$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fOSapEgZof2hUUqA9LGI7sTpif4.roa File: fOSapEgZof2hUUqA9LGI7sTpif4.roa (raw, json) Hash identifier: wBqnDk7No2np/stzIfxqadtF2dqlmCv+n3/arCpuhIs= Subject key identifier: 7C:E4:9A:A4:48:19:A1:FD:A1:51:4A:80:F4:B1:88:EE:C4:E9:89:FE Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CC1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fOSapEgZof2hUUqA9LGI7sTpif4.roa Signing time: Tue 01 Apr 2025 02:05:49 +0000 ROA not before: Tue 01 Apr 2025 02:05:49 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 110.161.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3265 (0xcc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:49 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=7CE49AA44819A1FDA1514A80F4B188EEC4E989FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:f3:dc:18:06:e5:d9:9f:38:d2:6f:18:77: 88:47:f1:ab:bc:d7:57:cd:6b:27:d4:fe:ef:a0:40: f5:81:8b:6c:db:cf:b1:96:64:02:59:d8:1b:92:56: d2:8a:24:e4:03:32:4c:1a:64:2f:ba:16:fb:02:68: b8:02:34:6c:82:a3:90:00:a6:53:4f:26:a2:62:83: 79:d1:be:8b:03:ab:d5:60:d7:b5:4f:5b:c6:d4:99: 4a:c2:7b:1e:5c:c1:f5:d2:74:a6:02:d4:7f:05:b8: 8d:da:f6:3c:f0:cb:7d:38:af:fb:75:78:05:22:d6: c5:f0:28:94:76:eb:f8:0f:12:c3:5f:26:63:b4:4d: 9c:04:d5:0f:8d:26:dd:5b:07:f2:b4:ff:e4:db:a7: 80:c1:c4:ab:ef:47:d3:85:92:5e:a9:61:57:aa:21: 70:99:b6:72:e3:52:04:46:42:e7:1d:ff:2d:f5:7c: 71:ea:08:97:18:f4:63:21:04:79:7c:e9:0d:59:e2: 63:f3:69:85:38:dc:f0:5c:8f:1e:d3:26:4d:fd:dd: be:b9:01:29:97:56:8b:ac:69:d4:a9:f2:c4:dd:fd: 91:73:d3:92:27:b3:d1:c0:d3:70:05:94:e7:1c:14: 22:03:f1:b4:e2:12:44:d0:99:21:8f:0c:ea:59:2a: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E4:9A:A4:48:19:A1:FD:A1:51:4A:80:F4:B1:88:EE:C4:E9:89:FE X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fOSapEgZof2hUUqA9LGI7sTpif4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.208.0/20 Signature Algorithm: sha256WithRSAEncryption cf:ba:65:dd:14:de:12:21:c2:2f:39:67:09:27:e9:72:3f:07: 08:dc:f3:c2:19:bc:7e:10:ad:92:c7:63:45:5b:a4:22:9c:5f: 0d:f1:95:5b:3d:c7:57:cc:46:a6:52:09:c6:9b:48:75:c2:28: 84:ad:ec:d1:6e:ae:aa:75:8b:1f:cb:29:c4:73:6d:7a:8f:95: f4:fa:51:5e:7b:54:f9:6b:53:25:f8:27:b7:00:32:e0:0f:01: 11:4e:49:fa:8d:61:b4:1d:af:d4:f6:86:6a:47:d8:6a:f8:dc: dd:a5:9c:86:1e:ab:b3:a9:39:0d:f5:65:8a:a6:15:ee:14:4c: ea:56:a3:2b:23:bf:69:6e:b6:ba:9a:a8:0f:31:e7:6e:86:80: 4d:12:b4:ca:c9:f7:98:4b:79:86:98:3d:93:86:f7:d8:c8:13: 42:ad:c8:83:9f:e5:a8:e6:7c:28:6b:8b:c9:2f:a2:b6:10:7d: f5:68:d2:e3:4e:33:1f:0d:45:6e:60:c8:13:29:27:b4:bb:52: 5a:5f:57:ed:32:d0:b2:aa:28:69:89:01:d2:2e:8d:6b:fa:b7: 50:9a:19:8b:2f:60:49:15:c7:88:de:64:71:b8:b4:f0:49:a6: 2f:5a:96:91:9e:3b:6f:86:18:66:05:79:1c:81:7c:67:63:98: 4e:7f:9b:7c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdDRTQ5QUE0NDgxOUEx RkRBMTUxNEE4MEY0QjE4OEVFQzRFOTg5RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC75PPcGAbl2Z840m8Yd4hH8au811fNayfU/u+gQPWBi2zbz7GW ZAJZ2BuSVtKKJOQDMkwaZC+6FvsCaLgCNGyCo5AAplNPJqJig3nRvosDq9Vg17VP W8bUmUrCex5cwfXSdKYC1H8FuI3a9jzwy304r/t1eAUi1sXwKJR26/gPEsNfJmO0 TZwE1Q+NJt1bB/K0/+Tbp4DBxKvvR9OFkl6pYVeqIXCZtnLjUgRGQucd/y31fHHq CJcY9GMhBHl86Q1Z4mPzaYU43PBcjx7TJk393b65ASmXVousadSp8sTd/ZFz05In s9HA03AFlOccFCID8bTiEkTQmSGPDOpZKgTFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfOSapEgZof2hUUqA9LGI7sTpif4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ZPU2FwRWdab2YyaFVVcUE5TEdJN3NUcGlmNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARuodAwDQYJKoZIhvcNAQELBQADggEBAM+6Zd0U3hIhwi85Zwkn6XI/Bwjc 88IZvH4QrZLHY0VbpCKcXw3xlVs9x1fMRqZSCcabSHXCKISt7NFurqp1ix/LKcRz bXqPlfT6UV57VPlrUyX4J7cAMuAPARFOSfqNYbQdr9T2hmpH2Gr43N2lnIYeq7Op OQ31ZYqmFe4UTOpWoysjv2lutrqaqA8x526GgE0StMrJ95hLeYaYPZOG99jIE0Kt yIOf5ajmfChri8kvorYQffVo0uNOMx8NRW5gyBMpJ7S7UlpfV+0y0LKqKGmJAdIu jWv6t1CaGYsvYEkVx4jeZHG4tPBJpi9alpGeO2+GGGYFeRyBfGdjmE5/m3w= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:37 2025 by rpki-client