$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FS4Wpxcd_cBfqL6A-qVpJpxeuVY.roa File: FS4Wpxcd_cBfqL6A-qVpJpxeuVY.roa (raw, json) Hash identifier: w9MfEke7vJzaXnH83pdEj01yOWMQn1tkXyTaDAumELY= Subject key identifier: 15:2E:16:A7:17:1D:FD:C0:5F:A8:BE:80:FA:A5:69:26:9C:5E:B9:56 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C83 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FS4Wpxcd_cBfqL6A-qVpJpxeuVY.roa Signing time: Tue 01 Apr 2025 02:03:17 +0000 ROA not before: Tue 01 Apr 2025 02:03:17 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3203 (0xc83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:17 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=152E16A7171DFDC05FA8BE80FAA569269C5EB956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ba:1e:38:17:a3:fd:27:61:c0:61:b2:44:8f: 0a:7d:b1:77:eb:ac:24:69:cd:34:77:bf:a4:7a:91: 81:c8:09:d6:da:6b:95:fd:cb:93:a8:24:7d:51:be: ab:cf:c0:ca:b9:de:21:ac:1c:87:48:0a:72:9e:ea: 00:0f:35:c8:96:a8:96:de:f0:3b:54:3a:2e:d6:69: 7b:40:bb:ec:74:e5:44:80:98:15:b4:bb:9c:e4:b0: 84:eb:5f:02:fe:83:2e:9f:10:69:dc:67:a0:fb:28: 43:b1:0e:93:8e:15:2a:fa:7f:6b:7a:13:00:4c:4c: 27:23:3a:0d:4b:6f:10:88:94:be:69:6a:de:dc:23: a1:32:d1:9d:dd:5b:ff:18:2b:aa:a3:fd:48:63:8b: c9:c1:88:ca:c4:38:f1:54:27:54:62:fc:ea:de:12: bf:6b:d4:83:d1:bf:60:7f:bb:ce:ee:5d:90:58:3e: d7:21:c0:c3:f3:50:79:5d:fb:89:92:4e:a9:37:b8: e3:4a:fc:0b:60:8c:75:25:1b:d6:14:fd:be:25:5b: 1a:59:4b:77:fb:d4:4d:33:bc:b9:2c:1f:f5:0c:5b: 02:d7:ad:db:78:eb:c3:7f:5b:eb:38:bd:b8:bb:46: 8a:d2:1b:33:46:80:62:d3:85:53:15:d2:e6:5b:b8: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2E:16:A7:17:1D:FD:C0:5F:A8:BE:80:FA:A5:69:26:9C:5E:B9:56 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FS4Wpxcd_cBfqL6A-qVpJpxeuVY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.84.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:78:1b:57:52:b4:e8:9f:7d:15:d8:b4:a9:5d:05:29:69:68: 1c:61:6f:3a:59:cd:62:da:65:8e:c0:df:ca:a2:12:86:7b:c7: ab:2e:b3:30:40:49:5a:ec:26:8e:82:d9:c9:6e:d3:39:4e:a8: 22:82:69:05:cb:9a:29:3c:d0:7d:ec:03:23:5a:5e:69:99:9e: 79:c9:12:b9:5b:e5:25:6a:91:38:5d:14:13:40:64:87:4e:c1: 0c:32:94:98:a0:f0:d8:0a:16:cb:a3:25:6c:53:22:d3:5f:09: 0a:9b:97:1a:8b:fd:f2:6e:e7:fb:8f:4c:b7:c1:ad:7e:a9:d7: a0:ca:ce:c4:93:34:33:62:f6:36:f5:4e:68:4b:03:10:14:96: a3:c8:c1:05:81:80:42:63:5e:f7:a8:ec:87:f3:d5:86:e2:1f: d4:18:c3:d5:81:10:4d:00:d3:d9:b0:48:2c:35:67:31:e6:0e: c1:3b:5c:cb:50:18:b0:bf:ce:f7:e7:c1:aa:03:8a:f9:f3:45: 1d:b9:2d:62:07:55:44:6f:ad:e2:e1:15:3f:94:93:3f:c2:2e: cd:7e:9c:47:91:95:ad:df:7c:49:42:e8:75:79:fa:c3:f3:ca: a1:d9:61:d8:13:b9:d3:5c:ad:28:37:de:ac:14:eb:35:21:d2: ad:3b:84:a1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMTdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE1MkUxNkE3MTcxREZE QzA1RkE4QkU4MEZBQTU2OTI2OUM1RUI5NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsuh44F6P9J2HAYbJEjwp9sXfrrCRpzTR3v6R6kYHICdbaa5X9 y5OoJH1RvqvPwMq53iGsHIdICnKe6gAPNciWqJbe8DtUOi7WaXtAu+x05USAmBW0 u5zksITrXwL+gy6fEGncZ6D7KEOxDpOOFSr6f2t6EwBMTCcjOg1LbxCIlL5pat7c I6Ey0Z3dW/8YK6qj/Uhji8nBiMrEOPFUJ1Ri/OreEr9r1IPRv2B/u87uXZBYPtch wMPzUHld+4mSTqk3uONK/AtgjHUlG9YU/b4lWxpZS3f71E0zvLksH/UMWwLXrdt4 68N/W+s4vbi7RorSGzNGgGLThVMV0uZbuBXLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFS4Wpxcd/cBfqL6A+qVpJpxeuVYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0ZTNFdweGNkX2NCZnFMNkEtcVZwSnB4ZXVWWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBT1QwDQYJKoZIhvcNAQELBQADggEBAGx4G1dStOiffRXYtKldBSlpaBxh bzpZzWLaZY7A38qiEoZ7x6suszBASVrsJo6C2clu0zlOqCKCaQXLmik80H3sAyNa XmmZnnnJErlb5SVqkThdFBNAZIdOwQwylJig8NgKFsujJWxTItNfCQqblxqL/fJu 5/uPTLfBrX6p16DKzsSTNDNi9jb1TmhLAxAUlqPIwQWBgEJjXveo7Ifz1YbiH9QY w9WBEE0A09mwSCw1ZzHmDsE7XMtQGLC/zvfnwaoDivnzRR25LWIHVURvreLhFT+U kz/CLs1+nEeRla3ffElC6HV5+sPzyqHZYdgTudNcrSg33qwU6zUh0q07hKE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:21:50 2025 by rpki-client