$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iEuii309nkhd5cmFtZDTqy0L2Go.roa File: iEuii309nkhd5cmFtZDTqy0L2Go.roa (raw, json) Hash identifier: zToQ+sRzK82/seObPYOcOt9O6zgSFwdPEjMZ7iJRaPg= Subject key identifier: 88:4B:A2:8B:7D:3D:9E:48:5D:E5:C9:85:B5:90:D3:AB:2D:0B:D8:6A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DBE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iEuii309nkhd5cmFtZDTqy0L2Go.roa Signing time: Tue 01 Apr 2025 02:24:47 +0000 ROA not before: Tue 01 Apr 2025 02:24:47 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3518 (0xdbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:47 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=884BA28B7D3D9E485DE5C985B590D3AB2D0BD86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:99:a6:d3:c2:95:fe:32:9d:44:0b:59:02:99: 9f:dd:96:4a:d7:96:af:2b:55:04:30:de:f2:89:fc: 95:08:ed:63:81:c7:a5:1f:00:ef:d3:9e:c4:14:be: e5:63:eb:fa:c2:99:11:e6:07:19:7e:d7:d3:12:41: 75:f0:b3:60:46:58:8f:9b:f2:c2:56:ed:2a:09:18: 5d:6d:56:46:1a:a6:5b:81:ec:d5:5e:c6:10:c5:cd: 43:bb:b8:3a:c9:81:b1:f9:24:cc:2a:49:55:40:3f: 24:a7:06:b0:ab:52:e0:46:0a:f3:1d:b5:e5:5e:8c: de:3d:6f:a4:63:8d:50:a6:61:b7:b4:6f:60:a2:62: f8:63:9e:4e:45:27:28:72:7f:e9:81:87:63:de:79: da:a5:40:e9:e7:e2:cd:f4:5e:41:f1:ad:91:4a:ac: 82:a0:fc:b1:a2:a5:e3:5a:e6:09:4a:1d:54:fb:6d: f8:ca:5d:95:c5:02:23:87:ec:df:7e:0f:99:c9:9a: 5e:5b:bd:b5:ad:3f:7c:29:59:95:39:4f:ec:f5:c7: f0:12:a6:ef:41:4e:28:a5:0b:ae:2d:e3:91:52:01: da:d2:b9:1f:b1:35:9c:3f:80:58:58:ac:00:29:7d: ef:b7:b2:30:d3:5d:8c:a0:b5:6b:87:a1:21:f2:26: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4B:A2:8B:7D:3D:9E:48:5D:E5:C9:85:B5:90:D3:AB:2D:0B:D8:6A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iEuii309nkhd5cmFtZDTqy0L2Go.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.252.0/22 Signature Algorithm: sha256WithRSAEncryption d8:2d:2e:27:06:81:b0:79:67:80:38:c4:1e:51:88:c6:a3:df: 9c:9e:83:65:be:cc:af:47:0e:46:53:69:33:7f:52:b6:96:72: 7d:b2:3b:4e:5f:81:c4:5b:3c:0c:ea:df:52:78:58:15:55:3a: f2:78:8e:2e:fe:41:10:e4:43:db:ec:a4:9f:f0:6c:40:86:72: e8:b3:a4:de:70:40:72:d8:74:5a:a2:f1:00:97:08:e4:96:aa: c4:a7:fb:db:ad:87:bc:1a:25:03:82:fe:21:aa:be:69:08:d2: 61:53:18:7e:38:e2:e2:02:7e:10:aa:77:c1:10:d9:71:a8:da: 2c:59:47:a0:31:b6:70:0c:43:77:a7:f8:b1:3d:00:89:05:57: 76:a2:59:93:c0:61:ed:c7:fe:92:29:b2:ea:23:af:78:a4:b8: 12:24:3d:42:92:4b:d5:29:76:dd:34:a0:a4:1b:5e:92:61:02: 8e:09:e1:f5:fc:93:54:76:65:07:65:37:66:67:76:d2:48:0f: e3:ef:51:a0:16:bb:06:96:52:90:7b:1e:65:a9:24:4b:80:38: 23:ff:71:32:99:9d:3f:c3:4e:5c:26:30:3a:1b:cf:00:46:59: 74:0f:1a:95:9b:30:a7:c0:a1:6f:32:55:a0:17:21:3d:02:c8: b6:a7:2d:0f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0NDdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg4NEJBMjhCN0QzRDlF NDg1REU1Qzk4NUI1OTBEM0FCMkQwQkQ4NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrmabTwpX+Mp1EC1kCmZ/dlkrXlq8rVQQw3vKJ/JUI7WOBx6Uf AO/TnsQUvuVj6/rCmRHmBxl+19MSQXXws2BGWI+b8sJW7SoJGF1tVkYapluB7NVe xhDFzUO7uDrJgbH5JMwqSVVAPySnBrCrUuBGCvMdteVejN49b6RjjVCmYbe0b2Ci Yvhjnk5FJyhyf+mBh2PeedqlQOnn4s30XkHxrZFKrIKg/LGipeNa5glKHVT7bfjK XZXFAiOH7N9+D5nJml5bvbWtP3wpWZU5T+z1x/ASpu9BTiilC64t45FSAdrSuR+x NZw/gFhYrAApfe+3sjDTXYygtWuHoSHyJrfBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUiEuii309nkhd5cmFtZDTqy0L2GowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2lFdWlpMzA5bmtoZDVjbUZ0WkRUcXkwTDJHby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBS/wwDQYJKoZIhvcNAQELBQADggEBANgtLicGgbB5Z4A4xB5RiMaj35ye g2W+zK9HDkZTaTN/UraWcn2yO05fgcRbPAzq31J4WBVVOvJ4ji7+QRDkQ9vspJ/w bECGcuizpN5wQHLYdFqi8QCXCOSWqsSn+9uth7waJQOC/iGqvmkI0mFTGH444uIC fhCqd8EQ2XGo2ixZR6AxtnAMQ3en+LE9AIkFV3aiWZPAYe3H/pIpsuojr3ikuBIk PUKSS9Updt00oKQbXpJhAo4J4fX8k1R2ZQdlN2ZndtJID+PvUaAWuwaWUpB7HmWp JEuAOCP/cTKZnT/DTlwmMDobzwBGWXQPGpWbMKfAoW8yVaAXIT0CyLanLQ8= -----END CERTIFICATE-----Generated at Sat Apr 5 17:27:50 2025 by rpki-client