$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/c6m86rDxQqM-XmckSVoEnV41anY.roa File: c6m86rDxQqM-XmckSVoEnV41anY.roa (raw, json) Hash identifier: +pK0PlTFAjOviMjGDzphiZDmAmvaEN/Ea1FpfqqxMv8= Subject key identifier: 73:A9:BC:EA:B0:F1:42:A3:3E:5E:67:24:49:5A:04:9D:5E:35:6A:76 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BC2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c6m86rDxQqM-XmckSVoEnV41anY.roa Signing time: Tue 01 Apr 2025 01:43:46 +0000 ROA not before: Tue 01 Apr 2025 01:43:46 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3010 (0xbc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:43:46 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=73A9BCEAB0F142A33E5E6724495A049D5E356A76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:72:f3:be:24:1a:e4:86:00:d8:4d:cd:92:99: c3:f2:bc:3a:09:0a:88:cf:e9:2d:b3:bf:dd:95:ef: 68:f0:b4:ad:53:d2:8d:1e:b0:a4:62:75:fa:23:c4: f1:0c:c0:ab:8e:60:76:06:ff:22:db:70:b9:de:0f: 75:20:bd:51:70:b5:bd:53:95:a7:de:c6:30:d8:1b: c5:ac:bc:49:0d:be:78:47:7b:68:c5:d0:33:f0:70: 46:37:e1:03:8b:5a:d6:de:65:05:b2:69:87:4e:bb: 99:f1:e1:c1:11:8a:fb:e6:c2:98:48:e4:e4:fb:05: 92:1b:2d:99:e6:3c:c3:c9:3a:6f:1c:9b:af:b2:41: 97:34:07:e5:5b:c9:15:da:06:97:2e:6d:23:9b:f3: e1:95:a4:e3:66:9a:c2:77:4a:ad:28:fb:82:03:e9: 24:3f:4e:c5:92:5e:22:1d:40:e8:5a:84:f8:b4:57: 7b:5c:0f:78:45:93:44:e8:98:06:44:ef:fc:56:63: fc:45:af:fe:f0:f1:57:d0:5e:2f:6d:f4:59:02:0e: 5b:21:5c:04:48:8e:10:b6:bf:73:2f:eb:00:b0:48: ce:03:9b:b4:91:df:40:27:c4:69:06:b8:14:a3:08: 08:75:d6:90:59:41:57:f7:22:3c:65:c4:73:01:9c: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A9:BC:EA:B0:F1:42:A3:3E:5E:67:24:49:5A:04:9D:5E:35:6A:76 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c6m86rDxQqM-XmckSVoEnV41anY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.238.0/24 Signature Algorithm: sha256WithRSAEncryption 71:98:79:95:35:41:7f:48:14:49:97:ba:a1:e0:74:90:43:0d: f1:6c:7c:dc:e7:10:97:f9:7b:e0:1d:aa:93:e7:75:a1:00:a3: f5:70:09:29:74:83:5c:0c:21:46:d7:c1:12:0d:0e:84:f4:e4: 11:5f:d3:88:a9:56:47:e6:3d:5b:77:cb:f6:ff:c0:0f:b0:1f: cd:07:1e:ae:5b:ed:65:10:46:b7:3d:31:ca:5f:e7:34:b2:0b: ee:5a:03:68:0c:45:92:58:a1:92:70:30:9d:65:f5:83:ab:73: bc:01:6a:5d:08:cb:f7:25:8f:7e:af:7a:65:3b:5f:5b:9e:a2: e9:13:9c:7f:7b:b7:74:f7:ab:b9:50:ba:8c:81:dc:fd:be:44: 4e:63:65:4a:25:bd:d0:fb:d6:fa:1a:c4:4d:5e:c2:82:de:22: 9e:10:a6:5f:9a:c9:a0:7e:08:05:c6:68:4f:17:81:14:7d:89: f6:c8:d8:11:65:88:fc:42:44:99:28:d8:dc:66:24:65:33:77: c5:d0:50:53:c2:5c:73:6d:66:ac:6c:b6:70:f4:dc:b5:d0:1a: 89:f8:9c:4e:ec:ad:00:7b:28:42:ae:68:7a:58:7d:dd:c5:cc: 74:21:a8:8d:dc:86:0b:89:25:8a:d7:b1:50:8e:7d:4f:39:e5: 70:e7:c2:90 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQzNDZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDczQTlCQ0VBQjBGMTQy QTMzRTVFNjcyNDQ5NUEwNDlENUUzNTZBNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgcvO+JBrkhgDYTc2SmcPyvDoJCojP6S2zv92V72jwtK1T0o0e sKRidfojxPEMwKuOYHYG/yLbcLneD3UgvVFwtb1TlafexjDYG8WsvEkNvnhHe2jF 0DPwcEY34QOLWtbeZQWyaYdOu5nx4cERivvmwphI5OT7BZIbLZnmPMPJOm8cm6+y QZc0B+VbyRXaBpcubSOb8+GVpONmmsJ3Sq0o+4ID6SQ/TsWSXiIdQOhahPi0V3tc D3hFk0TomAZE7/xWY/xFr/7w8VfQXi9t9FkCDlshXARIjhC2v3Mv6wCwSM4Dm7SR 30AnxGkGuBSjCAh11pBZQVf3IjxlxHMBnBFrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUc6m86rDxQqM+XmckSVoEnV41anYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2M2bTg2ckR4UXFNLVhtY2tTVm9FblY0MWFuWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABS+4wDQYJKoZIhvcNAQELBQADggEBAHGYeZU1QX9IFEmXuqHgdJBDDfFs fNznEJf5e+AdqpPndaEAo/VwCSl0g1wMIUbXwRINDoT05BFf04ipVkfmPVt3y/b/ wA+wH80HHq5b7WUQRrc9Mcpf5zSyC+5aA2gMRZJYoZJwMJ1l9YOrc7wBal0Iy/cl j36vemU7X1ueoukTnH97t3T3q7lQuoyB3P2+RE5jZUolvdD71voaxE1ewoLeIp4Q pl+ayaB+CAXGaE8XgRR9ifbI2BFliPxCRJko2NxmJGUzd8XQUFPCXHNtZqxstnD0 3LXQGon4nE7srQB7KEKuaHpYfd3FzHQhqI3chguJJYrXsVCOfU855XDnwpA= -----END CERTIFICATE-----Generated at Sat Apr 5 17:47:42 2025 by rpki-client