$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mSe3C8rqwXpDb1Pl6NDS37WpQ2Q.roa File: mSe3C8rqwXpDb1Pl6NDS37WpQ2Q.roa (raw, json) Hash identifier: eQxyC8b4k4t3O+F6yY+lvzKv+YhbSbvtdwepNb7AezQ= Subject key identifier: 99:27:B7:0B:CA:EA:C1:7A:43:6F:53:E5:E8:D0:D2:DF:B5:A9:43:64 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B3E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mSe3C8rqwXpDb1Pl6NDS37WpQ2Q.roa Signing time: Thu 06 Mar 2025 06:52:40 +0000 ROA not before: Thu 06 Mar 2025 06:52:40 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2878 (0xb3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 6 06:52:40 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=9927B70BCAEAC17A436F53E5E8D0D2DFB5A94364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:e4:ca:de:cd:cf:df:92:d5:b0:47:4f:4d: 55:83:ef:6e:c7:ad:98:fb:53:55:21:7c:87:85:86: 16:d4:2f:f7:27:10:b6:09:26:5d:1b:d3:f0:73:6a: 73:3f:ed:10:a8:38:cd:0c:df:dc:b4:c8:6b:0e:c5: a2:57:85:0d:d8:5b:9b:32:19:d0:29:af:3c:6b:c4: db:85:a3:c5:22:c9:27:7a:de:e9:5b:95:ed:b5:de: fd:dc:e8:cc:9d:dc:46:5c:47:9d:f7:02:19:9b:91: db:bd:22:70:eb:00:e8:93:95:f7:1e:eb:29:36:3b: ee:20:54:17:98:81:dc:4b:a0:e8:55:b0:4e:84:7d: b3:5c:b1:5d:45:8d:0a:65:1f:8e:07:30:1f:00:c3: fe:80:c1:51:fc:77:07:86:1f:d5:af:63:fc:58:9a: 6e:7a:59:f9:f5:bc:98:90:8f:ae:ee:99:d4:d1:75: b6:99:67:ca:cc:d9:86:4b:08:9a:cf:c9:9e:5c:52: 45:7d:be:cc:d4:02:52:8c:f0:e6:69:31:6c:82:61: 88:69:8f:ac:0c:7c:21:f3:94:16:59:82:16:a3:b8: b8:73:f3:d4:4b:b9:b8:bb:54:6e:89:28:f1:61:bb: 4a:4c:e3:3b:c9:e2:f7:6d:ae:f7:11:8f:b8:bd:fe: 34:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:27:B7:0B:CA:EA:C1:7A:43:6F:53:E5:E8:D0:D2:DF:B5:A9:43:64 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mSe3C8rqwXpDb1Pl6NDS37WpQ2Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.118.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:d3:b7:95:33:fd:0d:8c:ef:36:02:0c:33:71:3e:77:b7:94: 9b:16:86:34:d3:74:dc:5a:b2:f0:c4:46:97:e6:cb:7f:28:ba: 0d:cf:69:0b:8c:e4:64:2f:97:80:78:02:29:91:d5:df:78:14: 7b:7e:12:5d:b7:29:83:2e:48:94:02:4d:67:7b:c2:fe:d5:4e: 3f:f8:f6:eb:e7:49:d9:c6:d2:69:5a:8d:89:b5:1a:58:bd:57: ee:2b:26:06:4c:20:1b:39:78:3a:ef:50:bf:5f:af:bf:ad:00: 46:8b:19:ca:1f:d6:72:c9:67:b4:43:cd:b5:d3:e5:22:2b:36: 28:9b:aa:39:b1:77:07:72:f8:46:18:e1:d8:52:2b:7e:b8:ad: 68:91:9d:cc:4d:20:e3:59:31:71:e4:0c:9f:27:17:ad:aa:6a: 53:a0:a3:10:9a:e3:ec:fa:92:0b:da:b3:9a:a4:81:26:78:e4: 95:d6:e7:65:7a:f6:d4:a9:da:b5:26:ac:50:51:17:bc:39:f4: 95:67:19:01:22:23:1e:d9:1b:20:a8:cd:2d:7f:b3:38:6b:d1: d0:c0:f6:17:93:4b:6a:a8:f1:6a:19:58:8a:bf:04:53:e4:ab: 8f:0b:0f:95:33:5b:23:52:b9:ad:d7:95:69:67:d9:25:e4:51: 33:23:80:23 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAzMDYw NjUyNDBaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk5MjdCNzBCQ0FFQUMx N0E0MzZGNTNFNUU4RDBEMkRGQjVBOTQzNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyxuTK3s3P35LVsEdPTVWD727HrZj7U1UhfIeFhhbUL/cnELYJ Jl0b0/BzanM/7RCoOM0M39y0yGsOxaJXhQ3YW5syGdAprzxrxNuFo8UiySd63ulb le213v3c6Myd3EZcR533Ahmbkdu9InDrAOiTlfce6yk2O+4gVBeYgdxLoOhVsE6E fbNcsV1FjQplH44HMB8Aw/6AwVH8dweGH9WvY/xYmm56Wfn1vJiQj67umdTRdbaZ Z8rM2YZLCJrPyZ5cUkV9vszUAlKM8OZpMWyCYYhpj6wMfCHzlBZZghajuLhz89RL ubi7VG6JKPFhu0pM4zvJ4vdtrvcRj7i9/jTTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmSe3C8rqwXpDb1Pl6NDS37WpQ2QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L21TZTNDOHJxd1hwRGIxUGw2TkRTMzdXcFEyUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS3YwDQYJKoZIhvcNAQELBQADggEBAE7Tt5Uz/Q2M7zYCDDNxPne3lJsW hjTTdNxasvDERpfmy38oug3PaQuM5GQvl4B4AimR1d94FHt+El23KYMuSJQCTWd7 wv7VTj/49uvnSdnG0mlajYm1Gli9V+4rJgZMIBs5eDrvUL9fr7+tAEaLGcof1nLJ Z7RDzbXT5SIrNiibqjmxdwdy+EYY4dhSK364rWiRncxNIONZMXHkDJ8nF62qalOg oxCa4+z6kgvas5qkgSZ45JXW52V69tSp2rUmrFBRF7w59JVnGQEiIx7ZGyCozS1/ szhr0dDA9heTS2qo8WoZWIq/BFPkq48LD5UzWyNSua3XlWln2SXkUTMjgCM= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:40 2025 by rpki-client