$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dAMf8orB-PdrKoWvSkRK2yRo4Kw.roa File: dAMf8orB-PdrKoWvSkRK2yRo4Kw.roa (raw, json) Hash identifier: e1/G3xF/I98hSz8JbaBL/MWWkckM4XlEqGuw4Pke5Ls= Subject key identifier: 74:03:1F:F2:8A:C1:F8:F7:6B:2A:85:AF:4A:44:4A:DB:24:68:E0:AC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D3D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dAMf8orB-PdrKoWvSkRK2yRo4Kw.roa Signing time: Tue 01 Apr 2025 02:17:05 +0000 ROA not before: Tue 01 Apr 2025 02:17:05 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.73.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 21:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3389 (0xd3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:17:05 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=74031FF28AC1F8F76B2A85AF4A444ADB2468E0AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:41:c5:b5:bb:0c:93:b6:b3:c7:ed:7f:df: 2d:12:f8:53:dd:b0:ff:fc:e7:48:e0:e4:91:d1:94: ae:fd:ca:21:2e:36:42:10:b2:2d:29:f1:45:fb:e7: a4:37:07:2a:35:0b:40:79:3e:b6:2c:f6:df:9d:14: ef:3a:9d:b6:37:30:e9:8f:40:88:67:28:4f:ce:12: 72:67:45:ae:5b:97:1b:08:98:89:61:4d:57:45:09: bf:48:48:37:cf:ce:e9:bd:5b:38:eb:6f:11:f9:26: 70:b1:43:ec:19:00:68:a8:52:92:ae:a6:ea:78:83: 6c:b5:e7:c6:af:0c:b0:e5:b8:cc:fb:c3:ae:62:60: 30:77:a1:6e:0c:84:ce:df:d3:e6:1b:f1:2e:ea:dd: 06:d3:98:1e:82:dd:f3:1c:93:5d:dc:03:c3:4e:c0: cb:40:e3:86:71:da:ba:d1:ca:f4:8d:a9:72:ed:6a: a8:63:a5:4a:6c:64:c9:49:25:c9:f5:02:da:5c:34: a1:17:ca:6e:80:fa:99:87:02:b1:79:e1:c6:5c:93: 23:e1:f8:fd:2c:99:8d:8b:34:58:f5:e0:90:ac:c7: 61:d6:b7:bb:36:98:29:a3:f9:87:9e:f0:4c:86:d8: 96:a5:ab:15:ac:63:3a:60:1e:8d:a4:af:9b:20:ca: eb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:03:1F:F2:8A:C1:F8:F7:6B:2A:85:AF:4A:44:4A:DB:24:68:E0:AC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dAMf8orB-PdrKoWvSkRK2yRo4Kw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.239.0/24 Signature Algorithm: sha256WithRSAEncryption a1:52:4d:f2:c7:44:85:6b:aa:2b:4f:9e:cc:4b:64:bb:d8:44: 97:a4:88:95:98:f2:37:39:78:52:9a:33:09:5d:e2:bf:2d:51: 99:9b:70:5e:34:a3:86:f7:b4:46:a2:fd:da:5f:5c:28:c4:7c: c1:29:f5:d3:e7:19:4d:68:13:64:c7:fd:7e:72:f5:22:71:8b: 9e:3f:81:57:7d:3a:02:ba:f2:5a:7d:d1:57:7f:7b:d9:e6:68: 8e:e7:c1:17:ac:1e:59:3b:80:11:18:70:cf:aa:c0:fd:d4:f5: 6d:10:37:67:34:67:56:a1:3f:8a:31:ec:8e:e6:7f:a5:a0:fa: 25:45:19:92:9c:51:66:49:92:70:66:f7:5e:aa:bb:2b:58:86: d2:ae:db:b1:77:ea:1d:87:2a:ea:2a:2f:5d:fc:27:a5:c1:87: ba:10:5a:3a:94:47:c6:83:9a:42:33:2d:bc:87:59:55:a7:8f: 49:06:44:20:c0:b2:79:5f:96:02:60:d3:28:9a:4e:1d:28:d7: 37:b2:03:17:33:73:c1:53:af:76:c3:5a:99:13:6b:68:25:f8: 60:f7:3b:29:98:14:0b:92:07:ca:a7:85:19:b2:03:9a:7d:eb: 7a:d1:58:0d:e6:e9:36:fc:65:ad:de:85:b6:92:b8:e9:14:99: e2:bc:1f:69 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDT0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE3MDVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc0MDMxRkYyOEFDMUY4 Rjc2QjJBODVBRjRBNDQ0QURCMjQ2OEUwQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4uUHFtbsMk7azx+1/3y0S+FPdsP/850jg5JHRlK79yiEuNkIQ si0p8UX756Q3Byo1C0B5PrYs9t+dFO86nbY3MOmPQIhnKE/OEnJnRa5blxsImIlh TVdFCb9ISDfPzum9WzjrbxH5JnCxQ+wZAGioUpKupup4g2y158avDLDluMz7w65i YDB3oW4MhM7f0+Yb8S7q3QbTmB6C3fMck13cA8NOwMtA44Zx2rrRyvSNqXLtaqhj pUpsZMlJJcn1AtpcNKEXym6A+pmHArF54cZckyPh+P0smY2LNFj14JCsx2HWt7s2 mCmj+Yee8EyG2JalqxWsYzpgHo2kr5sgyut1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdAMf8orB+PdrKoWvSkRK2yRo4KwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2RBTWY4b3JCLVBkcktvV3ZTa1JLMnlSbzRLdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSe8wDQYJKoZIhvcNAQELBQADggEBAKFSTfLHRIVrqitPnsxLZLvYRJek iJWY8jc5eFKaMwld4r8tUZmbcF40o4b3tEai/dpfXCjEfMEp9dPnGU1oE2TH/X5y 9SJxi54/gVd9OgK68lp90Vd/e9nmaI7nwResHlk7gBEYcM+qwP3U9W0QN2c0Z1ah P4ox7I7mf6Wg+iVFGZKcUWZJknBm916quytYhtKu27F36h2HKuoqL138J6XBh7oQ WjqUR8aDmkIzLbyHWVWnj0kGRCDAsnlflgJg0yiaTh0o1zeyAxczc8FTr3bDWpkT a2gl+GD3OymYFAuSB8qnhRmyA5p963rRWA3m6Tb8Za3ehbaSuOkUmeK8H2k= -----END CERTIFICATE-----Generated at Sat Apr 12 02:22:17 2025 by rpki-client