$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/f77neD9U38p0M2aMJn-1utbfBTE.roa File: f77neD9U38p0M2aMJn-1utbfBTE.roa (raw, json) Hash identifier: 8fT+X8xxbHSXr0YSVMeiv8Uq92VsTfpL1tqDsIm4yEs= Subject key identifier: 7F:BE:E7:78:3F:54:DF:CA:74:33:66:8C:26:7F:B5:BA:D6:DF:05:31 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C00 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f77neD9U38p0M2aMJn-1utbfBTE.roa Signing time: Tue 01 Apr 2025 01:51:29 +0000 ROA not before: Tue 01 Apr 2025 01:51:29 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 110.158.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3072 (0xc00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:29 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=7FBEE7783F54DFCA7433668C267FB5BAD6DF0531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:11:57:ef:19:12:92:8f:5a:d3:f8:f2:a3: 1b:0d:d9:f9:8c:d9:f8:80:08:e5:53:f5:72:d4:2a: 8a:b5:a0:d3:d3:18:2f:ac:0f:24:fd:1e:52:8a:9b: 66:a2:5a:3e:f2:64:8f:a9:0b:c5:b1:c5:88:98:9a: 20:0a:eb:56:a3:d1:f3:15:ba:c1:f6:d0:38:6a:7c: af:32:e7:5f:1b:b4:4c:17:ee:33:98:47:9b:07:53: 4b:da:05:b0:a1:c6:cc:98:ac:c4:91:52:ca:1c:3b: b2:b0:0a:47:e7:1f:ea:81:05:d1:5d:d9:33:cc:22: c3:63:4d:f9:55:0d:c5:77:e1:f6:19:0f:e8:77:0f: 32:97:af:ae:4b:77:3d:77:d9:12:c8:57:af:58:b2: e8:23:4b:50:92:7b:db:d9:48:e4:97:15:22:da:28: 38:de:86:a4:20:f9:40:f3:bc:7f:e5:a9:fb:63:a9: 88:05:c3:52:62:b7:3e:f9:dd:fa:c0:1d:8f:a7:e4: 07:34:ef:5b:ec:f7:88:3b:14:f5:0b:ea:63:85:d6: 30:19:4e:65:b6:8b:c8:df:7f:5e:e4:05:12:60:c6: bc:c7:d4:1b:07:f6:ac:3d:b4:c8:83:73:16:f9:4d: e2:a0:08:71:b3:b4:77:99:10:ac:03:70:5f:ad:2d: dc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BE:E7:78:3F:54:DF:CA:74:33:66:8C:26:7F:B5:BA:D6:DF:05:31 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f77neD9U38p0M2aMJn-1utbfBTE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.0.0/17 Signature Algorithm: sha256WithRSAEncryption 8b:bd:93:f4:7d:8c:e8:14:83:bc:cc:75:e7:3e:7e:c4:e7:ce: 1a:5d:7b:5f:a8:e1:b0:59:ff:81:e7:a1:ba:8a:e3:0d:d1:11: 01:b8:48:5d:e8:e0:79:89:72:e6:bb:17:ee:1b:ca:87:a4:c3: 28:e8:d5:1f:aa:82:e1:5b:52:39:33:fe:6d:ba:d3:91:4a:4f: e2:5d:67:a5:72:e9:01:1f:c6:30:07:7b:b5:54:09:e7:e6:9e: 90:5a:c9:ce:e9:f9:d7:6a:7a:46:b2:cb:91:0a:78:e4:1a:ce: 1c:c6:6b:45:f9:fa:f9:65:60:46:29:3a:64:34:ee:9d:4d:c4: e8:3d:2c:ba:21:7c:29:2e:58:ac:53:41:71:28:bc:c6:67:ae: fc:36:7c:ea:d6:cc:52:c1:ca:6a:ed:6c:d8:b5:93:57:7b:58: b7:ed:f2:f1:5e:aa:ec:81:39:02:fe:1e:b1:54:dc:96:73:ef: 0a:14:82:2c:75:c5:69:94:4e:73:05:77:0d:33:fc:72:e3:93: 18:41:0e:8e:95:d2:6c:12:54:91:12:4c:fa:60:12:0d:0b:30: ea:58:1e:b3:28:a1:9d:71:ae:3d:cc:46:fd:60:b4:1b:17:e2: 91:db:53:0e:c6:aa:6a:df:fa:6e:cc:fe:f4:36:95:e2:7a:aa: 33:8c:9d:9d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMjlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdGQkVFNzc4M0Y1NERG Q0E3NDMzNjY4QzI2N0ZCNUJBRDZERjA1MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfnBFX7xkSko9a0/jyoxsN2fmM2fiACOVT9XLUKoq1oNPTGC+s DyT9HlKKm2aiWj7yZI+pC8WxxYiYmiAK61aj0fMVusH20DhqfK8y518btEwX7jOY R5sHU0vaBbChxsyYrMSRUsocO7KwCkfnH+qBBdFd2TPMIsNjTflVDcV34fYZD+h3 DzKXr65Ldz132RLIV69YsugjS1CSe9vZSOSXFSLaKDjehqQg+UDzvH/lqftjqYgF w1Jitz753frAHY+n5Ac071vs94g7FPUL6mOF1jAZTmW2i8jff17kBRJgxrzH1BsH 9qw9tMiDcxb5TeKgCHGztHeZEKwDcF+tLdzLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUf77neD9U38p0M2aMJn+1utbfBTEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2Y3N25lRDlVMzhwME0yYU1Kbi0xdXRiZkJURS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdungAwDQYJKoZIhvcNAQELBQADggEBAIu9k/R9jOgUg7zMdec+fsTnzhpd e1+o4bBZ/4HnobqK4w3REQG4SF3o4HmJcua7F+4byoekwyjo1R+qguFbUjkz/m26 05FKT+JdZ6Vy6QEfxjAHe7VUCefmnpBayc7p+ddqekayy5EKeOQazhzGa0X5+vll YEYpOmQ07p1NxOg9LLohfCkuWKxTQXEovMZnrvw2fOrWzFLBymrtbNi1k1d7WLft 8vFequyBOQL+HrFU3JZz7woUgix1xWmUTnMFdw0z/HLjkxhBDo6V0mwSVJESTPpg Eg0LMOpYHrMooZ1xrj3MRv1gtBsX4pHbUw7Gqmrf+m7M/vQ2leJ6qjOMnZ0= -----END CERTIFICATE-----Generated at Sun Apr 6 01:46:55 2025 by rpki-client