$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zp5DvRDWgjOi3leIzMEZiEGFE74.roa File: Zp5DvRDWgjOi3leIzMEZiEGFE74.roa (raw, json) Hash identifier: PRy1Fr7OlD9F5U62wh1Gz33mSiu7tG/TQg36rb9k2jE= Subject key identifier: 66:9E:43:BD:10:D6:82:33:A2:DE:57:88:CC:C1:19:88:41:85:13:BE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BE8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zp5DvRDWgjOi3leIzMEZiEGFE74.roa Signing time: Tue 01 Apr 2025 01:47:43 +0000 ROA not before: Tue 01 Apr 2025 01:47:43 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 183.74.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3048 (0xbe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:47:43 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=669E43BD10D68233A2DE5788CCC11988418513BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:54:dc:13:58:66:97:2e:a5:87:7f:96:c5: 3a:ea:90:da:cc:9a:92:4e:eb:ce:ce:4a:16:82:4c: 6c:9e:7c:56:ee:cd:4f:dd:21:b0:64:27:b7:c6:54: 03:e6:3e:c6:2a:fc:5e:07:5b:40:f4:74:3d:ba:7f: cb:92:90:92:4e:98:6f:fc:d2:91:93:08:71:64:b1: 05:90:da:06:6f:68:d7:24:19:50:3f:f5:89:fe:23: 97:57:46:2e:6f:b6:0a:83:9e:00:87:56:cf:47:2d: 71:c5:e0:40:12:a4:83:ae:ff:16:75:75:38:eb:13: 5a:80:c4:59:db:42:3e:ab:40:a1:a8:25:dc:9c:94: bc:5a:c3:fb:c9:52:ba:40:f6:bb:25:4b:fc:11:ec: 1c:d4:c9:61:a6:d1:e8:e5:2f:89:89:28:73:e2:a5: 17:09:ef:38:69:25:0e:51:10:7e:d8:25:f2:f2:f2: 00:e5:dc:be:5e:72:c6:eb:c3:24:00:49:2c:8a:d2: ee:df:70:7a:c1:1d:96:7d:14:fa:62:b8:45:70:82: e8:61:4a:a5:ba:60:07:0c:03:71:63:cd:67:f5:aa: 11:9a:8f:a0:95:0e:44:ad:34:d4:89:01:e8:33:d8: ff:04:de:67:36:7f:1f:d4:97:c4:b5:14:2d:19:50: 1f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9E:43:BD:10:D6:82:33:A2:DE:57:88:CC:C1:19:88:41:85:13:BE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zp5DvRDWgjOi3leIzMEZiEGFE74.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.74.198.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:13:9e:8a:bc:76:9e:18:b4:61:86:db:a3:1c:e7:28:2a:82: b8:1e:72:6d:83:85:36:e8:87:5d:21:b2:9d:53:34:1b:73:c2: 93:4f:fd:26:4b:9a:bb:96:53:7c:16:c9:cf:3a:97:c3:a4:ae: 8a:db:28:41:ef:ac:d8:65:70:2f:f0:17:8b:cf:5d:f1:b1:81: f9:bc:09:07:50:d7:71:e8:0f:6d:08:6a:fb:4e:41:a0:37:d5: ae:51:11:71:89:44:47:a2:7b:07:b2:8a:7a:b2:37:3c:31:ae: 29:fa:33:0d:e6:f5:9e:58:47:25:13:20:25:e3:8f:dd:0a:00: 83:78:dc:0b:2a:b3:91:27:48:e6:02:94:d3:7d:60:3a:2e:5a: 9f:58:c4:5d:fe:0c:a4:0a:2a:d8:5b:05:cc:14:23:da:15:e5: fc:98:1f:21:26:99:0d:bc:92:6e:eb:b3:1a:94:55:5a:39:6f: b2:9e:b0:1b:82:34:ef:3c:f5:8d:8f:e8:5d:35:53:c4:51:87: b9:3c:4c:a3:34:10:ee:bc:fc:85:2c:24:b7:36:f8:e3:ea:ce: 27:bc:f8:18:b4:86:0a:bb:20:d3:4e:85:22:bc:e0:7a:00:1e: 6c:8d:1b:d3:13:7d:9a:87:7a:9e:c5:47:68:1a:8c:f1:34:5e: fb:c8:68:41 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC+gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQ3NDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY2OUU0M0JEMTBENjgy MzNBMkRFNTc4OENDQzExOTg4NDE4NTEzQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwxlTcE1hmly6lh3+WxTrqkNrMmpJO687OShaCTGyefFbuzU/d IbBkJ7fGVAPmPsYq/F4HW0D0dD26f8uSkJJOmG/80pGTCHFksQWQ2gZvaNckGVA/ 9Yn+I5dXRi5vtgqDngCHVs9HLXHF4EASpIOu/xZ1dTjrE1qAxFnbQj6rQKGoJdyc lLxaw/vJUrpA9rslS/wR7BzUyWGm0ejlL4mJKHPipRcJ7zhpJQ5REH7YJfLy8gDl 3L5ecsbrwyQASSyK0u7fcHrBHZZ9FPpiuEVwguhhSqW6YAcMA3FjzWf1qhGaj6CV DkStNNSJAegz2P8E3mc2fx/Ul8S1FC0ZUB/VAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZp5DvRDWgjOi3leIzMEZiEGFE74wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pwNUR2UkRXZ2pPaTNsZUl6TUVaaUVHRkU3NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAG3SsYwDQYJKoZIhvcNAQELBQADggEBAE0Tnoq8dp4YtGGG26Mc5ygqgrge cm2DhTboh10hsp1TNBtzwpNP/SZLmruWU3wWyc86l8OkrorbKEHvrNhlcC/wF4vP XfGxgfm8CQdQ13HoD20IavtOQaA31a5REXGJREeieweyinqyNzwxrin6Mw3m9Z5Y RyUTICXjj90KAIN43Asqs5EnSOYClNN9YDouWp9YxF3+DKQKKthbBcwUI9oV5fyY HyEmmQ28km7rsxqUVVo5b7KesBuCNO889Y2P6F01U8RRh7k8TKM0EO68/IUsJLc2 +OPqzie8+Bi0hgq7INNOhSK84HoAHmyNG9MTfZqHep7FR2gajPE0XvvIaEE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:54 2025 by rpki-client