$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FuV-PP9wpzCkiMH2IO-y91JvzxU.roa File: FuV-PP9wpzCkiMH2IO-y91JvzxU.roa (raw, json) Hash identifier: CRWKCspz7Z0Mgc7z3d5R908ECkIwyqLmUN3oBviW/qI= Subject key identifier: 16:E5:7E:3C:FF:70:A7:30:A4:88:C1:F6:20:EF:B2:F7:52:6F:CF:15 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CF0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FuV-PP9wpzCkiMH2IO-y91JvzxU.roa Signing time: Tue 01 Apr 2025 02:11:29 +0000 ROA not before: Tue 01 Apr 2025 02:11:29 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:29 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=16E57E3CFF70A730A488C1F620EFB2F7526FCF15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:00:24:a4:63:a4:8e:28:c7:15:37:d2:a0: da:bc:a0:6c:16:86:7b:47:25:42:ba:aa:9f:a4:0e: 33:05:45:82:25:f4:59:96:18:02:2d:fd:d6:b5:c7: 91:75:b0:f9:49:fc:48:b8:ec:99:23:33:0c:ab:2f: c3:b9:0b:3f:73:ec:7f:03:d0:df:1f:6c:58:fa:e5: a6:a6:b7:0f:67:e5:b4:a9:3f:56:65:d4:38:e3:0b: 4a:56:62:c3:5a:ca:88:0a:17:ba:a4:16:59:5a:ba: 03:fe:f4:ed:28:43:49:00:c4:22:b4:d3:6f:b0:d3: 1d:49:df:5f:31:02:3a:93:c9:10:98:7e:08:6e:01: d4:7b:09:bd:80:3c:79:f8:89:38:db:69:2a:8b:ba: 5d:13:9a:cf:03:33:33:18:35:f1:0c:13:c0:73:2d: 52:5d:93:6e:f7:77:08:f6:ad:59:9f:49:22:66:95: 9a:c0:69:f9:5d:bc:a3:29:a5:0f:56:1e:45:3f:e3: ec:97:ec:ad:b8:2c:a5:ac:40:53:3b:ab:9a:2e:6d: 43:68:fa:c8:4b:25:4d:ca:2f:e4:3e:d8:f7:b2:0d: 33:a4:8e:ed:4d:f8:bc:9f:a2:73:5a:84:51:1a:e8: 91:a0:0c:b7:f7:4d:38:7f:bc:f7:6c:e4:c6:f5:f9: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E5:7E:3C:FF:70:A7:30:A4:88:C1:F6:20:EF:B2:F7:52:6F:CF:15 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FuV-PP9wpzCkiMH2IO-y91JvzxU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.88.0/21 Signature Algorithm: sha256WithRSAEncryption 68:ad:b7:00:8c:ca:7f:51:90:9d:82:d4:d8:a2:56:42:21:e9: 29:21:35:69:98:66:aa:8f:05:60:4d:6e:c3:87:2c:9e:27:0a: 57:83:4b:24:90:3a:2b:2d:d1:4f:b8:07:e3:ee:db:d9:fc:5d: 0a:8f:94:dd:4d:fe:8f:02:d7:16:31:ac:56:18:e7:c6:c8:f4: c2:71:1b:46:6f:60:45:1a:4a:64:a6:7e:d2:28:e2:ba:c1:06: 1c:0f:7e:06:35:56:d3:41:5c:41:ed:27:12:a1:bd:ba:4d:ec: 4f:38:5f:81:df:98:98:68:d8:17:71:74:e3:c2:9c:1d:77:03: c3:fd:6f:0d:93:3b:4c:60:fa:9d:8f:4b:cb:b3:0b:6a:35:8d: 44:70:6d:d1:7d:b8:ff:99:fd:2a:48:c7:67:b9:20:40:0b:aa: 16:59:74:ff:3a:0f:fe:c0:06:b1:22:c5:95:67:11:f0:85:be: 1c:23:4f:94:a9:1d:39:45:e9:6a:0a:68:6a:b5:ed:c4:3a:d3: 7b:3b:ab:b7:c3:da:ce:d5:f8:c3:f9:65:85:9e:a0:cc:48:0a: 0c:bf:df:bc:6f:89:f3:7e:52:e7:80:5b:e1:85:12:7e:d7:7b: 2b:73:6d:8a:9e:b7:84:c2:72:5e:79:9c:a9:87:e8:56:46:d3: 14:d9:77:15 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExMjlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE2RTU3RTNDRkY3MEE3 MzBBNDg4QzFGNjIwRUZCMkY3NTI2RkNGMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDrwAkpGOkjijHFTfSoNq8oGwWhntHJUK6qp+kDjMFRYIl9FmW GAIt/da1x5F1sPlJ/Ei47JkjMwyrL8O5Cz9z7H8D0N8fbFj65aamtw9n5bSpP1Zl 1DjjC0pWYsNayogKF7qkFllaugP+9O0oQ0kAxCK002+w0x1J318xAjqTyRCYfghu AdR7Cb2APHn4iTjbaSqLul0Tms8DMzMYNfEME8BzLVJdk273dwj2rVmfSSJmlZrA afldvKMppQ9WHkU/4+yX7K24LKWsQFM7q5oubUNo+shLJU3KL+Q+2PeyDTOkju1N +LyfonNahFEa6JGgDLf3TTh/vPds5Mb1+bAZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFuV+PP9wpzCkiMH2IO+y91JvzxUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0Z1Vi1QUDl3cHpDa2lNSDJJTy15OTFKdnp4VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPc0lgwDQYJKoZIhvcNAQELBQADggEBAGittwCMyn9RkJ2C1NiiVkIh6Skh NWmYZqqPBWBNbsOHLJ4nCleDSySQOist0U+4B+Pu29n8XQqPlN1N/o8C1xYxrFYY 58bI9MJxG0ZvYEUaSmSmftIo4rrBBhwPfgY1VtNBXEHtJxKhvbpN7E84X4HfmJho 2BdxdOPCnB13A8P9bw2TO0xg+p2PS8uzC2o1jURwbdF9uP+Z/SpIx2e5IEALqhZZ dP86D/7ABrEixZVnEfCFvhwjT5SpHTlF6WoKaGq17cQ603s7q7fD2s7V+MP5ZYWe oMxICgy/37xvifN+UueAW+GFEn7XeytzbYqet4TCcl55nKmH6FZG0xTZdxU= -----END CERTIFICATE-----Generated at Sat Apr 26 18:22:47 2025 by rpki-client