$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yhoym7JVS2j74mCseD_yle9LfT0.roa File: yhoym7JVS2j74mCseD_yle9LfT0.roa (raw, json) Hash identifier: W/TOQw1xDmmptwZ2kFZIsNNQV4QwuDF0qMuZa/oiisE= Subject key identifier: CA:1A:32:9B:B2:55:4B:68:FB:E2:60:AC:78:3F:F2:95:EF:4B:7D:3D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CCB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yhoym7JVS2j74mCseD_yle9LfT0.roa Signing time: Tue 01 Apr 2025 02:09:11 +0000 ROA not before: Tue 01 Apr 2025 02:09:11 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.67.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:11 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=CA1A329BB2554B68FBE260AC783FF295EF4B7D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:49:94:56:71:64:5f:a2:ad:73:6a:bb:91:bd: 0e:ca:36:b7:f5:03:3f:89:8e:a9:b7:e5:68:68:90: e3:4c:8c:be:ed:a3:ca:ff:0f:ae:1d:8b:f9:af:48: e7:50:5d:64:7f:b6:42:ae:a2:52:1c:aa:2e:26:7f: cd:1f:2c:18:52:ea:97:78:83:38:7b:58:a3:be:88: 9e:c0:c9:80:4d:41:53:90:a3:be:2a:6e:f6:1a:ea: 60:5c:13:7b:96:20:94:00:d6:4a:d6:99:8f:62:c0: 1a:75:6e:cf:c0:8a:6e:89:28:5e:c2:95:f0:77:25: 00:c6:4c:38:54:13:81:1c:79:4d:91:0a:5c:e1:ad: fb:6c:b3:bc:1d:13:61:46:db:c1:bb:a3:a6:8d:4c: 31:6f:e6:64:b2:62:61:30:5c:53:60:10:bd:7e:33: 58:41:b3:98:04:b9:51:c0:72:2f:32:95:76:1a:19: 76:39:64:ff:09:17:77:db:d2:48:a9:29:ee:ce:e1: 4a:5c:81:cd:a0:a5:fc:d7:f7:97:9e:e9:34:a0:57: c9:ad:d8:93:b2:c2:df:bd:69:5a:4f:ce:f4:68:e9: 15:93:bf:54:de:17:e1:c0:63:e5:99:b8:07:3f:94: 55:16:85:a8:7b:45:b1:d0:77:a6:5f:77:a9:0e:73: 22:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1A:32:9B:B2:55:4B:68:FB:E2:60:AC:78:3F:F2:95:EF:4B:7D:3D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yhoym7JVS2j74mCseD_yle9LfT0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.67.192.0/19 Signature Algorithm: sha256WithRSAEncryption 4f:92:1e:a7:45:cd:36:af:14:ca:da:83:98:76:d9:8d:0f:a4: 72:07:fb:ff:10:81:3c:78:e2:ea:d3:9c:12:7c:72:1b:39:ab: a1:80:34:c1:e6:51:45:99:6d:41:3d:d0:3f:59:39:7a:d7:18: 81:fd:92:4b:0c:5c:91:41:10:65:a3:31:f9:f1:06:fa:a0:a8: 81:b4:d5:47:bc:85:96:f3:c1:3d:17:c5:b6:98:e9:76:17:4a: e0:2b:95:17:e9:6e:bb:d0:9a:9c:42:9b:89:88:d5:71:52:e7: 31:d2:48:75:16:ed:b7:b4:60:57:df:9c:2c:6b:1f:41:69:0e: 33:43:bb:6c:75:a6:af:90:a9:3c:a8:29:00:34:34:ed:09:80: e8:76:db:9d:30:ed:4a:40:c9:52:8c:8a:06:95:4d:a5:42:c0: 70:d7:79:12:04:bc:c1:4a:a7:95:d9:fe:ab:4a:75:ac:59:c4: fa:96:b7:ab:0c:a0:f2:c0:2e:49:86:ff:ce:9b:cf:61:63:88: 82:75:84:8d:05:90:11:49:10:29:f6:89:9e:84:84:c2:85:e8: d2:99:8d:56:96:7c:ce:34:17:65:0a:14:41:1c:49:b9:79:86: c5:79:94:e3:6f:6b:29:20:9e:d6:20:5a:22:3b:af:51:9b:41: 10:e7:3e:8a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MTFaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENBMUEzMjlCQjI1NTRC NjhGQkUyNjBBQzc4M0ZGMjk1RUY0QjdEM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTSZRWcWRfoq1zaruRvQ7KNrf1Az+Jjqm35WhokONMjL7to8r/ D64di/mvSOdQXWR/tkKuolIcqi4mf80fLBhS6pd4gzh7WKO+iJ7AyYBNQVOQo74q bvYa6mBcE3uWIJQA1krWmY9iwBp1bs/Aim6JKF7ClfB3JQDGTDhUE4EceU2RClzh rftss7wdE2FG28G7o6aNTDFv5mSyYmEwXFNgEL1+M1hBs5gEuVHAci8ylXYaGXY5 ZP8JF3fb0kipKe7O4Upcgc2gpfzX95ee6TSgV8mt2JOywt+9aVpPzvRo6RWTv1Te F+HAY+WZuAc/lFUWhah7RbHQd6Zfd6kOcyI3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUyhoym7JVS2j74mCseD/yle9LfT0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3lob3ltN0pWUzJqNzRtQ3NlRF95bGU5TGZUMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUBQ8AwDQYJKoZIhvcNAQELBQADggEBAE+SHqdFzTavFMrag5h22Y0PpHIH +/8QgTx44urTnBJ8chs5q6GANMHmUUWZbUE90D9ZOXrXGIH9kksMXJFBEGWjMfnx BvqgqIG01Ue8hZbzwT0XxbaY6XYXSuArlRfpbrvQmpxCm4mI1XFS5zHSSHUW7be0 YFffnCxrH0FpDjNDu2x1pq+QqTyoKQA0NO0JgOh2250w7UpAyVKMigaVTaVCwHDX eRIEvMFKp5XZ/qtKdaxZxPqWt6sMoPLALkmG/86bz2FjiIJ1hI0FkBFJECn2iZ6E hMKF6NKZjVaWfM40F2UKFEEcSbl5hsV5lONvaykgntYgWiI7r1GbQRDnPoo= -----END CERTIFICATE-----Generated at Sat Apr 5 23:11:06 2025 by rpki-client