$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8XBaJm9qjhBGrVj6drYiKlLMECw.roa File: 8XBaJm9qjhBGrVj6drYiKlLMECw.roa (raw, json) Hash identifier: jAjhTO0rcco8IYll2iMo0HPaAl0ygyiwu+HRV29ZZcw= Subject key identifier: F1:70:5A:26:6F:6A:8E:10:46:AD:58:FA:76:B6:22:2A:52:CC:10:2C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C4A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8XBaJm9qjhBGrVj6drYiKlLMECw.roa Signing time: Tue 01 Apr 2025 01:57:20 +0000 ROA not before: Tue 01 Apr 2025 01:57:20 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 183.73.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:20 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=F1705A266F6A8E1046AD58FA76B6222A52CC102C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:79:6c:12:33:23:88:30:4b:b9:fe:95:1e:d1: 22:64:96:a4:ca:9b:b8:b5:55:70:9d:d0:6d:60:5e: 13:96:fd:8b:d9:2d:29:98:1f:80:b8:5b:b6:94:c4: bf:80:45:44:c3:44:b4:f6:f9:c8:6b:80:4e:6e:05: 32:25:35:a7:aa:b0:0d:10:2f:3c:a2:aa:5e:89:5a: 53:46:53:b8:99:35:3a:12:cb:8d:12:8f:ec:ad:06: 85:1c:ac:38:16:d7:3e:80:e0:c7:a5:d3:f8:29:f0: 52:52:ce:4e:25:55:fa:b7:8a:46:fe:5d:6c:82:8e: f4:bb:8b:68:d0:e5:73:ef:97:96:df:7e:85:b4:7a: 84:df:9c:f5:2a:86:76:c4:ff:20:9a:46:63:87:d4: 81:19:68:4d:63:ec:63:52:2a:1d:bd:93:40:53:a2: 1b:3b:e9:9d:0a:fc:3c:e5:57:e9:3f:37:d1:10:b0: e0:78:5d:e3:d5:7f:d3:d3:8d:75:d3:2d:9e:58:d9: 5a:e0:9f:4e:c0:03:a1:ee:43:54:9c:54:2a:4c:74: a4:ec:95:18:d1:f4:48:c2:9b:da:b1:2b:fd:f1:98: c0:f4:fa:d9:78:b2:fe:16:a3:3b:dc:cc:30:90:3f: 4b:05:49:b1:bc:15:3e:dd:ca:68:fc:67:73:1e:6a: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:70:5A:26:6F:6A:8E:10:46:AD:58:FA:76:B6:22:2A:52:CC:10:2C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8XBaJm9qjhBGrVj6drYiKlLMECw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.73.32.0/19 Signature Algorithm: sha256WithRSAEncryption 9c:0c:bb:39:8d:da:21:49:be:2b:23:a1:d4:19:6f:21:33:66: 9a:ce:2a:9d:d1:46:49:20:a6:94:02:9a:23:fb:68:f9:14:78: be:ae:a2:0d:c8:7e:5a:0c:2d:d0:1c:0a:96:a0:04:c3:48:55: 4a:d3:49:2d:03:56:e1:b4:a1:ab:ba:12:7f:36:7f:cd:55:37: ba:d3:50:84:90:24:0f:42:99:63:94:e2:03:bf:22:f8:f0:35: 1e:53:78:4d:80:67:3f:d2:88:9d:98:9f:b6:79:1a:cb:ee:f8: d1:95:9b:be:2e:80:64:f9:41:72:f6:c4:5b:a9:e1:28:96:fd: 95:a2:74:c6:4d:65:b0:3c:3b:fd:d0:3d:27:e6:c3:1d:41:86: c9:86:80:5a:03:d9:82:42:18:80:a8:e4:10:72:da:f4:e2:4d: a2:1f:30:e2:f9:36:3b:da:fb:a3:81:b5:45:8b:18:86:4a:2b: 0e:9f:7d:c7:ff:82:34:58:de:7c:b7:28:fd:91:e8:d1:fb:36: f2:c4:6c:09:95:44:73:b1:bd:ab:2c:69:8e:ff:7e:24:76:eb: 0b:6b:a1:32:ea:55:41:55:53:22:34:b2:2c:0b:7a:13:22:05: 94:60:83:a5:51:7d:ee:ce:db:1b:e4:af:2d:36:fa:c5:91:b0: 23:cd:23:f9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDEowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MjBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYxNzA1QTI2NkY2QThF MTA0NkFENThGQTc2QjYyMjJBNTJDQzEwMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmeWwSMyOIMEu5/pUe0SJklqTKm7i1VXCd0G1gXhOW/YvZLSmY H4C4W7aUxL+ARUTDRLT2+chrgE5uBTIlNaeqsA0QLzyiql6JWlNGU7iZNToSy40S j+ytBoUcrDgW1z6A4Mel0/gp8FJSzk4lVfq3ikb+XWyCjvS7i2jQ5XPvl5bffoW0 eoTfnPUqhnbE/yCaRmOH1IEZaE1j7GNSKh29k0BTohs76Z0K/DzlV+k/N9EQsOB4 XePVf9PTjXXTLZ5Y2Vrgn07AA6HuQ1ScVCpMdKTslRjR9EjCm9qxK/3xmMD0+tl4 sv4WozvczDCQP0sFSbG8FT7dymj8Z3Meam9XAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8XBaJm9qjhBGrVj6drYiKlLMECwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzhYQmFKbTlxamhCR3JWajZkcllpS2xMTUVDdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAW3SSAwDQYJKoZIhvcNAQELBQADggEBAJwMuzmN2iFJvisjodQZbyEzZprO Kp3RRkkgppQCmiP7aPkUeL6uog3IfloMLdAcCpagBMNIVUrTSS0DVuG0oau6En82 f81VN7rTUISQJA9CmWOU4gO/IvjwNR5TeE2AZz/SiJ2Yn7Z5Gsvu+NGVm74ugGT5 QXL2xFup4SiW/ZWidMZNZbA8O/3QPSfmwx1BhsmGgFoD2YJCGICo5BBy2vTiTaIf MOL5Njva+6OBtUWLGIZKKw6ffcf/gjRY3ny3KP2R6NH7NvLEbAmVRHOxvassaY7/ fiR26wtroTLqVUFVUyI0siwLehMiBZRgg6VRfe7O2xvkry02+sWRsCPNI/k= -----END CERTIFICATE-----Generated at Sat Apr 26 20:15:56 2025 by rpki-client