$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ptNr56s1h0Dp1Xg3l5Pk7bPR35U.roa File: ptNr56s1h0Dp1Xg3l5Pk7bPR35U.roa (raw, json) Hash identifier: KZM4iWs4gZGJa5p9Wyfa7D5WFZih2Eyt+2TFwjP7iok= Subject key identifier: A6:D3:6B:E7:AB:35:87:40:E9:D5:78:37:97:93:E4:ED:B3:D1:DF:95 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DC9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ptNr56s1h0Dp1Xg3l5Pk7bPR35U.roa Signing time: Tue 01 Apr 2025 02:27:17 +0000 ROA not before: Tue 01 Apr 2025 02:27:17 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3529 (0xdc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:17 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=A6D36BE7AB358740E9D578379793E4EDB3D1DF95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:f8:63:8a:5d:eb:95:92:ed:43:fb:73:88: 49:ad:a7:27:95:19:45:34:7a:20:ba:62:67:11:ee: 16:e4:c8:c5:62:51:ae:5f:18:5e:de:3c:34:f8:60: e1:e0:69:94:5f:5d:41:38:a5:3f:bb:3f:7f:4d:fb: 0a:5a:08:aa:5c:ca:c1:03:41:aa:8f:99:91:97:84: 7b:61:a1:63:02:33:c2:75:66:18:c9:42:ae:f8:e7: 6c:9f:76:c0:8a:2e:db:4a:75:e9:ef:12:09:46:5f: 09:db:78:f8:1e:b2:3c:b9:c5:03:c3:7f:03:4d:66: 8f:0d:62:7d:98:74:bd:37:e9:fa:a7:e4:d2:89:8c: 8f:db:2a:70:e4:54:4e:9a:b9:6e:e9:80:1c:f6:f2: 05:af:2d:a8:38:45:db:87:b1:f6:5e:cd:96:08:e2: 70:b6:25:66:95:a8:52:a5:8f:11:21:e5:eb:40:c8: 26:31:53:69:8b:d1:7a:e7:0e:ed:98:94:c1:fa:67: ed:41:5b:f9:f7:f5:4b:54:97:9f:0e:e5:c8:e9:e1: ae:ea:1b:2b:63:1f:92:8a:a2:15:8f:3c:19:95:29: af:db:cc:03:fb:28:65:24:1c:45:cd:32:74:59:1b: 5f:9b:f2:32:53:fd:b7:5f:68:50:59:f8:21:02:b3: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D3:6B:E7:AB:35:87:40:E9:D5:78:37:97:93:E4:ED:B3:D1:DF:95 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ptNr56s1h0Dp1Xg3l5Pk7bPR35U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.198.0/23 Signature Algorithm: sha256WithRSAEncryption da:87:7e:14:99:88:ee:ef:67:91:45:79:2e:92:4c:15:4f:ea: 01:3f:b9:61:c4:01:9a:9d:b3:88:79:43:70:28:5b:32:67:ce: 2e:ca:e0:cf:1b:9f:eb:21:da:bf:2e:c2:f2:0b:a9:60:2b:e0: 7d:a3:8f:cf:98:15:45:6e:c8:f5:e7:c8:04:43:fe:5d:a7:e3: b0:0f:bd:5d:b8:21:cb:da:d3:f8:78:c5:e9:c4:b2:af:66:f3: c1:0e:1a:bb:bb:c8:98:d3:ab:40:6e:a3:9f:b1:03:cf:f9:b6: c3:2c:17:27:55:5f:ba:f9:1c:22:1b:37:2f:47:0a:d2:35:cf: 87:e7:57:75:10:10:64:30:48:01:32:ba:b3:3e:ff:4f:be:b9: d9:14:62:59:44:10:44:3d:b4:3c:97:c7:ac:45:9c:5d:00:1e: 3e:4d:bd:7f:50:5d:bb:eb:b6:ef:e1:23:90:00:fa:54:0e:87: f0:b8:2f:34:35:e6:11:cc:d8:b3:d9:94:c8:e5:42:6c:33:0f: 13:5c:d4:2e:5d:8d:ec:d7:25:87:96:cb:42:94:06:e3:5b:7b: 47:0b:8b:e4:69:bb:f3:1d:73:85:ec:32:0e:1f:f2:63:d0:28: 5b:d2:64:65:d2:7d:a3:02:ea:a2:6e:91:9c:6c:76:a8:4b:cc: 19:08:fa:6e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MTdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE2RDM2QkU3QUIzNTg3 NDBFOUQ1NzgzNzk3OTNFNEVEQjNEMURGOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmyPhjil3rlZLtQ/tziEmtpyeVGUU0eiC6YmcR7hbkyMViUa5f GF7ePDT4YOHgaZRfXUE4pT+7P39N+wpaCKpcysEDQaqPmZGXhHthoWMCM8J1ZhjJ Qq7452yfdsCKLttKdenvEglGXwnbePgesjy5xQPDfwNNZo8NYn2YdL036fqn5NKJ jI/bKnDkVE6auW7pgBz28gWvLag4RduHsfZezZYI4nC2JWaVqFKljxEh5etAyCYx U2mL0XrnDu2YlMH6Z+1BW/n39UtUl58O5cjp4a7qGytjH5KKohWPPBmVKa/bzAP7 KGUkHEXNMnRZG1+b8jJT/bdfaFBZ+CECs/GJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUptNr56s1h0Dp1Xg3l5Pk7bPR35UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3B0TnI1NnMxaDBEcDFYZzNsNVBrN2JQUjM1VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS8YwDQYJKoZIhvcNAQELBQADggEBANqHfhSZiO7vZ5FFeS6STBVP6gE/ uWHEAZqds4h5Q3AoWzJnzi7K4M8bn+sh2r8uwvILqWAr4H2jj8+YFUVuyPXnyARD /l2n47APvV24Icva0/h4xenEsq9m88EOGru7yJjTq0Buo5+xA8/5tsMsFydVX7r5 HCIbNy9HCtI1z4fnV3UQEGQwSAEyurM+/0++udkUYllEEEQ9tDyXx6xFnF0AHj5N vX9QXbvrtu/hI5AA+lQOh/C4LzQ15hHM2LPZlMjlQmwzDxNc1C5djezXJYeWy0KU BuNbe0cLi+Rpu/Mdc4XsMg4f8mPQKFvSZGXSfaMC6qJukZxsdqhLzBkI+m4= -----END CERTIFICATE-----Generated at Sat Apr 5 17:42:10 2025 by rpki-client