$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/H1efAgEboythWB0vorxyzEN0Ah8.roa File: H1efAgEboythWB0vorxyzEN0Ah8.roa (raw, json) Hash identifier: 2nTd2xfErhOoMTu0DHaoDKdaAg52UEyn/mxKCEikVe0= Subject key identifier: 1F:57:9F:02:01:1B:A3:2B:61:58:1D:2F:A2:BC:72:CC:43:74:02:1F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0EC2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/H1efAgEboythWB0vorxyzEN0Ah8.roa Signing time: Tue 10 Jun 2025 11:05:00 +0000 ROA not before: Tue 10 Jun 2025 11:05:00 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.79.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 15:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3778 (0xec2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:05:00 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=1F579F02011BA32B61581D2FA2BC72CC4374021F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:20:08:4c:60:b6:e1:b6:e7:41:f4:bf:fc:65: ba:82:77:24:6c:b0:f7:d7:64:39:a3:76:1f:45:8a: 6c:ca:01:8f:c9:05:88:f5:c7:ad:8a:60:1c:65:c2: 90:b5:16:8d:5c:b0:96:cf:f1:d4:77:60:6d:73:b3: 6f:a8:6b:4c:3e:25:f5:e0:5b:88:c0:b4:65:2d:8a: 53:e2:cf:8b:0c:59:f5:a9:21:44:a0:cd:66:76:a7: 00:50:f2:ef:c0:f8:f1:f9:83:17:c6:eb:ca:75:b4: db:49:90:a3:1d:61:32:43:c7:ec:68:ef:bb:9b:85: bb:5c:4b:83:18:ae:74:c0:7b:aa:87:9c:09:63:cb: 94:b5:25:f7:3d:d7:10:04:f6:27:4f:41:a7:3c:bb: fe:07:d4:37:05:22:64:a5:4b:a0:54:6a:e0:84:98: 58:71:3f:b1:0a:79:9e:c3:12:de:44:a0:c0:7d:81: 64:dd:5f:98:49:99:53:de:b7:f4:17:7d:1b:79:51: 7a:ab:44:91:76:9b:3c:a0:26:4b:ba:b2:03:2f:c2: 61:71:a3:76:dc:45:2e:26:06:44:5a:3d:c2:17:a7: 87:f4:5f:14:25:d3:6f:29:43:0b:6b:66:cd:7b:17: 6f:b7:f9:d5:63:12:70:17:15:61:03:ec:40:11:c0: 9d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:57:9F:02:01:1B:A3:2B:61:58:1D:2F:A2:BC:72:CC:43:74:02:1F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/H1efAgEboythWB0vorxyzEN0Ah8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.144.0/20 Signature Algorithm: sha256WithRSAEncryption 9a:cb:6c:f7:e2:61:c5:9b:76:42:6b:68:09:42:e1:3b:6f:a3: a6:65:ba:cf:20:56:ae:92:a9:85:e2:ef:64:b5:83:3a:82:11: 1b:b5:2a:76:d2:f0:ad:eb:6f:48:56:cd:f6:19:d6:1d:ce:5c: 07:a4:42:d7:ae:76:39:2e:56:66:ad:bd:f2:6d:46:5a:bd:39: 2f:00:7f:da:21:5c:54:63:22:60:78:05:19:20:69:e6:2c:f6: 20:5f:74:72:99:4b:dd:b7:a0:be:48:fe:d4:34:c9:e5:ca:a9: 6e:fb:67:53:d6:82:da:92:2f:09:46:f6:00:11:c4:94:dd:c1: 0c:87:1b:ea:32:20:6b:00:f7:7f:1c:bf:76:56:7a:e9:86:ff: fd:1d:b3:96:9e:63:8d:1a:7b:14:8e:a2:45:91:cc:98:83:31: a5:d5:64:74:15:c8:db:48:4b:4b:e0:93:6c:4d:3c:db:ad:1d: f9:d0:42:41:f3:42:17:57:98:fa:f5:09:52:d1:9e:3e:de:55: 05:0d:f1:2e:c3:42:5c:fc:d2:ea:ba:5b:1c:ae:d9:56:94:09: c8:63:86:fa:fd:2a:48:02:91:b2:6b:4a:94:8d:89:87:b6:69: 7b:64:f8:eb:85:8d:76:e3:03:0f:5d:11:e8:b8:f8:4a:e1:8d: 9b:66:f2:46 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDsIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTA1MDBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDFGNTc5RjAyMDExQkEz MkI2MTU4MUQyRkEyQkM3MkNDNDM3NDAyMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdIAhMYLbhtudB9L/8ZbqCdyRssPfXZDmjdh9FimzKAY/JBYj1 x62KYBxlwpC1Fo1csJbP8dR3YG1zs2+oa0w+JfXgW4jAtGUtilPiz4sMWfWpIUSg zWZ2pwBQ8u/A+PH5gxfG68p1tNtJkKMdYTJDx+xo77ubhbtcS4MYrnTAe6qHnAlj y5S1Jfc91xAE9idPQac8u/4H1DcFImSlS6BUauCEmFhxP7EKeZ7DEt5EoMB9gWTd X5hJmVPet/QXfRt5UXqrRJF2mzygJku6sgMvwmFxo3bcRS4mBkRaPcIXp4f0XxQl 028pQwtrZs17F2+3+dVjEnAXFWED7EARwJ0FAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUH1efAgEboythWB0vorxyzEN0Ah8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0gxZWZBZ0Vib3l0aFdCMHZvcnh5ekVOMEFoOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBT5AwDQYJKoZIhvcNAQELBQADggEBAJrLbPfiYcWbdkJraAlC4Ttvo6Zl us8gVq6SqYXi72S1gzqCERu1KnbS8K3rb0hWzfYZ1h3OXAekQteudjkuVmatvfJt Rlq9OS8Af9ohXFRjImB4BRkgaeYs9iBfdHKZS923oL5I/tQ0yeXKqW77Z1PWgtqS LwlG9gARxJTdwQyHG+oyIGsA938cv3ZWeumG//0ds5aeY40aexSOokWRzJiDMaXV ZHQVyNtIS0vgk2xNPNutHfnQQkHzQhdXmPr1CVLRnj7eVQUN8S7DQlz80uq6Wxyu 2VaUCchjhvr9KkgCkbJrSpSNiYe2aXtk+OuFjXbjAw9dEei4+ErhjZtm8kY= -----END CERTIFICATE-----Generated at Sat Jun 21 18:36:03 2025 by rpki-client