$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/v3kuxL3DajfAlDTUSXl4JXeRvtA.roa File: v3kuxL3DajfAlDTUSXl4JXeRvtA.roa (raw, json) Hash identifier: NgxFkcT5xppyRTk1YqXfXojOEHlVH43lZn0vfkFMwwY= Subject key identifier: BF:79:2E:C4:BD:C3:6A:37:C0:94:34:D4:49:79:78:25:77:91:BE:D0 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E32 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v3kuxL3DajfAlDTUSXl4JXeRvtA.roa Signing time: Tue 01 Apr 2025 02:33:34 +0000 ROA not before: Tue 01 Apr 2025 02:33:34 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3634 (0xe32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:33:34 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=BF792EC4BDC36A37C09434D4497978257791BED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a0:07:51:51:cf:07:ba:29:9f:c8:1e:d0:58: 43:c7:6e:08:89:0e:da:b3:e6:fa:71:4f:5c:28:c4: 14:d6:a2:f7:f0:00:07:ed:55:ef:bf:0b:91:d5:54: 93:f0:0e:4c:34:c4:cd:47:64:43:ee:85:15:ec:4d: e7:f1:5a:90:51:7a:5c:6c:79:3c:d9:bb:d2:f0:85: 40:51:78:43:d4:2c:4f:3d:d8:85:c4:27:c8:d5:5f: cf:77:2f:7e:57:02:b9:f1:5a:2e:e4:83:c1:77:b5: b5:32:e4:a3:bf:98:9a:a5:51:48:be:44:dd:d7:40: f9:2e:e9:5a:15:34:84:c9:80:7d:9e:97:c2:d2:19: 18:64:62:7d:af:14:b5:59:2c:3d:50:2e:88:bf:d2: 1f:09:c7:00:eb:28:81:fc:fb:cc:fa:e9:59:8e:d7: bd:29:81:f2:cd:d6:06:7a:6f:7c:4d:0c:d3:b1:eb: ab:07:9e:18:39:0e:ab:56:2f:70:6b:b5:14:33:12: 90:cc:ba:6d:6e:67:de:e4:67:c3:f4:e6:e0:83:94: 15:bc:93:56:00:09:9f:9e:59:53:7f:05:db:3e:1b: 48:82:42:fa:b2:2b:0c:a0:02:5c:f4:f7:05:98:68: 91:38:05:89:eb:5e:c0:ee:ef:7b:36:b3:63:94:c2: 57:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:79:2E:C4:BD:C3:6A:37:C0:94:34:D4:49:79:78:25:77:91:BE:D0 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v3kuxL3DajfAlDTUSXl4JXeRvtA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.34.0/23 Signature Algorithm: sha256WithRSAEncryption 29:61:47:27:30:e2:f6:1e:a9:05:c7:9a:f9:46:22:8f:8d:78: 00:95:0f:e7:45:10:86:81:68:53:79:45:6e:0a:5a:13:38:1f: bd:47:bb:03:e0:70:56:80:93:37:52:f4:32:cb:da:16:3f:16: 7e:ed:e3:f7:5f:bf:58:f9:26:56:c2:55:7d:f7:11:83:74:fe: 35:c3:b6:03:2a:b5:1e:04:8d:10:43:42:2f:b3:81:7b:b1:b2: 69:52:32:cb:a8:52:42:12:b9:02:a0:5f:84:53:26:5a:ea:a3: ad:7d:76:84:47:97:d2:82:69:57:95:f4:fa:f7:8e:b3:6f:ef: b8:9a:88:13:5f:b3:23:af:94:1c:21:f8:09:fb:0c:05:3c:92: 75:8f:47:1e:bb:1e:68:c5:dc:e2:24:84:4c:30:0c:32:f6:ac: 8a:dd:77:fc:e0:14:27:1d:8c:8d:96:a7:53:cc:a7:36:d6:25: 17:2e:99:a7:2d:4d:83:45:7a:51:bf:59:a0:c1:6e:db:e4:9b: 51:02:c0:56:73:5c:0d:f4:5e:fa:6c:81:a2:eb:db:a4:79:5d: d6:75:97:99:7a:65:c0:fe:11:03:b9:76:de:dc:d5:c8:af:50: 22:cd:dd:27:72:b5:cf:c3:19:47:77:2b:bd:b8:b5:bd:78:be: 34:2c:d1:f5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDjIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMzMzRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEJGNzkyRUM0QkRDMzZB MzdDMDk0MzRENDQ5Nzk3ODI1Nzc5MUJFRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgoAdRUc8HuimfyB7QWEPHbgiJDtqz5vpxT1woxBTWovfwAAft Ve+/C5HVVJPwDkw0xM1HZEPuhRXsTefxWpBRelxseTzZu9LwhUBReEPULE892IXE J8jVX893L35XArnxWi7kg8F3tbUy5KO/mJqlUUi+RN3XQPku6VoVNITJgH2el8LS GRhkYn2vFLVZLD1QLoi/0h8JxwDrKIH8+8z66VmO170pgfLN1gZ6b3xNDNOx66sH nhg5DqtWL3BrtRQzEpDMum1uZ97kZ8P05uCDlBW8k1YACZ+eWVN/Bds+G0iCQvqy KwygAlz09wWYaJE4BYnrXsDu73s2s2OUwlf3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUv3kuxL3DajfAlDTUSXl4JXeRvtAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3Yza3V4TDNEYWpmQWxEVFVTWGw0SlhlUnZ0QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTyIwDQYJKoZIhvcNAQELBQADggEBAClhRycw4vYeqQXHmvlGIo+NeACV D+dFEIaBaFN5RW4KWhM4H71HuwPgcFaAkzdS9DLL2hY/Fn7t4/dfv1j5JlbCVX33 EYN0/jXDtgMqtR4EjRBDQi+zgXuxsmlSMsuoUkISuQKgX4RTJlrqo619doRHl9KC aVeV9Pr3jrNv77iaiBNfsyOvlBwh+An7DAU8knWPRx67HmjF3OIkhEwwDDL2rIrd d/zgFCcdjI2Wp1PMpzbWJRcumactTYNFelG/WaDBbtvkm1ECwFZzXA30XvpsgaLr 26R5XdZ1l5l6ZcD+EQO5dt7c1civUCLN3Sdytc/DGUd3K724tb14vjQs0fU= -----END CERTIFICATE-----Generated at Sat Apr 5 17:43:59 2025 by rpki-client