$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1UD56jHyurzdz1UYc8cJNo3P0kw.roa File: 1UD56jHyurzdz1UYc8cJNo3P0kw.roa (raw, json) Hash identifier: 2zi/1YN6hVjBxmA6pBII8czXqwG/SCUH/n1xvOQt/8E= Subject key identifier: D5:40:F9:EA:31:F2:BA:BC:DD:CF:55:18:73:C7:09:36:8D:CF:D2:4C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B40 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1UD56jHyurzdz1UYc8cJNo3P0kw.roa Signing time: Thu 06 Mar 2025 06:56:37 +0000 ROA not before: Thu 06 Mar 2025 06:56:37 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2880 (0xb40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 6 06:56:37 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=D540F9EA31F2BABCDDCF551873C709368DCFD24C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9b:33:7a:a0:ac:39:20:17:40:c3:dc:db:0d: 5e:29:cb:53:e0:61:ce:d6:d8:2d:60:73:3a:5d:c9: 5c:f6:89:5e:a3:ea:06:4e:96:c4:d2:45:0b:92:66: 60:c4:7e:5b:42:cd:e5:c9:81:54:c6:4f:1c:86:d1: e1:07:29:e5:f9:c3:fe:c2:ea:7a:aa:35:ac:c7:70: 16:07:f4:53:c4:9f:ab:c3:26:f2:94:f7:14:c5:b3: f5:e0:26:b6:1b:cb:3d:a9:e0:b1:05:b6:a4:81:72: 81:9c:cd:8b:60:cd:47:1b:36:96:3e:a5:ad:18:42: 43:db:bf:5d:b3:a1:f4:be:39:e4:68:a1:5e:9a:46: 50:b7:cc:87:c4:a5:10:b2:34:9f:a3:04:9d:ff:a2: 64:17:5d:ee:28:b4:33:be:fc:c6:b1:04:7b:3e:6f: ea:98:6e:e5:4f:7d:51:2a:27:03:05:9f:eb:01:45: c4:0d:b2:6a:91:2a:be:2c:50:6a:78:ea:49:9f:72: 4b:39:23:60:4b:fb:b4:d9:a4:6e:7e:59:6f:a5:0a: 31:be:47:3f:c0:81:4e:41:1d:28:2b:5c:9a:a8:38: 25:ce:1d:1a:6e:64:a3:77:06:26:a3:62:4f:aa:cf: 07:ec:81:a6:fa:4c:ec:4f:ff:a8:e4:c7:30:5e:aa: ac:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:40:F9:EA:31:F2:BA:BC:DD:CF:55:18:73:C7:09:36:8D:CF:D2:4C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1UD56jHyurzdz1UYc8cJNo3P0kw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.124.0/24 Signature Algorithm: sha256WithRSAEncryption a0:b4:cd:2c:17:4e:41:dc:53:54:63:1b:ac:f1:e2:ee:72:9f: ec:76:6a:4e:99:97:e3:ae:dc:f4:2e:44:c6:02:92:96:aa:d2: a5:44:bb:57:60:19:b2:7a:af:ff:de:f4:11:82:52:6a:69:40: 3a:0a:5c:f1:1e:1b:a5:0e:3c:e8:6c:89:ca:79:d1:b2:a3:55: e1:f6:fd:ae:40:4e:47:30:19:65:ec:a5:70:2a:9f:e6:fb:b0: c5:0d:19:a2:bd:0d:56:57:24:56:75:7b:f0:e0:15:94:26:43: a5:dd:cc:2f:77:c9:ee:01:25:b2:9f:56:8e:14:09:ef:bc:c9: 02:93:8b:f3:f1:31:88:56:c0:bd:8a:1c:f7:08:f2:8a:c6:92: b4:6e:b4:3a:68:e8:3d:77:8c:23:80:ae:cf:33:b2:c2:6b:f9: a9:99:89:00:9b:9f:c4:81:88:4b:51:f1:80:fa:a1:f5:eb:3e: 83:2b:d4:75:c8:85:32:3d:d8:b9:5f:50:15:13:9d:c9:63:56: 19:77:52:20:28:a1:f7:6c:c5:8a:4e:56:3e:25:0b:7f:93:cb: 60:d7:45:b0:c4:60:48:15:19:67:65:00:95:55:77:4e:eb:be: ea:f7:c6:6c:62:9e:d6:35:50:2a:bc:51:53:23:7a:f0:00:eb: 7e:e8:65:70 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC0AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAzMDYw NjU2MzdaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ1NDBGOUVBMzFGMkJB QkNERENGNTUxODczQzcwOTM2OERDRkQyNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVmzN6oKw5IBdAw9zbDV4py1PgYc7W2C1gczpdyVz2iV6j6gZO lsTSRQuSZmDEfltCzeXJgVTGTxyG0eEHKeX5w/7C6nqqNazHcBYH9FPEn6vDJvKU 9xTFs/XgJrYbyz2p4LEFtqSBcoGczYtgzUcbNpY+pa0YQkPbv12zofS+OeRooV6a RlC3zIfEpRCyNJ+jBJ3/omQXXe4otDO+/MaxBHs+b+qYbuVPfVEqJwMFn+sBRcQN smqRKr4sUGp46kmfcks5I2BL+7TZpG5+WW+lCjG+Rz/AgU5BHSgrXJqoOCXOHRpu ZKN3BiajYk+qzwfsgab6TOxP/6jkxzBeqqyzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1UD56jHyurzdz1UYc8cJNo3P0kwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzFVRDU2akh5dXJ6ZHoxVVljOGNKTm8zUDBrdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABS3wwDQYJKoZIhvcNAQELBQADggEBAKC0zSwXTkHcU1RjG6zx4u5yn+x2 ak6Zl+Ou3PQuRMYCkpaq0qVEu1dgGbJ6r//e9BGCUmppQDoKXPEeG6UOPOhsicp5 0bKjVeH2/a5ATkcwGWXspXAqn+b7sMUNGaK9DVZXJFZ1e/DgFZQmQ6XdzC93ye4B JbKfVo4UCe+8yQKTi/PxMYhWwL2KHPcI8orGkrRutDpo6D13jCOArs8zssJr+amZ iQCbn8SBiEtR8YD6ofXrPoMr1HXIhTI92LlfUBUTncljVhl3UiAoofdsxYpOVj4l C3+Ty2DXRbDEYEgVGWdlAJVVd07rvur3xmxintY1UCq8UVMjevAA637oZXA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:58:36 2025 by rpki-client