$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/meCpEqnYBzJmz9wodAN6-rGr8yQ.roa File: meCpEqnYBzJmz9wodAN6-rGr8yQ.roa (raw, json) Hash identifier: MeCx4YPTBRbAZ+1gTtvqSBKbzoBqE3gxDw+go6FqmHs= Subject key identifier: 99:E0:A9:12:A9:D8:07:32:66:CF:DC:28:74:03:7A:FA:B1:AB:F3:24 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B5A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/meCpEqnYBzJmz9wodAN6-rGr8yQ.roa Signing time: Tue 01 Apr 2025 01:33:21 +0000 ROA not before: Tue 01 Apr 2025 01:33:21 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:33:21 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=99E0A912A9D8073266CFDC2874037AFAB1ABF324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:68:0d:5d:e5:25:bf:41:23:a0:7d:c9:0c: 6e:1e:af:56:1e:bc:e2:e8:c4:16:63:f2:36:6c:91: 11:92:aa:f3:bc:08:fd:0b:0e:bc:57:1a:79:f1:41: 67:47:db:0a:9d:46:77:59:63:1f:52:e7:b0:ee:e4: 2d:f5:1d:c3:04:a8:d5:a8:9e:9a:a3:c9:cd:b4:64: 34:08:5c:7a:3a:28:ce:af:4e:b7:2a:37:fa:66:cc: fa:9d:93:f0:29:77:bb:45:60:1b:95:43:09:9e:9e: 98:28:8b:f7:29:f2:d3:da:46:0d:12:46:ad:ab:40: e3:d0:51:6f:a7:fe:58:d2:93:bd:28:f4:ab:e0:05: 88:00:d1:72:d5:9e:ca:cb:aa:7a:f2:fb:66:b8:80: 3c:1b:fd:8f:2f:e7:ec:9c:c5:48:a4:0a:f9:57:77: a6:a7:04:0d:4f:8d:10:66:aa:e2:54:9c:53:fa:b2: a5:24:37:d0:d0:2d:1d:1c:2d:c9:35:d2:5a:aa:9e: b8:ce:98:0b:d6:58:1e:51:62:54:c7:fc:05:8c:62: 34:9b:97:9a:d0:d4:d7:dd:94:a2:5a:1c:4b:27:ec: 8c:8a:70:1a:c1:71:56:02:f8:dc:8a:85:49:03:b6: b2:c2:b7:27:d9:4c:ec:6b:bd:0c:33:39:21:87:b0: 02:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E0:A9:12:A9:D8:07:32:66:CF:DC:28:74:03:7A:FA:B1:AB:F3:24 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/meCpEqnYBzJmz9wodAN6-rGr8yQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.188.0/22 Signature Algorithm: sha256WithRSAEncryption 62:0a:e3:84:23:4a:69:a6:81:7d:6e:a9:2f:7f:32:e5:40:cf: f8:1d:b4:e3:83:2a:a5:41:ec:0c:76:b0:6b:bc:ee:7e:66:58: 0d:72:e5:19:3f:a5:ef:72:91:d6:f8:e8:4e:33:cb:65:3d:66: 06:92:22:6d:9f:de:be:b8:01:6e:91:13:08:0f:0e:ba:08:9c: d8:df:18:18:db:d9:89:93:7a:5f:94:0b:04:c6:b4:6a:17:38: 71:38:17:6d:c2:3f:c0:35:c9:92:a3:cf:01:b7:2b:52:78:39: c1:66:6c:20:82:ca:ce:a0:ea:a5:0c:24:c9:fc:c4:d8:24:cf: a0:d5:63:6f:f0:18:c0:1d:a7:c2:05:6b:c5:70:66:5f:e0:74: 3c:7a:60:3f:2a:af:2c:55:79:98:84:c7:a4:28:09:85:16:a7: 54:39:6c:e5:76:9d:56:45:dc:f7:a2:14:7e:77:c9:8b:c7:d0: 6b:58:0e:29:d8:cf:03:f1:fa:23:3e:99:f3:dd:fa:75:9e:de: 55:f6:5c:97:90:0f:ae:6c:0c:c2:20:2a:6f:f6:e3:1d:c6:ef: 0f:1f:fa:3c:af:0c:c2:83:00:2d:38:b5:bb:e0:38:1a:c5:b9: 7c:0a:9e:3c:b0:2d:5c:4f:12:5c:d5:a2:bb:23:7b:75:7e:ba: 07:2f:02:be -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC1owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTMzMjFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk5RTBBOTEyQTlEODA3 MzI2NkNGREMyODc0MDM3QUZBQjFBQkYzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfc2gNXeUlv0EjoH3JDG4er1YevOLoxBZj8jZskRGSqvO8CP0L DrxXGnnxQWdH2wqdRndZYx9S57Du5C31HcMEqNWonpqjyc20ZDQIXHo6KM6vTrcq N/pmzPqdk/Apd7tFYBuVQwmenpgoi/cp8tPaRg0SRq2rQOPQUW+n/ljSk70o9Kvg BYgA0XLVnsrLqnry+2a4gDwb/Y8v5+ycxUikCvlXd6anBA1PjRBmquJUnFP6sqUk N9DQLR0cLck10lqqnrjOmAvWWB5RYlTH/AWMYjSbl5rQ1NfdlKJaHEsn7IyKcBrB cVYC+NyKhUkDtrLCtyfZTOxrvQwzOSGHsALLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmeCpEqnYBzJmz9wodAN6+rGr8yQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L21lQ3BFcW5ZQnpKbXo5d29kQU42LXJHcjh5US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBS7wwDQYJKoZIhvcNAQELBQADggEBAGIK44QjSmmmgX1uqS9/MuVAz/gd tOODKqVB7Ax2sGu87n5mWA1y5Rk/pe9ykdb46E4zy2U9ZgaSIm2f3r64AW6REwgP DroInNjfGBjb2YmTel+UCwTGtGoXOHE4F23CP8A1yZKjzwG3K1J4OcFmbCCCys6g 6qUMJMn8xNgkz6DVY2/wGMAdp8IFa8VwZl/gdDx6YD8qryxVeZiEx6QoCYUWp1Q5 bOV2nVZF3PeiFH53yYvH0GtYDinYzwPx+iM+mfPd+nWe3lX2XJeQD65sDMIgKm/2 4x3G7w8f+jyvDMKDAC04tbvgOBrFuXwKnjywLVxPElzVorsje3V+ugcvAr4= -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:23 2025 by rpki-client