$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yb0b1nNi6V9lP-vG9uKAGev-v2Q.roa File: Yb0b1nNi6V9lP-vG9uKAGev-v2Q.roa (raw, json) Hash identifier: ESZHTFQe2zsP6m8eaIZOZzaC4jI290G95XuO18N9tmk= Subject key identifier: 61:BD:1B:D6:73:62:E9:5F:65:3F:EB:C6:F6:E2:80:19:EB:FE:BF:64 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C49 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yb0b1nNi6V9lP-vG9uKAGev-v2Q.roa Signing time: Tue 01 Apr 2025 01:57:20 +0000 ROA not before: Tue 01 Apr 2025 01:57:20 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:20 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=61BD1BD67362E95F653FEBC6F6E28019EBFEBF64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:eb:14:aa:2e:a9:a4:e7:fa:0f:8e:b4:b5:32: 04:09:55:67:6d:56:9c:7d:d4:2b:bb:1b:2f:4c:dd: 56:ec:b1:f9:72:7c:24:86:08:15:e0:11:42:b2:2d: 6c:fe:6f:ea:cc:c7:10:f0:d1:88:34:fc:e2:1c:04: 6b:f6:47:d1:b1:75:34:b6:b1:fc:b2:50:ff:db:fc: ea:b3:d3:8b:41:24:ef:b3:da:24:1e:7d:37:55:24: 82:e7:02:02:f8:34:85:15:e9:d1:6e:44:f8:28:6e: c2:25:5b:17:49:e5:0c:dc:5a:09:7c:7e:72:f9:59: d3:fa:ec:d3:5e:bc:6e:ae:d8:3f:41:d0:2a:ab:21: 3f:a8:53:33:42:65:a4:c9:dc:e0:fe:86:2c:19:0e: e6:62:4f:6a:0e:2c:74:c9:bd:96:c7:e0:7f:6c:f8: 82:e8:1d:cb:1e:29:dd:35:4a:e7:62:ee:77:ee:85: 3b:5d:c3:79:14:66:45:c5:d1:93:28:c9:84:2a:05: d2:46:13:6d:be:51:a9:46:83:05:0a:83:df:7d:3a: 52:4d:eb:b9:58:62:eb:fb:06:48:a1:4f:a0:19:d9: ac:0b:82:4d:f8:85:2c:e7:b7:ef:0f:e9:44:db:89: 7a:d8:77:fa:78:65:34:5f:12:e1:d6:29:4b:95:3f: 87:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BD:1B:D6:73:62:E9:5F:65:3F:EB:C6:F6:E2:80:19:EB:FE:BF:64 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yb0b1nNi6V9lP-vG9uKAGev-v2Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.73.0/24 Signature Algorithm: sha256WithRSAEncryption e3:fe:7c:9a:2e:f3:e3:f0:17:b9:9b:58:4b:66:24:db:f1:a6: c3:9b:03:28:eb:1f:dd:cd:32:39:37:63:e1:89:2f:df:4d:b6: 0b:a0:88:d0:f9:63:b7:33:ce:45:34:a3:23:c8:05:a5:79:48: 3a:81:54:73:4f:ae:69:96:f8:25:ae:3a:e4:bf:fe:d7:c8:1a: 25:dc:74:51:ab:ca:35:fd:d4:af:3a:e3:a1:12:ea:51:00:12: 48:4d:b6:4b:09:7b:fb:a4:19:5b:b6:12:f3:66:24:de:97:ab: ad:b3:1d:94:3c:7e:80:48:d8:2c:c6:0c:7f:b2:d8:49:55:01: 6d:ac:20:9d:87:50:fe:83:20:a5:d3:7c:3f:53:27:65:09:ff: f1:08:da:88:4e:45:40:e2:29:16:8d:42:07:fa:d2:7e:ff:80: 95:2b:a5:c7:59:38:b6:fd:9b:10:3c:0c:da:5a:b0:09:90:f4: 2f:7d:e4:74:ae:e3:20:c1:73:ce:42:70:34:21:b2:07:48:13: 64:85:f4:dd:7e:a6:98:af:a8:13:3b:95:d6:77:15:cc:44:12: 92:bc:97:bc:03:e1:e2:bb:a5:6b:81:f6:1b:33:59:98:44:49: 06:bc:bb:18:0a:30:e9:16:83:1e:95:c5:62:e5:5a:9e:bd:a5: 7f:20:ab:7b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MjBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYxQkQxQkQ2NzM2MkU5 NUY2NTNGRUJDNkY2RTI4MDE5RUJGRUJGNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCX6xSqLqmk5/oPjrS1MgQJVWdtVpx91Cu7Gy9M3VbssflyfCSG CBXgEUKyLWz+b+rMxxDw0Yg0/OIcBGv2R9GxdTS2sfyyUP/b/Oqz04tBJO+z2iQe fTdVJILnAgL4NIUV6dFuRPgobsIlWxdJ5QzcWgl8fnL5WdP67NNevG6u2D9B0Cqr IT+oUzNCZaTJ3OD+hiwZDuZiT2oOLHTJvZbH4H9s+ILoHcseKd01Sudi7nfuhTtd w3kUZkXF0ZMoyYQqBdJGE22+UalGgwUKg999OlJN67lYYuv7BkihT6AZ2awLgk34 hSznt+8P6UTbiXrYd/p4ZTRfEuHWKUuVP4evAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYb0b1nNi6V9lP+vG9uKAGev+v2QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1liMGIxbk5pNlY5bFAtdkc5dUtBR2V2LXYyUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABT0kwDQYJKoZIhvcNAQELBQADggEBAOP+fJou8+PwF7mbWEtmJNvxpsOb AyjrH93NMjk3Y+GJL99NtgugiND5Y7czzkU0oyPIBaV5SDqBVHNPrmmW+CWuOuS/ /tfIGiXcdFGryjX91K8646ES6lEAEkhNtksJe/ukGVu2EvNmJN6Xq62zHZQ8foBI 2CzGDH+y2ElVAW2sIJ2HUP6DIKXTfD9TJ2UJ//EI2ohORUDiKRaNQgf60n7/gJUr pcdZOLb9mxA8DNpasAmQ9C995HSu4yDBc85CcDQhsgdIE2SF9N1+ppivqBM7ldZ3 FcxEEpK8l7wD4eK7pWuB9hszWZhESQa8uxgKMOkWgx6VxWLlWp69pX8gq3s= -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:03 2025 by rpki-client