$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5Tuvny_fVCe1qyUhWLefu9PEiqI.roa File: 5Tuvny_fVCe1qyUhWLefu9PEiqI.roa (raw, json) Hash identifier: gVnyq6mae1OLg2LOtQAX+oE2wTgRRz2XYmsC4hUQ1K4= Subject key identifier: E5:3B:AF:9F:2F:DF:54:27:B5:AB:25:21:58:B7:9F:BB:D3:C4:8A:A2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BB6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5Tuvny_fVCe1qyUhWLefu9PEiqI.roa Signing time: Tue 01 Apr 2025 01:43:39 +0000 ROA not before: Tue 01 Apr 2025 01:43:39 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2998 (0xbb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:43:39 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E53BAF9F2FDF5427B5AB252158B79FBBD3C48AA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:a9:1c:09:55:e4:4d:86:b2:52:eb:81:ba: ee:a8:cd:5a:fe:f4:a6:84:b4:98:88:8a:14:9b:0b: b2:58:1a:4f:6a:e5:bb:6f:68:14:77:f5:2e:ce:b6: b3:e4:f7:6a:13:3f:2a:94:5c:ea:bf:dd:9b:09:b2: 2e:16:72:01:80:0e:18:de:fe:cf:13:c4:11:9b:2f: ee:40:47:a9:79:fa:8f:1f:19:62:9e:65:95:fc:81: 00:16:f3:f4:c8:d7:4f:18:e6:e2:f9:dd:b4:d3:45: df:f5:b6:79:ca:1b:88:ee:6d:e1:fe:bb:dd:73:20: 13:20:cb:f4:c0:c8:9c:2e:d8:fb:4d:a3:51:ec:3f: bb:82:ed:25:34:16:fd:0d:5f:bf:ae:1a:37:e6:38: 07:0d:4f:62:30:ab:64:84:c8:8b:30:46:3c:4c:87: 7d:41:12:54:9b:0d:7f:81:34:34:17:1f:34:68:6e: 1f:b1:ff:2c:8e:22:90:ae:07:f9:26:8f:be:e2:59: 69:97:42:4f:fb:e3:05:fd:ee:81:9c:f1:90:7d:3c: 61:8a:e9:52:c0:12:10:5d:ee:56:96:ac:8b:36:df: 2b:e3:f6:ef:11:c8:f2:3f:6b:41:19:95:c0:9a:9c: 1e:5d:7a:e0:c6:5b:5a:6f:e8:6b:59:53:e6:b3:55: e6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3B:AF:9F:2F:DF:54:27:B5:AB:25:21:58:B7:9F:BB:D3:C4:8A:A2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5Tuvny_fVCe1qyUhWLefu9PEiqI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.16.0/23 Signature Algorithm: sha256WithRSAEncryption e0:22:ef:f2:00:10:9d:41:2b:78:f9:ac:6c:e3:b3:cd:7b:85: 71:54:1b:aa:45:42:67:1a:7f:3a:6f:0f:44:9e:f0:d8:80:8a: 2a:ab:3c:62:1f:36:46:97:fb:64:74:bf:90:01:9b:ea:68:29: ed:84:89:eb:0f:6a:e1:03:c5:6a:d9:77:21:8c:50:bc:af:14: de:82:a5:fa:a0:14:31:4e:9d:0b:c4:fb:ee:a2:71:1b:cc:cb: f3:70:c9:c9:2d:dc:61:3a:60:fe:c7:bc:36:cf:55:a1:5e:63: e4:09:50:ca:3e:6f:b4:71:b2:c7:9a:b4:4c:de:e7:b0:92:33: c6:da:c5:6d:f7:99:43:15:ac:e4:3d:97:bc:f8:a8:f4:eb:9b: a0:56:81:9d:57:1a:9d:ef:4d:a8:f8:17:eb:a0:ae:e0:63:18: 86:f2:d9:6d:e8:81:fc:66:92:0e:0d:a8:cb:a5:40:4e:ac:65: 85:4e:52:7f:39:ab:f9:45:be:69:41:dc:56:7e:d3:4d:15:6c: 64:2e:c4:2d:51:15:88:f6:94:51:ca:e9:1b:21:c7:ac:ec:f3: ff:d4:c4:b7:c6:61:40:30:8c:b2:31:8b:b6:27:00:f7:f4:9e: f7:89:75:24:56:6e:de:a7:9b:a7:1e:d2:4e:92:be:c6:0e:b0: 27:b2:f4:ea -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC7YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQzMzlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU1M0JBRjlGMkZERjU0 MjdCNUFCMjUyMTU4Qjc5RkJCRDNDNDhBQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuuakcCVXkTYayUuuBuu6ozVr+9KaEtJiIihSbC7JYGk9q5btv aBR39S7OtrPk92oTPyqUXOq/3ZsJsi4WcgGADhje/s8TxBGbL+5AR6l5+o8fGWKe ZZX8gQAW8/TI108Y5uL53bTTRd/1tnnKG4jubeH+u91zIBMgy/TAyJwu2PtNo1Hs P7uC7SU0Fv0NX7+uGjfmOAcNT2Iwq2SEyIswRjxMh31BElSbDX+BNDQXHzRobh+x /yyOIpCuB/kmj77iWWmXQk/74wX97oGc8ZB9PGGK6VLAEhBd7laWrIs23yvj9u8R yPI/a0EZlcCanB5deuDGW1pv6GtZU+azVeY7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU5Tuvny/fVCe1qyUhWLefu9PEiqIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzVUdXZueV9mVkNlMXF5VWhXTGVmdTlQRWlxSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTxAwDQYJKoZIhvcNAQELBQADggEBAOAi7/IAEJ1BK3j5rGzjs817hXFU G6pFQmcafzpvD0Se8NiAiiqrPGIfNkaX+2R0v5ABm+poKe2EiesPauEDxWrZdyGM ULyvFN6CpfqgFDFOnQvE++6icRvMy/Nwyckt3GE6YP7HvDbPVaFeY+QJUMo+b7Rx sseatEze57CSM8baxW33mUMVrOQ9l7z4qPTrm6BWgZ1XGp3vTaj4F+ugruBjGIby 2W3ogfxmkg4NqMulQE6sZYVOUn85q/lFvmlB3FZ+000VbGQuxC1RFYj2lFHK6Rsh x6zs8//UxLfGYUAwjLIxi7YnAPf0nveJdSRWbt6nm6ce0k6SvsYOsCey9Oo= -----END CERTIFICATE-----Generated at Sat Apr 26 20:10:43 2025 by rpki-client