$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/diuTjorM_W6EtV-iIP1HD8Ka9YI.roa File: diuTjorM_W6EtV-iIP1HD8Ka9YI.roa (raw, json) Hash identifier: +MpKKJ+avT7SW6fTODw3vLmJsM/AdkD6oJbAys6pMdE= Subject key identifier: 76:2B:93:8E:8A:CC:FD:6E:84:B5:5F:A2:20:FD:47:0F:C2:9A:F5:82 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C2C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/diuTjorM_W6EtV-iIP1HD8Ka9YI.roa Signing time: Tue 01 Apr 2025 01:54:06 +0000 ROA not before: Tue 01 Apr 2025 01:54:06 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:54:06 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=762B938E8ACCFD6E84B55FA220FD470FC29AF582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:87:cf:c4:7c:fd:bb:47:c0:18:5e:fc:86: 29:30:32:2b:69:ee:ce:21:2d:fe:ba:a5:1c:36:fe: 1b:54:07:ce:be:15:3e:0a:2d:c8:27:b8:24:1e:ab: 1c:b1:2d:77:d4:df:d3:89:cb:77:9d:3e:fe:fc:3c: 8d:e9:85:86:db:ec:72:99:0b:aa:e7:b9:76:04:3b: 27:df:15:63:36:c5:e3:a9:a6:8d:9e:d1:4f:c2:18: d9:8c:28:0e:d5:d4:f3:da:b6:23:57:1b:be:cf:8d: 10:33:86:ff:3f:c2:bb:29:d0:d1:49:7a:80:46:67: 19:b9:ba:2b:93:c4:f4:ab:f3:a2:85:84:d6:4f:c4: 9f:0f:7a:d8:b6:ed:d7:59:ce:21:05:78:44:59:20: 66:42:96:73:be:c8:45:a0:91:d5:57:8d:84:50:64: 51:66:8b:9b:30:b2:8e:bb:ec:1b:9f:ca:51:0a:82: 05:da:5d:bb:e9:06:57:cf:18:53:6b:d2:fe:4e:33: 8f:c3:28:97:13:85:46:af:4a:0e:d1:37:6e:27:92: d1:ce:4d:09:e7:73:b3:e6:e6:eb:ab:6b:d4:02:bf: 70:cf:e7:25:60:05:3f:1a:bd:5c:f0:12:64:6b:7d: 1e:4c:e9:f5:9b:9e:79:bb:44:24:4b:22:94:f2:3e: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2B:93:8E:8A:CC:FD:6E:84:B5:5F:A2:20:FD:47:0F:C2:9A:F5:82 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/diuTjorM_W6EtV-iIP1HD8Ka9YI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.8.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:4c:ec:38:ed:98:d1:a4:7b:c3:5a:27:a8:e2:ee:2b:63:e7: 13:27:51:72:22:ff:34:c6:e7:5c:db:8e:38:23:71:75:bf:18: d5:5f:39:d2:d0:40:09:87:ea:77:76:7f:ba:66:e9:fa:e3:bd: 1a:6c:bd:5d:69:53:7f:0a:c2:1b:a5:c8:0b:24:6f:a2:f8:08: 4a:93:05:18:14:f0:b3:4e:20:f8:7b:f7:22:99:60:58:cd:bb: dc:f1:7c:07:1c:3e:8e:c6:56:c6:9b:a0:8e:cb:ea:d6:fe:3f: 83:03:71:0a:2b:82:da:9e:74:28:b5:3d:27:d6:03:5d:90:37: f0:68:19:8d:07:be:ae:47:17:45:14:8b:09:11:40:27:9c:6f: ba:e4:4c:b3:5e:d6:8b:3f:00:55:c1:c9:e9:b9:1a:a3:00:11: 10:5b:a3:e2:2c:0e:f6:e5:39:cc:93:99:9d:f1:b5:37:06:46: a4:eb:42:77:f3:23:6d:0a:52:6c:26:74:8d:a8:6e:dc:36:34: f4:d3:6b:1e:96:47:13:eb:81:04:c8:e6:de:de:12:f1:27:c7: 4c:90:34:2d:09:f2:0a:68:3e:b0:d6:d0:3e:fb:93:84:4b:4d: 07:38:4d:96:26:16:72:e3:99:e8:50:08:5c:47:a1:27:20:34: 9c:d2:52:3f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU0MDZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc2MkI5MzhFOEFDQ0ZE NkU4NEI1NUZBMjIwRkQ0NzBGQzI5QUY1ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF+ofPxHz9u0fAGF78hikwMitp7s4hLf66pRw2/htUB86+FT4K LcgnuCQeqxyxLXfU39OJy3edPv78PI3phYbb7HKZC6rnuXYEOyffFWM2xeOppo2e 0U/CGNmMKA7V1PPatiNXG77PjRAzhv8/wrsp0NFJeoBGZxm5uiuTxPSr86KFhNZP xJ8Peti27ddZziEFeERZIGZClnO+yEWgkdVXjYRQZFFmi5swso677BufylEKggXa XbvpBlfPGFNr0v5OM4/DKJcThUavSg7RN24nktHOTQnnc7Pm5uura9QCv3DP5yVg BT8avVzwEmRrfR5M6fWbnnm7RCRLIpTyPqyFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdiuTjorM/W6EtV+iIP1HD8Ka9YIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2RpdVRqb3JNX1c2RXRWLWlJUDFIRDhLYTlZSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABTwgwDQYJKoZIhvcNAQELBQADggEBAA1M7DjtmNGke8NaJ6ji7itj5xMn UXIi/zTG51zbjjgjcXW/GNVfOdLQQAmH6nd2f7pm6frjvRpsvV1pU38KwhulyAsk b6L4CEqTBRgU8LNOIPh79yKZYFjNu9zxfAccPo7GVsaboI7L6tb+P4MDcQorgtqe dCi1PSfWA12QN/BoGY0Hvq5HF0UUiwkRQCecb7rkTLNe1os/AFXByem5GqMAERBb o+IsDvblOcyTmZ3xtTcGRqTrQnfzI20KUmwmdI2obtw2NPTTax6WRxPrgQTI5t7e EvEnx0yQNC0J8gpoPrDW0D77k4RLTQc4TZYmFnLjmehQCFxHoScgNJzSUj8= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:21 2025 by rpki-client