$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-bZB7lGwa5wUCmUrsbylDcz-nrI.roa File: -bZB7lGwa5wUCmUrsbylDcz-nrI.roa (raw, json) Hash identifier: IquHNbLK/tu+KzyeNY16CuvmzvWzMm39WEAv8hHBRGA= Subject key identifier: F9:B6:41:EE:51:B0:6B:9C:14:0A:65:2B:B1:BC:A5:0D:CC:FE:9E:B2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D17 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-bZB7lGwa5wUCmUrsbylDcz-nrI.roa Signing time: Tue 01 Apr 2025 02:13:43 +0000 ROA not before: Tue 01 Apr 2025 02:13:43 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3351 (0xd17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:13:43 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=F9B641EE51B06B9C140A652BB1BCA50DCCFE9EB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:47:b7:c3:63:3e:f5:03:da:0f:b2:de:26: 4b:89:ff:30:b2:33:39:4c:12:6b:cd:9b:c8:e5:e2: 06:80:75:cb:3b:b2:ee:9d:01:90:a1:16:c8:a1:cf: f4:4d:dc:fd:c0:89:6b:64:dc:a5:cb:af:d9:27:ea: e9:ef:3a:84:08:48:78:7c:ea:33:a0:66:00:44:27: dc:7d:4c:35:a6:5d:c0:cf:9b:58:57:6a:f7:94:bf: 21:f7:5d:5b:97:90:69:aa:8a:d7:d3:39:65:ec:4c: e1:58:30:62:fa:b9:98:d1:12:2f:12:08:a2:2d:e6: 8f:33:be:50:1b:03:34:ee:ec:eb:7b:c3:79:16:74: 4f:f9:93:9a:57:05:41:ae:c5:cc:90:3f:09:e4:1d: 3f:b0:a2:d8:50:f6:fb:bb:27:c7:67:21:70:34:2f: 28:e7:d4:14:d2:da:44:17:88:0e:c9:69:63:3c:74: 81:12:f4:c8:fe:ba:53:d6:80:1a:99:b9:0c:65:47: c7:27:f2:12:55:08:d3:61:5f:5b:43:54:71:9c:8e: 19:f8:08:19:07:92:21:44:42:2e:46:bc:59:ed:69: 37:a1:bd:56:2f:b2:9b:ce:b8:d3:ad:8e:fb:9d:e2: a9:6c:bd:0a:c6:b8:4b:5d:68:23:71:ca:bc:d0:59: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B6:41:EE:51:B0:6B:9C:14:0A:65:2B:B1:BC:A5:0D:CC:FE:9E:B2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-bZB7lGwa5wUCmUrsbylDcz-nrI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.56.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:1b:6b:3b:bf:6f:28:54:70:66:85:74:05:c2:6b:4c:4c:6d: 7c:43:94:38:18:88:a5:ad:17:51:b6:e0:92:16:47:dc:56:29: 7b:5c:20:a3:3e:bf:27:06:15:64:fe:07:87:a3:3d:b3:8c:65: 50:6b:c1:95:d8:5f:2f:4a:73:c0:19:80:37:a6:0d:26:55:31: 90:66:cc:c8:64:88:68:2b:6f:7c:2f:b1:2c:18:e8:16:d6:33: b6:1a:cd:cf:49:b7:eb:3d:37:09:58:c6:3e:76:9b:eb:b8:c9: 6a:67:4f:94:3a:61:2a:0b:a0:e5:07:da:24:68:c3:b2:73:94: cb:3e:9a:9f:94:2f:fa:cb:0b:ca:ae:fa:78:a7:57:a0:0d:c7: 5f:b1:a8:fd:9f:87:bf:79:bf:ec:da:6f:64:ff:8b:bc:da:e6: a2:60:b9:c9:14:ce:70:39:02:89:7c:00:6f:fa:84:29:37:63: 19:de:5e:a2:6c:d7:b1:79:27:5c:dd:ba:28:d6:b3:02:a3:91: 81:81:a4:3d:77:50:db:3b:c9:73:b2:98:e2:1b:05:1a:cd:85: 88:a7:94:7e:5c:2d:a3:92:c2:15:05:b2:dd:c0:35:8d:2b:85: 4d:17:13:df:02:7d:4e:bb:af:8d:b9:04:fb:80:8c:44:09:db: aa:22:d9:36 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDRcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjEzNDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY5QjY0MUVFNTFCMDZC OUMxNDBBNjUyQkIxQkNBNTBEQ0NGRTlFQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6y0e3w2M+9QPaD7LeJkuJ/zCyMzlMEmvNm8jl4gaAdcs7su6d AZChFsihz/RN3P3AiWtk3KXLr9kn6unvOoQISHh86jOgZgBEJ9x9TDWmXcDPm1hX aveUvyH3XVuXkGmqitfTOWXsTOFYMGL6uZjREi8SCKIt5o8zvlAbAzTu7Ot7w3kW dE/5k5pXBUGuxcyQPwnkHT+wothQ9vu7J8dnIXA0Lyjn1BTS2kQXiA7JaWM8dIES 9Mj+ulPWgBqZuQxlR8cn8hJVCNNhX1tDVHGcjhn4CBkHkiFEQi5GvFntaTehvVYv spvOuNOtjvud4qlsvQrGuEtdaCNxyrzQWXAVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+bZB7lGwa5wUCmUrsbylDcz+nrIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Ly1iWkI3bEd3YTV3VUNtVXJzYnlsRGN6LW5ySS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMb5jgwDQYJKoZIhvcNAQELBQADggEBAA0bazu/byhUcGaFdAXCa0xMbXxD lDgYiKWtF1G24JIWR9xWKXtcIKM+vycGFWT+B4ejPbOMZVBrwZXYXy9Kc8AZgDem DSZVMZBmzMhkiGgrb3wvsSwY6BbWM7Yazc9Jt+s9NwlYxj52m+u4yWpnT5Q6YSoL oOUH2iRow7JzlMs+mp+UL/rLC8qu+ninV6ANx1+xqP2fh795v+zab2T/i7za5qJg uckUznA5Aol8AG/6hCk3YxneXqJs17F5J1zduijWswKjkYGBpD13UNs7yXOymOIb BRrNhYinlH5cLaOSwhUFst3ANY0rhU0XE98CfU67r425BPuAjEQJ26oi2TY= -----END CERTIFICATE-----Generated at Sat Apr 26 20:15:32 2025 by rpki-client