$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bjVZFTDcikP6ymqegol0IxZR-3U.roa File: bjVZFTDcikP6ymqegol0IxZR-3U.roa (raw, json) Hash identifier: 1PWjFgQLLgxtvMnwNWACxj/mFmfLG7Wn59mu4dvtro4= Subject key identifier: 6E:35:59:15:30:DC:8A:43:FA:CA:6A:9E:82:89:74:23:16:51:FB:75 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B9D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bjVZFTDcikP6ymqegol0IxZR-3U.roa Signing time: Tue 01 Apr 2025 01:39:51 +0000 ROA not before: Tue 01 Apr 2025 01:39:51 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 110.163.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2973 (0xb9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:39:51 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=6E35591530DC8A43FACA6A9E828974231651FB75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:66:08:d9:1c:f3:42:e6:b7:d5:94:8e:0e:94: bc:60:b7:50:44:04:de:c9:2b:63:30:68:29:ed:2d: 9b:d2:d1:f6:5d:ad:37:53:f2:ee:2b:eb:5b:b8:47: 6f:9e:0b:a8:0d:68:d7:05:a9:11:62:d1:2d:fb:55: cd:0a:ad:35:23:dc:49:d2:47:1a:08:bd:cd:42:04: de:e3:99:eb:f4:30:ec:b1:66:77:3a:2c:31:fb:c2: 3e:2e:5c:81:7c:8b:94:96:84:75:dd:b8:13:61:02: d0:ad:4d:94:4f:7b:13:57:b7:d0:bf:52:fb:c9:4c: 0b:38:21:11:0e:2e:66:26:c3:59:41:fc:e6:c8:2f: 48:bb:1f:2d:e3:7d:02:0a:ea:61:13:a5:6c:c9:09: 49:bb:4f:7c:ef:d3:ce:5d:7f:ea:a5:a5:97:c4:d5: a1:61:68:27:2d:9c:37:e4:ff:0f:1a:50:16:7d:3c: c2:27:af:aa:8c:20:14:26:71:92:54:e4:ce:40:73: 22:b2:dd:1a:dd:11:93:9e:74:09:11:c8:78:a4:25: 34:22:25:53:f9:59:f9:c7:33:92:cc:df:26:40:1f: 9c:81:bd:51:4f:b8:a6:ff:67:b5:6a:b1:df:7f:6a: 4a:0f:29:63:13:d4:e2:94:92:ec:bd:a6:9d:95:6e: 84:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:35:59:15:30:DC:8A:43:FA:CA:6A:9E:82:89:74:23:16:51:FB:75 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bjVZFTDcikP6ymqegol0IxZR-3U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.163.18.0/23 Signature Algorithm: sha256WithRSAEncryption 10:ed:02:ee:35:85:b0:44:22:73:2a:b5:45:b6:db:07:a7:1e: a1:59:78:3c:4b:75:c9:8e:38:6c:0e:c4:ce:55:53:1f:50:1c: 3d:0e:14:fd:66:38:0c:00:42:36:22:5d:13:79:6a:74:a2:50: 09:57:d2:48:5a:e6:42:68:8a:b6:08:07:df:3c:25:00:fe:e6: 07:b5:b2:7a:9a:39:7c:3f:62:58:6f:1c:cb:ac:46:43:3d:15: 11:85:9e:81:b5:9b:c3:60:de:50:bb:9a:7d:89:d9:21:c0:c3: 22:bc:98:dd:6d:36:53:b9:54:6c:7d:58:77:41:60:2d:76:e1: c1:18:02:a8:8b:68:7a:1a:91:ee:48:9b:00:4c:88:1b:71:57: a1:43:9c:db:b4:56:8a:fd:72:92:81:7e:0c:1a:24:d8:dd:41: 2f:3a:13:7d:d9:f5:bd:4f:18:c9:b7:d3:c7:4a:b8:37:e9:0c: 94:8d:7a:7f:77:03:89:88:03:1f:e2:01:ea:5d:c5:eb:82:80: ae:78:0a:f3:31:f3:52:f1:aa:38:71:68:e0:ad:d4:6e:ef:06: 22:2b:d7:a6:5a:d7:2f:bb:57:c2:bd:8b:43:0d:3e:c5:cd:f2: 7a:9e:35:d8:da:38:15:ee:6e:81:ba:51:d1:92:48:58:fd:aa: 43:f9:7f:90 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM5NTFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZFMzU1OTE1MzBEQzhB NDNGQUNBNkE5RTgyODk3NDIzMTY1MUZCNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWZgjZHPNC5rfVlI4OlLxgt1BEBN7JK2MwaCntLZvS0fZdrTdT 8u4r61u4R2+eC6gNaNcFqRFi0S37Vc0KrTUj3EnSRxoIvc1CBN7jmev0MOyxZnc6 LDH7wj4uXIF8i5SWhHXduBNhAtCtTZRPexNXt9C/UvvJTAs4IREOLmYmw1lB/ObI L0i7Hy3jfQIK6mETpWzJCUm7T3zv085df+qlpZfE1aFhaCctnDfk/w8aUBZ9PMIn r6qMIBQmcZJU5M5AcyKy3RrdEZOedAkRyHikJTQiJVP5WfnHM5LM3yZAH5yBvVFP uKb/Z7Vqsd9/akoPKWMT1OKUkuy9pp2VboQjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbjVZFTDcikP6ymqegol0IxZR+3UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2JqVlpGVERjaWtQNnltcWVnb2wwSXhaUi0zVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFuoxIwDQYJKoZIhvcNAQELBQADggEBABDtAu41hbBEInMqtUW22wenHqFZ eDxLdcmOOGwOxM5VUx9QHD0OFP1mOAwAQjYiXRN5anSiUAlX0kha5kJoirYIB988 JQD+5ge1snqaOXw/YlhvHMusRkM9FRGFnoG1m8Ng3lC7mn2J2SHAwyK8mN1tNlO5 VGx9WHdBYC124cEYAqiLaHoake5ImwBMiBtxV6FDnNu0Vor9cpKBfgwaJNjdQS86 E33Z9b1PGMm308dKuDfpDJSNen93A4mIAx/iAepdxeuCgK54CvMx81LxqjhxaOCt 1G7vBiIr16Za1y+7V8K9i0MNPsXN8nqeNdjaOBXuboG6UdGSSFj9qkP5f5A= -----END CERTIFICATE-----Generated at Sat Apr 5 17:37:35 2025 by rpki-client