$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BoKlpgm2O5LhWGMEkQR18W_RHD8.roa File: BoKlpgm2O5LhWGMEkQR18W_RHD8.roa (raw, json) Hash identifier: ++dqX6b/RPg5S1YWbYNc5CwRU4SZTxFmnieKeApGNGo= Subject key identifier: 06:82:A5:A6:09:B6:3B:92:E1:58:63:04:91:04:75:F1:6F:D1:1C:3F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D43 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BoKlpgm2O5LhWGMEkQR18W_RHD8.roa Signing time: Tue 01 Apr 2025 02:17:08 +0000 ROA not before: Tue 01 Apr 2025 02:17:08 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 183.74.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3395 (0xd43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:17:08 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=0682A5A609B63B92E1586304910475F16FD11C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:bd:09:80:63:87:96:af:74:a3:a5:8f:47: 13:5b:bd:c7:79:51:10:fb:d5:d2:1b:ef:a7:77:fc: 73:d8:d8:bd:c7:a6:29:01:4d:82:db:68:b6:a7:10: f1:d6:d8:97:2b:22:b7:76:70:ff:e2:15:e4:61:bf: 89:76:dd:54:65:7f:f3:35:5d:cf:08:f3:1f:61:43: 1c:1c:b2:49:5b:61:52:8b:34:67:2d:eb:9e:0d:27: 16:2d:d2:72:3a:dc:aa:c6:9d:84:f9:2d:f0:29:f5: e1:e6:84:d0:65:e5:b4:20:49:f5:9b:d1:4c:01:e7: a6:a3:dc:6b:51:ed:ed:f9:d0:25:cb:a8:3a:64:44: 8a:96:29:80:1a:e7:d5:d4:65:16:19:bb:ba:60:07: 16:51:30:67:e6:25:74:0e:f9:bc:5e:f7:cf:fb:12: c3:8d:73:74:a6:f4:21:f0:cb:5b:01:de:9c:02:1f: 9c:12:cf:04:4e:a4:62:82:8f:b5:23:b7:a3:5f:3f: 39:04:40:80:d8:40:3e:d5:fe:15:ff:36:60:00:89: 83:ad:18:b8:5a:b1:c8:10:9a:39:f1:70:a5:80:00: 73:d5:01:d3:f1:9d:44:2e:96:0a:3d:50:f2:32:13: d7:a5:f9:31:20:92:e9:42:ae:fe:44:bc:4e:c0:ea: ae:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:82:A5:A6:09:B6:3B:92:E1:58:63:04:91:04:75:F1:6F:D1:1C:3F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BoKlpgm2O5LhWGMEkQR18W_RHD8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.74.194.0/23 Signature Algorithm: sha256WithRSAEncryption 03:e9:53:2e:b5:9c:b7:46:fd:97:b7:5c:85:d2:45:9c:ce:bc: f7:93:45:a8:bf:4c:b9:46:04:cf:62:d3:9c:cc:c1:4f:82:48: 31:4c:1f:59:dc:a8:1f:07:e2:64:b5:4b:7d:82:8d:0b:ee:fb: c0:e2:97:c0:16:67:76:0d:57:bb:a0:74:b3:96:f6:cb:e1:f5: 2b:5f:24:c4:50:48:aa:40:d0:98:a7:61:6d:58:2d:38:66:b5: e4:b2:03:a3:80:d1:35:fc:20:6c:88:8f:67:54:ec:c1:ec:01: b0:88:4e:34:c0:bb:e5:86:88:af:f0:e3:c9:1f:85:3c:ef:3f: 0a:f4:ae:c8:33:e1:43:f1:8c:a4:ea:81:39:bd:cb:51:d8:ed: 92:4b:31:43:8c:66:df:7d:64:17:e4:b3:c4:ef:75:9e:2c:39: 83:25:7a:2d:6f:9c:45:92:58:f1:5e:46:4c:ca:3a:00:32:f2: c9:ff:cc:b9:38:d1:02:4f:e5:25:c7:34:18:a1:bc:cd:53:68: ca:5b:24:3a:0c:51:cd:f8:35:21:8d:dd:5d:f0:5a:33:d5:85: a3:36:b9:f9:6a:4a:58:07:6c:cb:07:39:6a:d1:e8:be:37:83: d0:62:5b:1f:f7:66:38:3c:a3:87:ed:36:83:8e:f0:f3:7a:1a: a0:72:25:f0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE3MDhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA2ODJBNUE2MDlCNjNC OTJFMTU4NjMwNDkxMDQ3NUYxNkZEMTFDM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8NL0JgGOHlq90o6WPRxNbvcd5URD71dIb76d3/HPY2L3HpikB TYLbaLanEPHW2JcrIrd2cP/iFeRhv4l23VRlf/M1Xc8I8x9hQxwcsklbYVKLNGct 654NJxYt0nI63KrGnYT5LfAp9eHmhNBl5bQgSfWb0UwB56aj3GtR7e350CXLqDpk RIqWKYAa59XUZRYZu7pgBxZRMGfmJXQO+bxe98/7EsONc3Sm9CHwy1sB3pwCH5wS zwROpGKCj7Ujt6NfPzkEQIDYQD7V/hX/NmAAiYOtGLhascgQmjnxcKWAAHPVAdPx nUQulgo9UPIyE9el+TEgkulCrv5EvE7A6q6tAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBoKlpgm2O5LhWGMEkQR18W/RHD8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0JvS2xwZ20yTzVMaFdHTUVrUVIxOFdfUkhEOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAG3SsIwDQYJKoZIhvcNAQELBQADggEBAAPpUy61nLdG/Ze3XIXSRZzOvPeT Rai/TLlGBM9i05zMwU+CSDFMH1ncqB8H4mS1S32CjQvu+8Dil8AWZ3YNV7ugdLOW 9svh9StfJMRQSKpA0JinYW1YLThmteSyA6OA0TX8IGyIj2dU7MHsAbCITjTAu+WG iK/w48kfhTzvPwr0rsgz4UPxjKTqgTm9y1HY7ZJLMUOMZt99ZBfks8TvdZ4sOYMl ei1vnEWSWPFeRkzKOgAy8sn/zLk40QJP5SXHNBihvM1TaMpbJDoMUc34NSGN3V3w WjPVhaM2uflqSlgHbMsHOWrR6L43g9BiWx/3Zjg8o4ftNoOO8PN6GqByJfA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:23:44 2025 by rpki-client