$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/m4BaSxQxForo99GJXWV-HiUmOiQ.roa File: m4BaSxQxForo99GJXWV-HiUmOiQ.roa (raw, json) Hash identifier: fPjrvozG0/Zz61n96c/kmn8IY2uZvLmXJ3729b9T/cQ= Subject key identifier: 9B:80:5A:4B:14:31:16:8A:E8:F7:D1:89:5D:65:7E:1E:25:26:3A:24 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B3C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m4BaSxQxForo99GJXWV-HiUmOiQ.roa Signing time: Thu 06 Mar 2025 06:48:35 +0000 ROA not before: Thu 06 Mar 2025 06:48:35 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2876 (0xb3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 6 06:48:35 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=9B805A4B1431168AE8F7D1895D657E1E25263A24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e6:f5:4d:99:b4:b4:89:fa:c4:d9:24:16:39: d8:69:fa:21:60:d6:14:dc:d5:f7:10:7e:78:38:4f: 15:bd:e2:1d:d9:6b:38:78:9d:56:89:71:e3:e7:a7: 01:22:c9:4b:dc:2b:73:cb:5e:0e:1c:81:40:03:83: c9:c8:94:d2:1e:78:95:3c:29:6f:70:b2:63:a3:7a: 3e:bc:d7:75:d4:3b:ef:91:d1:34:1f:f7:c1:d5:7a: 01:af:42:69:c2:66:d9:05:44:9d:cf:c3:25:64:34: 0a:d1:35:c4:0f:0b:82:ff:3c:d7:ea:c1:6c:f8:f4: b4:0e:18:f9:e1:79:4d:be:ee:46:ec:64:05:5b:8a: ae:80:39:52:1c:1d:66:21:45:8b:34:2f:be:a3:15: c8:3a:b8:e1:28:4b:79:74:6a:a2:4c:bc:cc:32:dd: a3:d5:8b:bb:52:99:17:27:d4:4d:ab:68:5a:4d:c1: 5c:7c:e9:02:0a:22:01:c4:fa:dd:16:dc:10:9a:cb: 02:4f:87:d3:5e:c8:7d:2b:f2:fd:46:4b:51:18:9a: 42:3a:f6:ce:9d:15:31:25:4c:71:1d:45:47:7a:27: 86:e3:5e:c1:46:fe:d2:d5:75:a5:62:28:3e:5e:db: 58:36:4b:92:a9:5e:04:d2:97:64:39:4f:29:27:96: 0c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:80:5A:4B:14:31:16:8A:E8:F7:D1:89:5D:65:7E:1E:25:26:3A:24 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m4BaSxQxForo99GJXWV-HiUmOiQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.116.0/24 Signature Algorithm: sha256WithRSAEncryption 70:2b:ed:44:8c:35:7e:d1:cb:f7:26:25:09:3a:84:f9:a7:ae: dc:f1:b6:e2:41:1a:bc:63:77:18:c2:35:93:20:f9:d2:62:b6: b8:c1:2c:2c:61:4e:40:4e:f6:4a:00:74:29:d9:ce:13:34:1b: 3b:e3:37:6e:67:6d:47:03:a8:6f:c7:59:5d:9f:e3:03:bc:00: bc:19:e4:10:22:d4:d4:b2:a0:05:78:6e:42:bc:55:53:19:9c: ec:f9:a6:21:d7:7d:83:29:92:a3:b6:0d:dc:4e:6b:39:cc:96: a5:49:d6:8a:63:60:3c:8a:92:30:6a:b5:af:fb:e8:ab:ee:d5: 35:f7:7e:51:6d:f0:82:15:b9:4e:c9:11:46:2e:e3:1b:92:64: 0f:65:f0:67:98:1b:a1:1a:b6:79:19:96:12:de:70:8f:9d:f4: 61:c9:47:1b:ad:ec:a5:cc:fe:18:08:8c:99:42:ed:cd:f8:b2: 96:42:ef:99:44:ef:c9:dd:a1:d5:7a:e0:38:e8:97:29:58:3a: b1:fe:64:0c:04:06:3e:f4:8e:73:76:b2:36:22:7a:8e:13:d9: 3c:f8:57:e4:91:2f:b0:36:4e:86:68:25:4c:91:22:7e:4f:3e: cf:17:6a:bc:8e:9b:a6:42:eb:99:0e:9c:52:bc:e4:1b:4f:c9: 25:9b:7d:63 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAzMDYw NjQ4MzVaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlCODA1QTRCMTQzMTE2 OEFFOEY3RDE4OTVENjU3RTFFMjUyNjNBMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr5vVNmbS0ifrE2SQWOdhp+iFg1hTc1fcQfng4TxW94h3Zazh4 nVaJcePnpwEiyUvcK3PLXg4cgUADg8nIlNIeeJU8KW9wsmOjej6813XUO++R0TQf 98HVegGvQmnCZtkFRJ3PwyVkNArRNcQPC4L/PNfqwWz49LQOGPnheU2+7kbsZAVb iq6AOVIcHWYhRYs0L76jFcg6uOEoS3l0aqJMvMwy3aPVi7tSmRcn1E2raFpNwVx8 6QIKIgHE+t0W3BCaywJPh9NeyH0r8v1GS1EYmkI69s6dFTElTHEdRUd6J4bjXsFG /tLVdaViKD5e21g2S5KpXgTSl2Q5TyknlgyFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUm4BaSxQxForo99GJXWV+HiUmOiQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L200QmFTeFF4Rm9ybzk5R0pYV1YtSGlVbU9pUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABS3QwDQYJKoZIhvcNAQELBQADggEBAHAr7USMNX7Ry/cmJQk6hPmnrtzx tuJBGrxjdxjCNZMg+dJitrjBLCxhTkBO9koAdCnZzhM0GzvjN25nbUcDqG/HWV2f 4wO8ALwZ5BAi1NSyoAV4bkK8VVMZnOz5piHXfYMpkqO2DdxOaznMlqVJ1opjYDyK kjBqta/76Kvu1TX3flFt8IIVuU7JEUYu4xuSZA9l8GeYG6EatnkZlhLecI+d9GHJ Rxut7KXM/hgIjJlC7c34spZC75lE78ndodV64DjolylYOrH+ZAwEBj70jnN2sjYi eo4T2Tz4V+SRL7A2ToZoJUyRIn5PPs8XaryOm6ZC65kOnFK85BtPySWbfWM= -----END CERTIFICATE-----Generated at Sat Apr 5 17:37:43 2025 by rpki-client