$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gnl6jjAqN30_0PMczM3-MrpuSXw.roa File: gnl6jjAqN30_0PMczM3-MrpuSXw.roa (raw, json) Hash identifier: 8UvdMKSQGJ83YTk1fT5GRHVF9zkoeodgA6V/b3SW2kY= Subject key identifier: 82:79:7A:8E:30:2A:37:7D:3F:D0:F3:1C:CC:CD:FE:32:BA:6E:49:7C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D77 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gnl6jjAqN30_0PMczM3-MrpuSXw.roa Signing time: Tue 01 Apr 2025 02:19:26 +0000 ROA not before: Tue 01 Apr 2025 02:19:26 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3447 (0xd77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:26 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=82797A8E302A377D3FD0F31CCCCDFE32BA6E497C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:25:0b:52:72:59:cd:a2:0b:70:84:02:b7: a9:a6:50:d8:97:c6:e5:64:b9:ae:81:a2:95:2e:99: cf:d0:96:16:76:14:72:12:89:44:6c:69:5b:7f:f0: 81:d7:59:62:d6:c1:09:d2:f8:56:e8:ee:17:93:4c: 43:7e:d7:ee:d4:28:20:66:84:f5:8e:bd:4a:05:da: b4:5a:2a:71:cb:f3:19:cf:93:27:2f:c1:ae:e1:b4: 89:63:0c:af:07:2c:a0:7f:ec:84:83:04:e0:5f:c9: 49:ec:c8:08:72:29:e4:b3:c3:c5:9e:d9:57:61:02: 6e:bb:ee:19:83:97:cd:64:49:51:1b:63:35:03:4b: 42:c6:ba:a6:9b:63:18:88:27:97:68:46:54:83:dd: 25:d8:09:1f:b0:3f:ec:a8:73:8d:7e:71:15:86:27: 3a:3c:36:15:cd:d2:fd:92:cb:9e:42:9a:56:bd:b9: 1c:ae:2c:44:f3:31:1e:99:28:40:19:82:de:41:ee: 71:63:a3:fe:41:e5:47:aa:53:02:23:e6:10:84:6b: e4:e7:2f:18:e2:79:e2:a6:ef:50:10:da:7d:7f:cb: 3d:51:16:74:55:eb:bc:9e:fb:10:3d:20:83:5b:1d: 8c:71:0f:03:f1:12:a7:f3:2c:f4:2c:4c:e5:49:a0: 2d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:79:7A:8E:30:2A:37:7D:3F:D0:F3:1C:CC:CD:FE:32:BA:6E:49:7C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gnl6jjAqN30_0PMczM3-MrpuSXw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.239.0/24 Signature Algorithm: sha256WithRSAEncryption 18:ff:44:e9:fa:6c:e9:ec:60:3e:4c:52:3b:d6:ef:51:cc:0b: 75:b3:d6:db:c1:ac:75:f9:e2:2b:5e:5f:a5:a2:54:82:4e:82: c3:90:4a:1a:1b:58:3e:17:88:fc:11:42:f7:0e:37:24:53:d4: af:35:41:78:25:fd:1a:cf:1b:9e:37:6e:8d:9e:e5:98:f8:95: 3b:59:5c:e0:2d:d4:45:bb:02:76:c9:57:6a:c2:e3:e8:84:70: 6e:90:e8:e7:56:63:b6:cd:91:77:7f:b2:d0:a3:e3:1e:97:93: b3:06:92:5c:bf:00:b7:16:25:ed:fa:5e:ea:5c:ce:09:33:9f: 33:57:a7:af:db:19:d2:4f:0d:0d:a5:63:8d:c9:ac:fc:0c:14: b9:0c:9c:21:a4:0d:83:d5:be:92:a6:0b:ce:ac:83:e0:75:a9: b8:ec:6d:e0:e2:a6:eb:9d:4f:00:d9:c7:00:c8:c2:f7:d6:2c: 22:c5:ee:57:ba:01:e8:a4:b0:7c:c0:64:9b:d8:88:0b:a8:b2: 0c:a5:94:40:6c:3c:2b:ab:0d:b3:4a:b6:25:af:10:b0:42:5f: 38:0a:53:c6:a2:87:c9:16:e8:e2:17:bd:32:fe:22:4b:5e:c4: 0a:4a:1f:15:a2:6f:d3:1d:d4:81:49:56:8d:11:06:2a:61:25: 17:4e:f1:22 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MjZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgyNzk3QThFMzAyQTM3 N0QzRkQwRjMxQ0NDQ0RGRTMyQkE2RTQ5N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9jCULUnJZzaILcIQCt6mmUNiXxuVkua6BopUumc/QlhZ2FHIS iURsaVt/8IHXWWLWwQnS+Fbo7heTTEN+1+7UKCBmhPWOvUoF2rRaKnHL8xnPkycv wa7htIljDK8HLKB/7ISDBOBfyUnsyAhyKeSzw8We2VdhAm677hmDl81kSVEbYzUD S0LGuqabYxiIJ5doRlSD3SXYCR+wP+yoc41+cRWGJzo8NhXN0v2Sy55Cmla9uRyu LETzMR6ZKEAZgt5B7nFjo/5B5UeqUwIj5hCEa+TnLxjieeKm71AQ2n1/yz1RFnRV 67ye+xA9IINbHYxxDwPxEqfzLPQsTOVJoC13AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgnl6jjAqN30/0PMczM3+MrpuSXwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2dubDZqakFxTjMwXzBQTWN6TTMtTXJwdVNYdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABS+8wDQYJKoZIhvcNAQELBQADggEBABj/ROn6bOnsYD5MUjvW71HMC3Wz 1tvBrHX54iteX6WiVIJOgsOQShobWD4XiPwRQvcONyRT1K81QXgl/RrPG543bo2e 5Zj4lTtZXOAt1EW7AnbJV2rC4+iEcG6Q6OdWY7bNkXd/stCj4x6Xk7MGkly/ALcW Je36XupczgkznzNXp6/bGdJPDQ2lY43JrPwMFLkMnCGkDYPVvpKmC86sg+B1qbjs beDipuudTwDZxwDIwvfWLCLF7le6AeiksHzAZJvYiAuosgyllEBsPCurDbNKtiWv ELBCXzgKU8aih8kW6OIXvTL+IktexApKHxWib9Md1IFJVo0RBiphJRdO8SI= -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:31 2025 by rpki-client