$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/k0nBsIEqBAaiOUOT94YV02-dSsY.roa File: k0nBsIEqBAaiOUOT94YV02-dSsY.roa (raw, json) Hash identifier: rM6L8JbOuas816KB0FiQT2Jj7IQvyw8Unw9E/bPKa08= Subject key identifier: 93:49:C1:B0:81:2A:04:06:A2:39:43:93:F7:86:15:D3:6F:9D:4A:C6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BD8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k0nBsIEqBAaiOUOT94YV02-dSsY.roa Signing time: Tue 01 Apr 2025 01:47:36 +0000 ROA not before: Tue 01 Apr 2025 01:47:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3032 (0xbd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:47:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=9349C1B0812A0406A2394393F78615D36F9D4AC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:42:13:44:73:1a:35:b8:2d:aa:23:98:21:54: 30:15:f7:a3:15:08:9a:94:4e:4a:82:68:3b:f8:4e: ea:33:60:8f:d7:cf:6e:94:f1:4f:28:da:ee:7a:a9: d9:16:7b:7a:c7:b1:38:04:05:20:ba:12:30:8d:13: 2e:e4:6c:c2:2a:5f:29:fa:63:6f:32:c8:2e:a1:ee: 9a:b1:4e:2b:fd:30:c0:7e:d9:c8:c8:18:56:62:25: 16:09:cd:45:2e:69:74:bc:63:54:6d:e5:f0:c9:94: c4:62:8a:cd:eb:92:ea:b9:99:70:3c:f9:72:d9:60: bb:3e:28:74:66:c8:11:3c:66:08:bc:9d:88:da:6a: c2:72:ff:64:e1:46:3b:20:4f:52:53:7f:6f:a9:fe: e3:e6:0a:cf:c2:14:6e:4f:b7:6c:44:9a:bd:ed:ed: fc:ec:be:64:fd:44:3c:98:fa:75:16:26:3b:d5:0f: 5c:fc:a1:9a:eb:b8:8a:f2:c1:b3:d6:60:d4:db:b7: 54:18:28:37:fa:b1:e9:fe:e7:5f:ad:d4:37:6d:a3: 1c:09:ea:11:4a:f0:dc:9b:e6:6d:69:f4:ca:1f:96: b4:85:ea:f5:d2:27:a1:7c:a4:79:00:a9:65:b9:5e: 30:b7:3d:5d:f1:61:68:d3:9a:10:65:cb:0b:c2:f8: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:49:C1:B0:81:2A:04:06:A2:39:43:93:F7:86:15:D3:6F:9D:4A:C6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k0nBsIEqBAaiOUOT94YV02-dSsY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.64.0/20 Signature Algorithm: sha256WithRSAEncryption 00:07:6c:8a:37:79:f7:a4:1c:48:0c:25:23:6d:91:b0:8c:3b: e0:d8:c2:89:3e:41:d7:f3:d2:19:13:0a:ef:06:0c:e8:95:42: bf:78:e4:5a:25:74:6e:87:d0:e5:80:20:fb:5a:84:89:d2:c2: c0:de:49:7a:36:e8:e1:05:14:6c:9e:c5:e3:69:9a:43:d5:ef: 40:80:98:b6:e7:06:f3:cf:16:7e:7b:4e:17:64:e4:cf:4e:17: 5f:a7:5e:2a:e6:87:f4:4d:ec:59:2a:b2:9b:3a:bd:fd:34:01: c9:55:94:fa:a1:6e:97:e2:cc:37:cd:ad:db:60:2b:bd:f3:eb: 34:21:58:ff:c4:7a:89:69:fb:5b:9e:fb:f3:e1:07:c1:3a:b9: bd:80:a2:84:9a:fa:58:1a:5c:8e:21:89:5b:c5:84:aa:67:09: 2a:69:fa:e1:09:21:c7:5c:58:21:ef:cd:d4:45:f6:bb:dd:cb: 6c:7d:0b:d6:a5:1b:b3:11:78:b1:cf:7a:70:b9:5f:26:33:73: 5d:1f:04:68:4b:b2:33:89:24:9c:99:5c:f2:8c:e4:d2:f7:8d: f6:9e:b3:ac:b4:36:d1:75:f9:7c:52:bc:38:16:95:d4:fa:95: 67:ac:2d:98:4d:e2:a7:12:c6:6c:c0:5c:24:0b:73:3f:fb:7c: 2d:14:65:dc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC9gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQ3MzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkzNDlDMUIwODEyQTA0 MDZBMjM5NDM5M0Y3ODYxNUQzNkY5RDRBQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiQhNEcxo1uC2qI5ghVDAV96MVCJqUTkqCaDv4TuozYI/Xz26U 8U8o2u56qdkWe3rHsTgEBSC6EjCNEy7kbMIqXyn6Y28yyC6h7pqxTiv9MMB+2cjI GFZiJRYJzUUuaXS8Y1Rt5fDJlMRiis3rkuq5mXA8+XLZYLs+KHRmyBE8Zgi8nYja asJy/2ThRjsgT1JTf2+p/uPmCs/CFG5Pt2xEmr3t7fzsvmT9RDyY+nUWJjvVD1z8 oZrruIrywbPWYNTbt1QYKDf6sen+51+t1DdtoxwJ6hFK8Nyb5m1p9MoflrSF6vXS J6F8pHkAqWW5XjC3PV3xYWjTmhBlywvC+B4DAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUk0nBsIEqBAaiOUOT94YV02+dSsYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2swbkJzSUVxQkFhaU9VT1Q5NFlWMDItZFNzWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQb5kAwDQYJKoZIhvcNAQELBQADggEBAAAHbIo3efekHEgMJSNtkbCMO+DY wok+Qdfz0hkTCu8GDOiVQr945FoldG6H0OWAIPtahInSwsDeSXo26OEFFGyexeNp mkPV70CAmLbnBvPPFn57Thdk5M9OF1+nXirmh/RN7Fkqsps6vf00AclVlPqhbpfi zDfNrdtgK73z6zQhWP/Eeolp+1ue+/PhB8E6ub2AooSa+lgaXI4hiVvFhKpnCSpp +uEJIcdcWCHvzdRF9rvdy2x9C9alG7MReLHPenC5XyYzc10fBGhLsjOJJJyZXPKM 5NL3jfaes6y0NtF1+XxSvDgWldT6lWesLZhN4qcSxmzAXCQLcz/7fC0UZdw= -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:37 2025 by rpki-client