$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TnfMoOr3TEXvlYF6wObAYSADEUg.roa File: TnfMoOr3TEXvlYF6wObAYSADEUg.roa (raw, json) Hash identifier: cDcF6akY0P3gsSJCyako1vidBHGRlQlNtqjLn/eSKmI= Subject key identifier: 4E:77:CC:A0:EA:F7:4C:45:EF:95:81:7A:C0:E6:C0:61:20:03:11:48 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C7B Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TnfMoOr3TEXvlYF6wObAYSADEUg.roa Signing time: Tue 01 Apr 2025 02:00:39 +0000 ROA not before: Tue 01 Apr 2025 02:00:39 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3195 (0xc7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:00:39 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=4E77CCA0EAF74C45EF95817AC0E6C06120031148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:5d:70:e5:72:37:3f:b7:49:ce:52:07:30: b0:16:b7:f2:03:7a:89:30:11:81:4b:46:34:e2:0c: 53:d7:3c:f4:12:d6:b4:34:2d:05:00:57:3f:de:1f: 19:bb:5a:f8:ec:c8:69:88:bb:59:87:6a:84:a3:48: 3d:63:2c:29:cc:32:58:d6:8f:00:61:65:06:4a:4a: e6:52:59:0f:d1:72:82:ce:56:8a:8b:ee:fd:cc:6d: 0a:8c:b5:54:9d:e6:78:6e:b7:f4:d8:35:2c:d8:58: 41:a6:9b:b5:c5:b7:87:51:c3:6f:17:a3:b2:80:de: 37:51:60:a7:5e:d1:1c:fb:60:47:bb:cc:1d:3e:7d: bc:5a:e8:02:f1:d3:2b:d3:1b:18:6c:5a:56:d2:cb: b5:0f:46:d6:ae:98:f6:04:8f:62:45:8c:62:92:5c: 2d:25:5b:11:11:80:db:a2:49:2e:e5:ce:d0:24:2f: 36:9a:d9:82:a2:2a:87:47:88:cf:08:2c:28:a2:aa: cb:94:2d:3f:02:15:b1:de:78:4d:a9:53:7b:d8:0a: 9f:43:5f:e9:54:ab:0f:ce:08:5d:57:f4:fa:2b:35: 27:11:eb:8e:0d:8f:64:d4:88:5d:7d:87:9f:22:95: 0e:cf:36:98:1d:78:8b:27:0e:42:53:97:37:84:32: 06:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:77:CC:A0:EA:F7:4C:45:EF:95:81:7A:C0:E6:C0:61:20:03:11:48 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TnfMoOr3TEXvlYF6wObAYSADEUg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.14.0/23 Signature Algorithm: sha256WithRSAEncryption 58:3a:10:a6:16:e0:7f:2c:70:d2:2c:a7:d6:ba:a8:9e:3e:b8: 1f:bb:d9:46:cb:b7:10:97:f0:3c:e1:e9:1c:53:24:cc:e4:b8: 7f:9c:8d:17:5f:55:9e:09:0a:ee:15:ff:bc:f9:89:e6:ce:95: 23:a0:40:d9:d4:b7:34:5b:2a:82:9b:83:8f:9f:02:50:c3:1a: d2:cb:8a:20:f3:0a:9c:3d:ae:7f:7c:bc:b8:37:ed:d8:9e:c5: 60:40:44:da:10:bb:66:71:2c:c7:14:2b:d4:bf:0b:d6:90:06: 58:b2:7e:da:00:9f:6b:e0:df:b8:61:0c:fc:18:b6:e0:4a:4d: d8:8a:77:2c:c8:50:88:13:8f:85:bb:a6:7d:77:0e:ba:99:aa: 2d:bc:98:f2:be:ea:38:92:77:91:be:39:34:b4:73:f0:25:4e: da:f1:77:50:93:66:b7:0c:e1:1e:6c:55:62:50:c9:a8:7b:d2: 9f:c0:cb:cb:d1:5f:d1:e2:76:19:e9:bb:96:8c:3c:7e:49:d6: cb:ca:14:64:e1:90:40:e7:98:06:37:7d:8e:f0:96:58:ce:15: 0a:5b:cc:e1:37:68:51:51:81:90:93:9d:88:c8:15:ed:67:44: b7:ef:c0:65:50:f7:1f:ed:c4:e4:39:b4:10:54:a2:ce:b5:e5: 39:11:78:5a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDHswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAwMzlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRFNzdDQ0EwRUFGNzRD NDVFRjk1ODE3QUMwRTZDMDYxMjAwMzExNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK411w5XI3P7dJzlIHMLAWt/IDeokwEYFLRjTiDFPXPPQS1rQ0 LQUAVz/eHxm7WvjsyGmIu1mHaoSjSD1jLCnMMljWjwBhZQZKSuZSWQ/RcoLOVoqL 7v3MbQqMtVSd5nhut/TYNSzYWEGmm7XFt4dRw28Xo7KA3jdRYKde0Rz7YEe7zB0+ fbxa6ALx0yvTGxhsWlbSy7UPRtaumPYEj2JFjGKSXC0lWxERgNuiSS7lztAkLzaa 2YKiKodHiM8ILCiiqsuULT8CFbHeeE2pU3vYCp9DX+lUqw/OCF1X9PorNScR644N j2TUiF19h58ilQ7PNpgdeIsnDkJTlzeEMgZhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTnfMoOr3TEXvlYF6wObAYSADEUgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RuZk1vT3IzVEVYdmxZRjZ3T2JBWVNBREVVZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTw4wDQYJKoZIhvcNAQELBQADggEBAFg6EKYW4H8scNIsp9a6qJ4+uB+7 2UbLtxCX8Dzh6RxTJMzkuH+cjRdfVZ4JCu4V/7z5iebOlSOgQNnUtzRbKoKbg4+f AlDDGtLLiiDzCpw9rn98vLg37diexWBARNoQu2ZxLMcUK9S/C9aQBliyftoAn2vg 37hhDPwYtuBKTdiKdyzIUIgTj4W7pn13DrqZqi28mPK+6jiSd5G+OTS0c/AlTtrx d1CTZrcM4R5sVWJQyah70p/Ay8vRX9Hidhnpu5aMPH5J1svKFGThkEDnmAY3fY7w lljOFQpbzOE3aFFRgZCTnYjIFe1nRLfvwGVQ9x/txOQ5tBBUos615TkReFo= -----END CERTIFICATE-----Generated at Sat Apr 26 18:22:36 2025 by rpki-client