$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VREU203GxSZp8kH95o6qCO1DNFI.roa File: VREU203GxSZp8kH95o6qCO1DNFI.roa (raw, json) Hash identifier: b9s4+muix1nb4TfsakfsEte5w3hkVD8pxn7BMyjXrxA= Subject key identifier: 55:11:14:DB:4D:C6:C5:26:69:F2:41:FD:E6:8E:AA:08:ED:43:34:52 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D15 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VREU203GxSZp8kH95o6qCO1DNFI.roa Signing time: Tue 01 Apr 2025 02:13:43 +0000 ROA not before: Tue 01 Apr 2025 02:13:43 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:13:43 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=551114DB4DC6C52669F241FDE68EAA08ED433452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:29:92:26:a6:ca:aa:8b:e2:07:98:54:d3:a8: 32:1e:26:50:15:c3:2d:d3:9c:30:67:bd:d7:d1:f8: 19:c4:44:a3:8b:1a:e3:4c:b2:b3:aa:3f:89:73:db: a4:82:6e:7a:ab:2f:ad:22:d5:10:20:46:b8:8f:8a: 00:33:11:74:66:b4:4f:e4:92:31:fb:cb:2f:10:a4: 71:53:9f:2a:b1:8c:2f:35:d1:64:3b:3c:e0:4e:e3: ff:80:68:ec:15:52:54:a6:9f:55:e1:e2:f8:2e:79: 5a:b8:15:39:d4:b1:41:05:fc:d4:02:f6:0c:9f:5c: d2:fd:0e:1d:59:6a:34:74:8f:69:00:78:8e:18:19: 74:3d:0a:c1:b9:a0:84:fc:2c:0c:d7:02:4f:5d:ac: ac:1c:37:40:2d:58:a6:34:b5:33:0b:30:b3:ce:54: 9c:a3:b2:be:64:9b:4d:9f:c4:61:c7:f6:3a:8d:bc: f5:31:a2:78:34:26:16:c1:dc:92:0c:52:f3:47:8b: e9:03:59:8e:80:b4:2e:63:18:4d:7b:81:ce:83:75: 44:a6:b4:28:1f:ec:57:b4:d4:e2:fa:36:d4:9d:07: 18:dd:96:5d:8e:63:60:0e:b4:3f:13:98:c1:2f:5b: 9c:5d:81:0c:28:39:f4:4f:24:c6:63:41:a1:26:4c: 25:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:11:14:DB:4D:C6:C5:26:69:F2:41:FD:E6:8E:AA:08:ED:43:34:52 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VREU203GxSZp8kH95o6qCO1DNFI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.96.0/21 Signature Algorithm: sha256WithRSAEncryption 77:03:6e:03:94:78:73:02:90:7c:f4:37:ef:76:22:f3:31:b0: 66:fc:f1:3f:dc:03:9c:7f:53:56:df:6e:63:04:d7:6e:e7:5f: 49:36:62:e3:85:a4:92:31:ff:e1:54:21:41:b0:83:fa:79:b6: 48:de:7a:12:36:ec:4f:32:81:52:0b:c3:03:ca:e5:8d:07:12: ff:d6:7d:6e:bf:8e:ae:fc:4a:d5:97:37:2c:4c:24:1b:7b:b4: 5f:e1:dd:b5:6d:a6:33:38:74:05:1d:48:7d:16:a7:84:c9:17: 7f:eb:46:af:fe:67:dc:8a:92:d9:d9:2f:24:78:c0:d3:ad:58: fb:a4:85:10:0d:d6:6a:db:ba:74:09:e9:33:1a:69:ba:44:8e: d5:f5:d9:ca:a3:18:7c:f7:4d:65:0b:ce:8c:c1:11:29:21:c2: 26:a8:58:55:ca:54:8f:44:c8:d3:b8:26:64:95:7c:cc:f8:56: 1b:b0:49:77:5b:42:90:bb:33:49:85:76:b6:bd:1e:b7:63:26: f3:12:21:2d:be:35:1c:cd:6d:6e:1c:62:5d:98:54:c6:97:2e: 13:86:fa:d0:07:63:c7:f2:b0:ef:2f:87:20:e4:c8:6a:07:e3: 35:6a:df:eb:51:4b:1c:99:e3:22:36:43:b2:b2:c1:9c:2e:61: 5c:e7:92:b3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjEzNDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU1MTExNERCNERDNkM1 MjY2OUYyNDFGREU2OEVBQTA4RUQ0MzM0NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEKZImpsqqi+IHmFTTqDIeJlAVwy3TnDBnvdfR+BnERKOLGuNM srOqP4lz26SCbnqrL60i1RAgRriPigAzEXRmtE/kkjH7yy8QpHFTnyqxjC810WQ7 POBO4/+AaOwVUlSmn1Xh4vgueVq4FTnUsUEF/NQC9gyfXNL9Dh1ZajR0j2kAeI4Y GXQ9CsG5oIT8LAzXAk9drKwcN0AtWKY0tTMLMLPOVJyjsr5km02fxGHH9jqNvPUx ong0JhbB3JIMUvNHi+kDWY6AtC5jGE17gc6DdUSmtCgf7Fe01OL6NtSdBxjdll2O Y2AOtD8TmMEvW5xdgQwoOfRPJMZjQaEmTCVzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVREU203GxSZp8kH95o6qCO1DNFIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ZSRVUyMDNHeFNacDhrSDk1bzZxQ08xRE5GSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPc0mAwDQYJKoZIhvcNAQELBQADggEBAHcDbgOUeHMCkHz0N+92IvMxsGb8 8T/cA5x/U1bfbmME127nX0k2YuOFpJIx/+FUIUGwg/p5tkjeehI27E8ygVILwwPK 5Y0HEv/WfW6/jq78StWXNyxMJBt7tF/h3bVtpjM4dAUdSH0Wp4TJF3/rRq/+Z9yK ktnZLyR4wNOtWPukhRAN1mrbunQJ6TMaabpEjtX12cqjGHz3TWULzozBESkhwiao WFXKVI9EyNO4JmSVfMz4VhuwSXdbQpC7M0mFdra9HrdjJvMSIS2+NRzNbW4cYl2Y VMaXLhOG+tAHY8fysO8vhyDkyGoH4zVq3+tRSxyZ4yI2Q7KywZwuYVznkrM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:25:19 2025 by rpki-client