$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y2W0UfON7fSBWHllad_2K9CgFSs.roa File: y2W0UfON7fSBWHllad_2K9CgFSs.roa (raw, json) Hash identifier: pTDi7T0tE66clHLLp0fcdzJz3xpHOQQi399qcDYgTE4= Subject key identifier: CB:65:B4:51:F3:8D:ED:F4:81:58:79:65:69:DF:F6:2B:D0:A0:15:2B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B91 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y2W0UfON7fSBWHllad_2K9CgFSs.roa Signing time: Tue 01 Apr 2025 01:39:45 +0000 ROA not before: Tue 01 Apr 2025 01:39:45 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 183.74.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2961 (0xb91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:39:45 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=CB65B451F38DEDF48158796569DFF62BD0A0152B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:fb:94:56:74:4b:d1:af:d0:e9:14:be:cb: f8:06:80:50:42:c9:c2:de:5f:3b:c0:a8:69:54:4e: f5:e2:d6:bf:b0:ab:22:d6:a0:88:80:a2:a1:b8:82: f5:b5:9f:83:60:07:b2:87:65:44:de:e7:d8:d3:04: 72:16:67:2c:53:b7:54:d9:3a:ca:7a:5e:ef:cc:28: 1d:44:ed:7e:7e:51:cc:ff:94:43:36:89:4f:dc:d3: 06:46:41:29:54:53:c5:f6:77:c8:a4:c7:36:16:2a: ea:20:61:55:28:5e:2b:db:f8:cf:39:ae:3c:cf:44: 5a:7a:d6:1b:30:f7:7a:5f:8e:e2:1e:1a:78:06:35: ce:46:00:84:e3:af:58:c6:d4:a1:16:78:c8:15:01: 7e:0e:57:2f:ee:8c:de:7a:ea:95:e4:e4:88:d8:3e: 68:0a:ed:2a:a5:c0:b4:03:ee:b2:88:ea:15:93:24: f3:90:ed:bb:aa:f5:d7:15:54:ad:9c:ee:82:d2:04: 9d:ea:ae:fa:5e:e5:7d:29:db:5e:81:d3:cf:fe:83: 7d:58:ab:c7:23:5f:66:56:b0:5a:8c:0a:75:a5:c5: 63:c1:79:b4:ff:b6:a1:6f:f1:43:3a:b3:41:ae:cc: 62:eb:19:90:e1:8c:dc:ff:b0:b8:13:3d:95:4e:6d: e7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:65:B4:51:F3:8D:ED:F4:81:58:79:65:69:DF:F6:2B:D0:A0:15:2B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y2W0UfON7fSBWHllad_2K9CgFSs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.74.192.0/23 Signature Algorithm: sha256WithRSAEncryption ab:a2:ef:58:ab:ad:60:e2:af:33:a9:d4:a9:b5:a3:11:d8:d3: f0:13:a7:44:56:7e:9a:09:57:69:8c:4e:d7:ac:b6:fb:81:0a: 4f:a2:77:0b:6d:7b:d1:b7:73:23:08:9e:7c:a3:f1:a9:7f:2a: 33:e0:aa:ce:2d:f3:24:05:3a:92:9e:c1:7a:7c:e3:72:80:09: 4d:17:d9:82:34:54:bb:b6:66:91:34:2a:55:42:da:f3:34:b7: 1f:dc:62:ad:c4:0e:86:40:7a:bd:6b:ce:3a:7b:5c:65:2c:7f: 5a:fc:26:3d:40:a7:0b:48:d0:2e:43:dd:b0:8a:bd:02:5d:a8: 0c:b6:6a:47:a5:ec:cc:ad:0d:04:15:31:08:89:78:43:bd:8c: 33:a1:a6:0b:b6:42:15:9a:2b:61:30:8e:05:f9:c8:64:2a:5f: 25:83:a8:2c:80:16:73:16:6a:27:06:e5:20:44:c6:c3:9c:3c: 95:c2:de:53:da:cf:84:0c:8d:d8:7e:f1:11:b3:f5:9b:54:7b: d4:72:cb:fa:b4:d7:22:ef:14:e8:4b:85:2e:f4:1a:ad:96:ae: d4:b4:5b:3e:72:b2:9b:cb:7d:5b:e5:28:8f:ba:ba:ce:76:f1: 7f:f4:b6:f6:b4:56:d9:7c:7a:7c:0a:c3:48:d1:e9:e8:f6:bc: 43:ac:41:05 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC5EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM5NDVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENCNjVCNDUxRjM4REVE RjQ4MTU4Nzk2NTY5REZGNjJCRDBBMDE1MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpqPuUVnRL0a/Q6RS+y/gGgFBCycLeXzvAqGlUTvXi1r+wqyLW oIiAoqG4gvW1n4NgB7KHZUTe59jTBHIWZyxTt1TZOsp6Xu/MKB1E7X5+Ucz/lEM2 iU/c0wZGQSlUU8X2d8ikxzYWKuogYVUoXivb+M85rjzPRFp61hsw93pfjuIeGngG Nc5GAITjr1jG1KEWeMgVAX4OVy/ujN566pXk5IjYPmgK7SqlwLQD7rKI6hWTJPOQ 7buq9dcVVK2c7oLSBJ3qrvpe5X0p216B08/+g31Yq8cjX2ZWsFqMCnWlxWPBebT/ tqFv8UM6s0GuzGLrGZDhjNz/sLgTPZVObeeJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUy2W0UfON7fSBWHllad/2K9CgFSswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3kyVzBVZk9ON2ZTQldIbGxhZF8ySzlDZ0ZTcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAG3SsAwDQYJKoZIhvcNAQELBQADggEBAKui71irrWDirzOp1Km1oxHY0/AT p0RWfpoJV2mMTtestvuBCk+idwtte9G3cyMInnyj8al/KjPgqs4t8yQFOpKewXp8 43KACU0X2YI0VLu2ZpE0KlVC2vM0tx/cYq3EDoZAer1rzjp7XGUsf1r8Jj1ApwtI 0C5D3bCKvQJdqAy2akel7MytDQQVMQiJeEO9jDOhpgu2QhWaK2EwjgX5yGQqXyWD qCyAFnMWaicG5SBExsOcPJXC3lPaz4QMjdh+8RGz9ZtUe9Ryy/q01yLvFOhLhS70 Gq2WrtS0Wz5yspvLfVvlKI+6us528X/0tva0Vtl8enwKw0jR6ej2vEOsQQU= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:27 2025 by rpki-client