$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HebUE87BNpQq0j4juj6pZcDtqbY.roa File: HebUE87BNpQq0j4juj6pZcDtqbY.roa (raw, json) Hash identifier: sWC7Q9hQwfWI6TfSmPzB3GTywT+U2EU3k4MwGcbXX5U= Subject key identifier: 1D:E6:D4:13:CE:C1:36:94:2A:D2:3E:23:BA:3E:A9:65:C0:ED:A9:B6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DCC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HebUE87BNpQq0j4juj6pZcDtqbY.roa Signing time: Tue 01 Apr 2025 02:27:19 +0000 ROA not before: Tue 01 Apr 2025 02:27:19 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3532 (0xdcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:19 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1DE6D413CEC136942AD23E23BA3EA965C0EDA9B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:2f:5f:d9:b4:8c:bc:58:cf:66:cc:09:e5: 2d:5c:3a:7f:ed:19:e0:23:1a:b1:f5:41:9a:85:65: a7:79:9d:f8:cc:8e:54:3a:28:5d:2b:80:2a:2a:fd: 93:d2:79:67:35:d5:40:5b:73:79:92:7a:a9:f3:2b: be:f1:ce:23:6a:ed:96:e7:9a:38:b0:90:2b:dc:45: 58:26:dd:d3:86:f7:f4:f4:f6:2c:63:b4:ed:4f:8a: 84:71:eb:4f:cf:eb:47:f8:59:ee:22:40:fa:c0:40: 63:79:2d:cb:34:2d:3f:fa:41:27:99:a0:db:0a:10: e0:fe:4f:4d:60:6a:2c:ca:53:80:54:50:59:a8:a7: c5:e9:e9:56:de:cb:0a:17:81:9c:ab:07:11:0b:96: de:94:ea:d1:93:36:73:97:3e:19:a1:1f:a0:de:7d: 0f:28:2a:b4:ec:17:7c:fc:cb:56:66:d9:bc:c8:5d: 83:57:3b:5c:b6:e8:ab:f2:3d:ca:21:ff:4e:fc:b1: ba:22:45:97:90:2e:d2:ff:ad:bb:2c:b1:b6:41:1f: 4a:40:3e:91:b1:d0:fc:80:91:5b:f5:2d:18:4e:6e: 3a:2b:86:86:06:32:08:db:bb:a5:92:e5:34:fb:cb: 74:91:39:0a:90:db:bf:86:6f:9a:ab:6d:7a:9b:e9: 5a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E6:D4:13:CE:C1:36:94:2A:D2:3E:23:BA:3E:A9:65:C0:ED:A9:B6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HebUE87BNpQq0j4juj6pZcDtqbY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.232.0/23 Signature Algorithm: sha256WithRSAEncryption d4:a1:a1:20:d0:1f:66:bb:ad:3b:2e:8f:f2:a1:e8:9b:0b:64: 4d:0e:19:ac:c7:65:e3:61:21:6c:71:65:2b:1e:11:a5:ad:9a: 47:56:77:89:8a:71:2c:a1:98:a8:5b:8d:d4:a6:88:b3:a7:8f: ff:b7:b1:0d:a1:a2:21:13:ae:fc:21:e8:a7:1a:00:d5:7b:d5: ec:72:e4:1b:8d:0c:cd:3c:71:4c:ea:ee:e3:2f:80:63:2b:7b: e2:d0:7a:a1:d5:4a:c6:c2:88:fe:fb:e5:fa:60:1c:e5:5c:98: 3e:82:22:43:95:2d:69:41:ee:99:ef:bf:e3:66:ff:04:7b:4b: 66:64:4d:47:10:e5:63:76:04:b1:85:03:98:e5:12:e1:32:fd: 6b:f9:70:6c:b1:73:3e:c1:b0:10:eb:fb:16:03:22:d9:b6:d2: 6e:43:29:82:f3:a6:dd:a4:a6:dd:c5:e5:0e:57:d2:a3:4d:12: ac:87:fe:6d:7c:83:7c:4a:c7:c0:5a:59:85:fe:ee:e3:77:03: e0:69:7c:f0:b9:8d:59:05:3d:10:b8:bd:97:06:29:96:73:31: cc:b3:14:3a:82:cb:af:37:01:f2:3f:ae:e4:91:43:87:5d:07: 19:31:15:08:60:24:a8:ef:ea:9f:28:9a:8e:1b:87:fd:28:88: 97:98:31:61 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDcwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MTlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFERTZENDEzQ0VDMTM2 OTQyQUQyM0UyM0JBM0VBOTY1QzBFREE5QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLsi9f2bSMvFjPZswJ5S1cOn/tGeAjGrH1QZqFZad5nfjMjlQ6 KF0rgCoq/ZPSeWc11UBbc3mSeqnzK77xziNq7ZbnmjiwkCvcRVgm3dOG9/T09ixj tO1PioRx60/P60f4We4iQPrAQGN5Lcs0LT/6QSeZoNsKEOD+T01gaizKU4BUUFmo p8Xp6VbeywoXgZyrBxELlt6U6tGTNnOXPhmhH6DefQ8oKrTsF3z8y1Zm2bzIXYNX O1y26KvyPcoh/078sboiRZeQLtL/rbsssbZBH0pAPpGx0PyAkVv1LRhObjorhoYG Mgjbu6WS5TT7y3SROQqQ27+Gb5qrbXqb6VofAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHebUE87BNpQq0j4juj6pZcDtqbYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hlYlVFODdCTnBRcTBqNGp1ajZwWmNEdHFiWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS+gwDQYJKoZIhvcNAQELBQADggEBANShoSDQH2a7rTsuj/Kh6JsLZE0O GazHZeNhIWxxZSseEaWtmkdWd4mKcSyhmKhbjdSmiLOnj/+3sQ2hoiETrvwh6Kca ANV71exy5BuNDM08cUzq7uMvgGMre+LQeqHVSsbCiP775fpgHOVcmD6CIkOVLWlB 7pnvv+Nm/wR7S2ZkTUcQ5WN2BLGFA5jlEuEy/Wv5cGyxcz7BsBDr+xYDItm20m5D KYLzpt2kpt3F5Q5X0qNNEqyH/m18g3xKx8BaWYX+7uN3A+BpfPC5jVkFPRC4vZcG KZZzMcyzFDqCy683AfI/ruSRQ4ddBxkxFQhgJKjv6p8omo4bh/0oiJeYMWE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:58:59 2025 by rpki-client