$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XqTj4mqgul1-9CBDcLOjsEBX1Yo.roa File: XqTj4mqgul1-9CBDcLOjsEBX1Yo.roa (raw, json) Hash identifier: 2KK3ZSUEsA/9HTOlraUZMNKAzVRyCG+tqT/ycBB3lXg= Subject key identifier: 5E:A4:E3:E2:6A:A0:BA:5D:7E:F4:20:43:70:B3:A3:B0:40:57:D5:8A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DAD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XqTj4mqgul1-9CBDcLOjsEBX1Yo.roa Signing time: Tue 01 Apr 2025 02:24:41 +0000 ROA not before: Tue 01 Apr 2025 02:24:41 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3501 (0xdad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:41 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=5EA4E3E26AA0BA5D7EF4204370B3A3B04057D58A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:0b:9c:21:c5:9f:91:d4:37:dc:7c:23:04: a3:ac:e2:59:46:c5:1c:3c:cf:8f:ae:aa:91:37:fb: e6:fe:d1:87:42:27:93:17:96:98:0b:13:f6:ee:bb: 00:28:10:55:dc:57:bf:61:70:9b:47:41:6e:98:b2: 0a:7b:b8:00:d6:4a:ae:ee:f0:6b:99:88:1b:b2:ff: 74:a2:19:62:2b:f3:a9:2e:af:11:ae:8d:6e:80:eb: c0:bd:42:a7:7b:57:2f:43:c1:72:bc:aa:66:a1:6e: 72:ca:3c:1c:d3:d6:05:ec:e5:66:65:9d:43:a8:96: 60:ad:2b:c6:f9:03:79:f4:66:e8:8f:37:3f:a4:b2: 03:a9:88:ff:fc:a4:f4:18:df:90:6b:87:1c:81:59: 6b:d1:57:f4:5b:d0:0d:8f:82:b8:0d:ed:57:a5:38: 39:ac:d3:f6:45:a8:26:d5:d7:8d:66:82:a4:d6:1e: 5c:ca:0e:19:13:56:bd:d8:35:12:65:2f:51:19:11: 32:7d:54:c3:91:05:d2:53:71:3f:34:f4:53:6b:9d: 1e:1e:0a:b7:04:86:f0:dc:6f:98:8f:e4:19:61:6a: a0:de:66:42:ee:a1:6c:c2:b7:33:a5:be:06:1c:61: 1a:e0:81:32:30:b2:cc:96:0f:f2:f4:78:9b:70:e3: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A4:E3:E2:6A:A0:BA:5D:7E:F4:20:43:70:B3:A3:B0:40:57:D5:8A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XqTj4mqgul1-9CBDcLOjsEBX1Yo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.128.0/17 Signature Algorithm: sha256WithRSAEncryption 63:28:e9:1c:06:4d:68:b8:2c:1c:36:e8:36:9a:3e:29:8f:54: 64:f5:01:77:7b:9c:47:1b:be:6a:f9:2a:ac:4c:cc:8a:2a:d6: b6:ab:2c:ef:42:5f:c2:98:d7:f7:1f:d4:64:46:41:d4:61:43: be:0f:94:4d:6b:f6:dd:f7:89:10:30:41:24:ab:ed:54:cc:33: d8:92:70:b9:42:8a:d2:eb:db:9e:f2:9d:ee:9c:7b:af:76:d2: df:bd:ef:e5:5f:4b:06:8b:1f:c2:e3:05:d8:92:31:99:b6:90: 8c:50:9e:7b:3f:3f:fb:d5:58:42:cd:62:d5:76:4e:c0:ba:be: f7:3c:de:fc:21:1f:38:a6:a5:87:a1:49:6f:05:6b:d9:49:1d: d3:ad:20:03:84:f9:7c:41:74:1b:ca:5a:2e:c2:28:8b:d7:81: ec:d8:05:cd:c6:9a:18:33:f1:51:47:75:6d:b0:0e:85:ac:97: 02:a4:9e:36:96:e9:5c:fe:dc:94:3a:93:83:11:6f:eb:3e:f8: aa:8d:d7:40:e1:08:be:5e:7f:da:0e:b9:a5:25:07:07:05:1f: c1:cb:1f:65:2f:58:50:6c:9a:9a:ae:2b:a8:a7:94:c7:5a:58: d4:92:02:ef:c7:c1:bb:8f:7e:59:86:2c:cc:f0:f1:e4:d9:45: 99:d2:1e:6f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDa0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0NDFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVFQTRFM0UyNkFBMEJB NUQ3RUY0MjA0MzcwQjNBM0IwNDA1N0Q1OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCjAucIcWfkdQ33HwjBKOs4llGxRw8z4+uqpE3++b+0YdCJ5MX lpgLE/buuwAoEFXcV79hcJtHQW6Ysgp7uADWSq7u8GuZiBuy/3SiGWIr86kurxGu jW6A68C9Qqd7Vy9DwXK8qmahbnLKPBzT1gXs5WZlnUOolmCtK8b5A3n0ZuiPNz+k sgOpiP/8pPQY35BrhxyBWWvRV/Rb0A2PgrgN7VelODms0/ZFqCbV141mgqTWHlzK DhkTVr3YNRJlL1EZETJ9VMORBdJTcT809FNrnR4eCrcEhvDcb5iP5BlhaqDeZkLu oWzCtzOlvgYcYRrggTIwssyWD/L0eJtw47NtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXqTj4mqgul1+9CBDcLOjsEBX1YowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hxVGo0bXFndWwxLTlDQkRjTE9qc0VCWDFZby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcBQoAwDQYJKoZIhvcNAQELBQADggEBAGMo6RwGTWi4LBw26DaaPimPVGT1 AXd7nEcbvmr5KqxMzIoq1rarLO9CX8KY1/cf1GRGQdRhQ74PlE1r9t33iRAwQSSr 7VTMM9iScLlCitLr257yne6ce6920t+97+VfSwaLH8LjBdiSMZm2kIxQnns/P/vV WELNYtV2TsC6vvc83vwhHzimpYehSW8Fa9lJHdOtIAOE+XxBdBvKWi7CKIvXgezY Bc3Gmhgz8VFHdW2wDoWslwKknjaW6Vz+3JQ6k4MRb+s++KqN10DhCL5ef9oOuaUl BwcFH8HLH2UvWFBsmpquK6inlMdaWNSSAu/HwbuPflmGLMzw8eTZRZnSHm8= -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:53 2025 by rpki-client