$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hzXryJv0xF_TKvMl-rAZ33y7qcs.roa File: hzXryJv0xF_TKvMl-rAZ33y7qcs.roa (raw, json) Hash identifier: mVeVUXvlHogwQUSns/05pPUXuMAY0upZXAqA2nLTjXc= Subject key identifier: 87:35:EB:C8:9B:F4:C4:5F:D3:2A:F3:25:FA:B0:19:DF:7C:BB:A9:CB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C4E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hzXryJv0xF_TKvMl-rAZ33y7qcs.roa Signing time: Tue 01 Apr 2025 01:57:22 +0000 ROA not before: Tue 01 Apr 2025 01:57:22 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.78.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3150 (0xc4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:22 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=8735EBC89BF4C45FD32AF325FAB019DF7CBBA9CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:f9:66:52:de:ad:b7:48:2f:f6:8b:85:62: c1:4f:53:ef:6d:49:cf:4e:26:aa:45:96:cd:3a:61: a3:f3:c1:49:7a:df:5f:2d:9a:34:97:27:1c:be:21: ee:b4:6b:44:14:56:11:c4:a2:7a:85:fb:81:b2:fb: 0c:9a:55:f5:36:cb:33:62:67:03:cc:1f:02:cd:35: a9:47:49:a0:53:0e:6f:5e:ca:f9:59:e1:2f:61:cf: 3b:75:1e:33:40:1b:97:2b:38:b6:19:2b:51:92:49: 07:a9:1f:23:93:a7:5f:05:38:0e:d7:a5:7e:c1:35: ab:c3:fc:74:90:89:95:b8:6b:c6:af:98:87:04:8c: f7:54:ba:e6:ef:a8:48:3b:45:b6:44:01:be:ed:71: 48:37:59:f7:60:ae:6b:2a:47:2d:79:1a:c8:4e:67: 47:c0:e0:83:9f:57:74:e8:68:07:03:51:ad:7d:0a: 9b:5d:b9:77:bc:7b:66:d8:19:23:75:b5:a3:9b:da: 04:70:0c:1d:ea:de:23:50:e4:fd:df:4e:a5:73:dd: f2:af:94:25:46:eb:f9:94:0a:9d:d8:45:26:a8:5b: 86:12:e3:4a:ff:41:b5:6f:87:4a:9b:bf:1e:fe:b8: 68:78:8e:29:05:2a:16:ce:ca:6e:80:7d:9f:71:19: f4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:35:EB:C8:9B:F4:C4:5F:D3:2A:F3:25:FA:B0:19:DF:7C:BB:A9:CB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hzXryJv0xF_TKvMl-rAZ33y7qcs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.127.0/24 Signature Algorithm: sha256WithRSAEncryption da:ff:7f:b6:38:ec:15:4a:62:cf:ce:03:95:3e:68:c4:ad:d7: 84:e0:43:4a:3d:3d:79:bd:d3:ef:6a:bd:79:bf:f5:51:30:76: 97:02:cd:e2:8a:35:0a:49:b8:58:ff:8c:2e:cf:d6:b2:5a:6b: a0:a0:17:0f:c5:37:89:59:42:e9:ce:10:b8:11:78:0f:97:46: ec:5a:63:05:57:18:d2:b4:df:9f:31:5b:8c:4b:99:bd:73:92: c8:01:04:1b:88:a5:6a:f8:2c:43:10:4f:3d:d9:94:b2:cf:0d: e7:e7:9f:e8:a9:cc:e0:ff:ef:87:f3:1a:28:fb:13:28:f5:81: f0:de:82:3f:d1:4f:8f:c8:ec:f0:c4:a4:db:f0:db:fb:56:76: c7:08:76:c1:a0:23:81:9c:f8:7e:83:b7:16:2f:23:e6:df:38: 1e:17:b6:8f:96:3f:32:ed:e7:2d:72:ab:92:42:f0:07:fe:97: 37:ec:ca:25:61:c6:1a:5b:e8:5c:b0:78:43:5c:88:1b:5a:d8: c9:ec:d5:92:72:e5:0e:96:ee:ad:a8:df:52:32:8f:1e:7c:c5: 9f:cc:1c:4e:5d:36:78:cd:8f:f1:41:22:99:14:47:7f:87:d6: 3c:91:60:17:0b:ba:cc:44:68:03:06:31:22:0f:88:73:5c:4c: 3f:89:96:61 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MjJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg3MzVFQkM4OUJGNEM0 NUZEMzJBRjMyNUZBQjAxOURGN0NCQkE5Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV8vlmUt6tt0gv9ouFYsFPU+9tSc9OJqpFls06YaPzwUl6318t mjSXJxy+Ie60a0QUVhHEonqF+4Gy+wyaVfU2yzNiZwPMHwLNNalHSaBTDm9eyvlZ 4S9hzzt1HjNAG5crOLYZK1GSSQepHyOTp18FOA7XpX7BNavD/HSQiZW4a8avmIcE jPdUuubvqEg7RbZEAb7tcUg3WfdgrmsqRy15GshOZ0fA4IOfV3ToaAcDUa19Cptd uXe8e2bYGSN1taOb2gRwDB3q3iNQ5P3fTqVz3fKvlCVG6/mUCp3YRSaoW4YS40r/ QbVvh0qbvx7+uGh4jikFKhbOym6AfZ9xGfTfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhzXryJv0xF/TKvMl+rAZ33y7qcswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2h6WHJ5SnYweEZfVEt2TWwtckFaMzN5N3Fjcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABTn8wDQYJKoZIhvcNAQELBQADggEBANr/f7Y47BVKYs/OA5U+aMSt14Tg Q0o9PXm90+9qvXm/9VEwdpcCzeKKNQpJuFj/jC7P1rJaa6CgFw/FN4lZQunOELgR eA+XRuxaYwVXGNK0358xW4xLmb1zksgBBBuIpWr4LEMQTz3ZlLLPDefnn+ipzOD/ 74fzGij7Eyj1gfDegj/RT4/I7PDEpNvw2/tWdscIdsGgI4Gc+H6DtxYvI+bfOB4X to+WPzLt5y1yq5JC8Af+lzfsyiVhxhpb6FyweENciBta2Mns1ZJy5Q6W7q2o31Iy jx58xZ/MHE5dNnjNj/FBIpkUR3+H1jyRYBcLusxEaAMGMSIPiHNcTD+JlmE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:47:57 2025 by rpki-client