$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ygEO6x0rlbIUkskgLsPWPcld2uw.roa File: ygEO6x0rlbIUkskgLsPWPcld2uw.roa (raw, json) Hash identifier: wQfmc7qNUtzyJfV043VF2yj8rBdVKRcdd1OiVtHlgYg= Subject key identifier: CA:01:0E:EB:1D:2B:95:B2:14:92:C9:20:2E:C3:D6:3D:C9:5D:DA:EC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E14 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ygEO6x0rlbIUkskgLsPWPcld2uw.roa Signing time: Tue 01 Apr 2025 02:31:31 +0000 ROA not before: Tue 01 Apr 2025 02:31:31 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 183.75.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3604 (0xe14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:31:31 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=CA010EEB1D2B95B21492C9202EC3D63DC95DDAEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:52:f3:fb:ad:05:6e:b1:66:5d:b7:ff:44: 38:2c:5a:47:8b:ca:b4:1d:d0:d5:c1:96:65:d6:06: 06:f7:d8:66:0b:a1:bb:10:af:44:54:bd:46:86:dc: ed:f0:28:0e:97:75:66:d9:5f:22:23:ad:8a:e5:66: 5a:77:d7:01:ed:04:9c:62:aa:6a:26:47:89:a4:34: 47:49:e8:71:48:8e:80:7d:3e:77:04:5b:82:39:95: 26:e0:06:01:fe:ab:01:4f:bf:57:9e:c4:92:6e:a8: 8b:e3:e9:97:ab:d7:81:1c:77:54:85:93:9f:05:eb: d1:fb:eb:bb:5a:b9:2c:c1:c5:70:1a:17:e2:82:03: 54:ae:33:a2:c2:d6:b3:82:15:48:53:85:b2:80:07: b9:98:14:75:04:20:e4:05:0c:af:06:e0:2d:4f:f8: 38:dd:bd:43:2f:ad:54:30:49:a1:56:98:5a:8e:96: fd:db:a9:a2:bd:af:24:72:f9:b1:cc:88:09:12:93: 8f:94:6b:09:ab:50:da:b7:26:7c:86:c5:ae:05:3d: c5:6c:3f:34:84:85:cb:0f:b8:e2:0a:83:c6:b7:52: 31:e4:15:b4:1d:46:c1:a6:37:7f:63:0f:09:34:b6: 4d:4e:37:af:2f:2a:e2:9d:f0:a5:21:02:c4:1f:01: cd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:01:0E:EB:1D:2B:95:B2:14:92:C9:20:2E:C3:D6:3D:C9:5D:DA:EC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ygEO6x0rlbIUkskgLsPWPcld2uw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.75.235.0/24 Signature Algorithm: sha256WithRSAEncryption df:cb:f3:7f:69:b3:38:03:a6:77:34:00:c8:21:29:6f:50:6f: d3:5e:f2:3b:08:70:17:4c:2b:fc:80:80:f0:12:f8:e2:b5:ef: 48:4a:83:26:7a:87:a0:99:c7:13:01:a6:20:93:73:4e:8d:65: 45:d9:6e:c7:a2:d4:b4:f9:c3:e0:83:a0:ed:3e:70:6e:52:da: b2:63:4c:77:af:4d:42:ac:5e:f9:0f:a9:cb:84:0e:18:95:5b: ae:70:80:db:d9:18:7e:a8:59:3b:56:0f:8c:89:14:73:d4:46: bf:11:a2:e7:7c:39:c2:4f:c2:5c:af:7e:b1:6d:6e:b3:89:ad: 56:bd:20:2f:51:b5:a6:e2:26:5c:a3:36:d4:69:7b:a4:8e:95: 7c:6d:66:ab:f4:0e:ce:13:d6:d2:dd:b9:cc:76:25:ae:4a:46: f0:c9:ca:2f:be:e9:e8:42:5c:db:1b:dc:0c:40:be:69:8c:8e: 4c:f8:a0:e5:ae:b5:ed:ea:05:f5:11:a0:a9:7b:3a:94:c1:08: 7d:22:da:e6:08:0d:7f:e8:f2:66:bf:7d:b9:7e:99:80:f7:90: f1:33:8f:c4:95:9b:0e:ad:be:c5:78:49:7b:3a:24:b1:34:e3: 49:11:7c:42:fa:f0:e3:cd:41:13:cb:3d:20:da:b1:33:e2:c0: f6:6d:7d:58 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMxMzFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENBMDEwRUVCMUQyQjk1 QjIxNDkyQzkyMDJFQzNENjNEQzk1RERBRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt/FLz+60FbrFmXbf/RDgsWkeLyrQd0NXBlmXWBgb32GYLobsQ r0RUvUaG3O3wKA6XdWbZXyIjrYrlZlp31wHtBJxiqmomR4mkNEdJ6HFIjoB9PncE W4I5lSbgBgH+qwFPv1eexJJuqIvj6Zer14Ecd1SFk58F69H767tauSzBxXAaF+KC A1SuM6LC1rOCFUhThbKAB7mYFHUEIOQFDK8G4C1P+DjdvUMvrVQwSaFWmFqOlv3b qaK9ryRy+bHMiAkSk4+UawmrUNq3JnyGxa4FPcVsPzSEhcsPuOIKg8a3UjHkFbQd RsGmN39jDwk0tk1ON68vKuKd8KUhAsQfAc1bAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUygEO6x0rlbIUkskgLsPWPcld2uwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3lnRU82eDBybGJJVWtza2dMc1BXUGNsZDJ1dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC3S+swDQYJKoZIhvcNAQELBQADggEBAN/L839pszgDpnc0AMghKW9Qb9Ne 8jsIcBdMK/yAgPAS+OK170hKgyZ6h6CZxxMBpiCTc06NZUXZbsei1LT5w+CDoO0+ cG5S2rJjTHevTUKsXvkPqcuEDhiVW65wgNvZGH6oWTtWD4yJFHPURr8Roud8OcJP wlyvfrFtbrOJrVa9IC9RtabiJlyjNtRpe6SOlXxtZqv0Ds4T1tLducx2Ja5KRvDJ yi++6ehCXNsb3AxAvmmMjkz4oOWute3qBfURoKl7OpTBCH0i2uYIDX/o8ma/fbl+ mYD3kPEzj8SVmw6tvsV4SXs6JLE040kRfEL68OPNQRPLPSDasTPiwPZtfVg= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:21 2025 by rpki-client