$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uA-Qzqsxlzax9WIgci7gky7dVnc.roa File: uA-Qzqsxlzax9WIgci7gky7dVnc.roa (raw, json) Hash identifier: MlY0VYCv3qnsydu1D3u4UnjrN2xAv6HDdTEGSu0LLOo= Subject key identifier: B8:0F:90:CE:AB:31:97:36:B1:F5:62:20:72:2E:E0:93:2E:DD:56:77 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C57 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uA-Qzqsxlzax9WIgci7gky7dVnc.roa Signing time: Tue 01 Apr 2025 01:57:26 +0000 ROA not before: Tue 01 Apr 2025 01:57:26 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.67.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:26 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=B80F90CEAB319736B1F56220722EE0932EDD5677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:88:de:1a:e0:e1:df:e1:83:ff:48:1d:5d:ed: 31:7b:75:46:e0:36:0c:9b:63:06:88:be:86:ff:4e: d3:8d:6c:55:c5:4f:1e:b6:0b:4e:c3:43:24:49:a8: 7a:66:6d:ec:a7:11:d4:4f:09:10:fc:9d:e4:84:95: 65:95:6f:5d:fe:fb:f2:c4:32:08:7f:f8:f6:a9:52: a5:c4:81:f5:5a:5c:09:39:49:e5:72:8f:db:1a:5e: 0e:42:4f:f1:a5:fd:70:9c:f3:a4:74:a0:74:53:bd: 33:f6:9e:de:28:40:dc:08:5d:0c:31:99:56:f2:20: 85:1c:06:45:0c:25:4f:e5:f3:ab:a7:96:dc:c2:73: 4c:fc:8c:ed:cb:0d:15:09:7c:26:e3:59:a6:86:a8: 00:6c:30:c0:ce:8a:d3:d8:70:ff:76:f8:80:c7:cb: ae:06:4c:b2:0f:bb:54:2f:5b:2c:0a:71:97:54:6c: b0:7e:c1:06:58:d7:2f:17:42:67:07:e0:ca:29:51: 3d:32:31:ba:21:13:ec:7c:93:af:36:de:48:8a:ad: ca:c1:9e:67:e2:55:a3:70:50:60:84:6c:b0:46:fa: 59:2d:ea:1f:86:10:02:e4:84:e1:73:44:ca:b3:21: 14:b4:b0:37:60:d0:31:a4:2a:19:a2:9f:68:ca:1b: ad:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0F:90:CE:AB:31:97:36:B1:F5:62:20:72:2E:E0:93:2E:DD:56:77 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uA-Qzqsxlzax9WIgci7gky7dVnc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.232.0/22 Signature Algorithm: sha256WithRSAEncryption 04:82:ec:8d:c0:a3:a5:fd:89:3a:76:4e:3e:c9:8a:09:80:1c: b7:a8:53:81:45:37:c6:72:61:62:6d:f5:49:b1:04:1a:dc:95: 08:28:2a:80:0a:72:7f:fc:63:d5:9c:b7:6b:ee:1b:46:15:d5: d0:d8:52:0b:52:c1:70:d0:cf:4b:b2:d8:4c:2e:59:b3:a6:5e: 88:92:8e:4a:45:23:0d:75:87:74:c7:5f:57:be:e6:c3:1e:b9: 3c:25:e5:84:92:2e:08:36:58:b0:86:5d:0f:08:93:f3:36:48: 03:6c:4d:75:66:08:84:0d:d2:43:83:52:c2:e9:03:2d:52:a4: 98:ca:ec:e3:54:40:3e:b6:01:bc:cd:39:f6:04:5b:27:44:8e: dc:b8:f4:d9:d3:10:31:fb:ec:b1:d8:25:ff:2e:ed:99:7b:92: 0a:7f:d8:55:b6:81:c8:a5:87:7c:b1:93:da:99:6f:69:1f:11: ca:e7:ee:b9:0b:21:ad:62:bc:d0:ec:ad:0b:59:f7:14:b5:0c: 41:ba:31:ec:17:84:de:a9:c8:52:48:19:9c:eb:f9:45:93:30: 6d:ad:f9:83:11:c7:40:0b:2b:bb:f3:f7:61:f9:63:2a:8e:97: 80:0b:e4:83:9a:80:eb:74:f6:41:8b:df:c8:a0:e6:c3:57:7e: a9:52:59:71 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MjZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI4MEY5MENFQUIzMTk3 MzZCMUY1NjIyMDcyMkVFMDkzMkVERDU2NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsiN4a4OHf4YP/SB1d7TF7dUbgNgybYwaIvob/TtONbFXFTx62 C07DQyRJqHpmbeynEdRPCRD8neSElWWVb13++/LEMgh/+PapUqXEgfVaXAk5SeVy j9saXg5CT/Gl/XCc86R0oHRTvTP2nt4oQNwIXQwxmVbyIIUcBkUMJU/l86unltzC c0z8jO3LDRUJfCbjWaaGqABsMMDOitPYcP92+IDHy64GTLIPu1QvWywKcZdUbLB+ wQZY1y8XQmcH4MopUT0yMbohE+x8k6823kiKrcrBnmfiVaNwUGCEbLBG+lkt6h+G EALkhOFzRMqzIRS0sDdg0DGkKhmin2jKG62bAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUuA+Qzqsxlzax9WIgci7gky7dVncwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3VBLVF6cXN4bHpheDlXSWdjaTdna3k3ZFZuYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBQ+gwDQYJKoZIhvcNAQELBQADggEBAASC7I3Ao6X9iTp2Tj7JigmAHLeo U4FFN8ZyYWJt9UmxBBrclQgoKoAKcn/8Y9Wct2vuG0YV1dDYUgtSwXDQz0uy2Ewu WbOmXoiSjkpFIw11h3THX1e+5sMeuTwl5YSSLgg2WLCGXQ8Ik/M2SANsTXVmCIQN 0kODUsLpAy1SpJjK7ONUQD62AbzNOfYEWydEjty49NnTEDH77LHYJf8u7Zl7kgp/ 2FW2gcilh3yxk9qZb2kfEcrn7rkLIa1ivNDsrQtZ9xS1DEG6MewXhN6pyFJIGZzr +UWTMG2t+YMRx0ALK7vz92H5YyqOl4AL5IOagOt09kGL38ig5sNXfqlSWXE= -----END CERTIFICATE-----Generated at Sat Apr 5 23:10:52 2025 by rpki-client