fa:22:1a:4e:1b:e7:c3:1c: cc:3e:34:d7:1e:cb:38:32:87:63:f0:24:e3:4f:1c:50:e6:7f: 9d:95:aa:1b:54:c9:a4:1e:e6:b4:6d:3a:e5:9d:45:0d:ba:37: 18:85:3b:3f:00:75:3e:ce:71:da:01:1e:f0:1d:b9:41:9d:4c: c9:d5:62:bf:df:e7:9d:83:d8:80:f6:f9:25:7b:e6:18:de:5f: 4a:ff:16:b3:77:f0:1f:c1:aa:7c:c7:e6:51:00:aa:b8:ea:64: 8e:f3:ce:4d:41:54:49:22:28:86:2a:5b:d0:23:23:1f:95:cf: 6c:b3:b7:0e:1e:39:48:80:cc:46:ae:08:e1:b3:55:78:9e:a3: 07:3f:da:79:0d:96:bd:02:44:dd:a4:f7:c1:4f:8f:15:9c:32: 78:e0:4b:37:4f:c5:1e:a6:5b:fc:33:c1:ca:dd:db:27:8b:ff: ba:2f:88:24 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM5NTNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVEMDYwN0M3NTI2MjQw QUY4N0NEQUJGMkJFMDI3MTBCMjZEOUFBNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjkPYrFu8Qubj42DYVvAHGFnqCB+y/NvmsfDX6qXskHlnrv3+2 mMZYk/keUwwcnRI+kG5K/L9MHnzXPIL2ZoMdddOX7K7UIdOuPo4aBtYUej/aRDiK hcN4os59iBDZt9eJ9vpWyIsuv+FT5u5LftlwWWaZKAof1MOXXMd3FWYLVMzJ/00W xn9CRanNL17jJyS/LmM3wnnJ50hUqIU8scGJNCYfLPGsrCu8gcNnmom19dJI8IgT o7En2jO4voiI7GCFQuyGzqLDibKL7OV1aUUumJJb0cL6y67kOklKVWjxsamUL12L D7m40s9i+0RwHsJIbRwgEVIEnRVUmDkQfZn1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXQYHx1JiQK+HzavyvgJxCybZqlYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hRWUh4MUppUUstSHphdnl2Z0p4Q3liWnFsWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALcn+AwDQYJKoZIhvcNAQELBQADggEBAMOTRZnh4Y1VT+iVLUj2JBv5tlSy r4BshlBhCIuFYAuGh0HoCp0sZh7nHpv0lkZPxhLl3yoPYF1ObghxGcBCM0rVZdin f8hxAPTAd7caP3IBoLT6IhpOG+fDHMw+NNceyzgyh2PwJONPHFDmf52VqhtUyaQe 5rRtOuWdRQ26NxiFOz8AdT7OcdoBHvAduUGdTMnVYr/f552D2ID2+SV75hjeX0r/ FrN38B/BqnzH5lEAqrjqZI7zzk1BVEkiKIYqW9AjIx+Vz2yztw4eOUiAzEauCOGz VXieowc/2nkNlr0CRN2k98FPjxWcMnjgSzdPxR6mW/wzwcrd2yeL/7oviCQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:44 2025 by rpki-client