$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wr8TtrnnTixJOBO4A1dm-9l1ybM.roa File: Wr8TtrnnTixJOBO4A1dm-9l1ybM.roa (raw, json) Hash identifier: 6mHiC10Agf/LCpWT3cRXI0EbRJokpk2ib1ZHTukiBzs= Subject key identifier: 5A:BF:13:B6:B9:E7:4E:2C:49:38:13:B8:03:57:66:FB:D9:75:C9:B3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D6D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wr8TtrnnTixJOBO4A1dm-9l1ybM.roa Signing time: Tue 01 Apr 2025 02:19:22 +0000 ROA not before: Tue 01 Apr 2025 02:19:22 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3437 (0xd6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:22 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=5ABF13B6B9E74E2C493813B8035766FBD975C9B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:6f:d9:85:3e:fc:82:4f:b4:0f:0b:9d:ae: e5:d5:82:f0:8f:cd:0f:a7:2d:17:65:e4:12:b5:48: 18:92:c8:1e:22:79:7e:9a:1e:ad:cd:51:60:f7:4e: 74:cf:8f:44:c8:f6:ea:ad:9e:1c:4c:74:d6:c0:63: c1:69:ec:4c:44:6c:6e:7d:1c:dd:eb:38:8a:7e:70: d7:a9:a6:61:ce:2d:c1:34:c7:73:cc:51:d2:92:c6: 66:55:80:3f:08:05:62:a4:c0:cc:d8:0b:f3:5c:27: 97:5a:3d:b9:56:3a:e6:9d:eb:02:da:91:37:d9:4d: f5:09:51:dc:37:7e:37:0e:ee:cf:4a:f5:80:f6:7e: 2f:2a:92:6a:1f:49:23:71:3c:7d:2d:9c:c3:14:ac: d3:0d:71:19:1f:b6:94:82:b5:f3:6d:89:35:2c:24: 05:40:28:17:9a:8e:2d:ed:29:20:c8:22:5e:0e:e7: 3e:81:c6:0b:f7:3f:a0:b5:a2:18:92:ee:c7:36:fa: 5d:a3:f5:da:68:f0:4d:af:8b:9c:0d:74:7d:87:70: 12:21:92:89:b7:d4:ec:06:3f:53:2e:85:c6:49:b8: 5c:50:9b:59:a1:8e:9b:a6:22:64:ec:ac:fa:07:99: bf:99:48:a9:a2:65:32:29:91:c6:d7:f6:a9:d0:01: 70:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BF:13:B6:B9:E7:4E:2C:49:38:13:B8:03:57:66:FB:D9:75:C9:B3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wr8TtrnnTixJOBO4A1dm-9l1ybM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.70.0/23 Signature Algorithm: sha256WithRSAEncryption e0:3b:89:39:62:84:8b:43:b8:3d:ce:31:ec:81:cf:e2:25:cc: 53:5c:3b:f9:0d:a3:3d:6f:c1:e0:e2:8b:12:d5:26:f4:0a:45: 25:8f:76:b0:b6:70:2e:e0:1e:d6:46:24:3d:a4:f5:25:d2:d4: 60:58:44:94:a5:28:95:38:e7:d5:d5:6c:c9:ef:77:36:83:40: ff:ff:66:68:80:72:19:61:6c:be:4a:4a:2f:26:cf:45:9b:a8: b2:78:f2:97:9a:f4:cc:57:23:00:b6:0f:51:7d:96:14:68:3a: a3:55:88:c9:ac:68:20:f9:20:36:8e:fb:99:14:c2:ed:a3:c0: d2:52:87:d5:75:87:75:a8:99:ff:af:9e:e0:fe:0a:11:29:78: b3:19:09:a7:80:b7:74:68:26:c8:0a:72:d3:ac:a1:72:09:92: 61:44:87:2f:f5:ab:a9:7a:11:f7:c9:89:8d:c4:67:2f:e7:3e: e2:df:5f:77:11:20:e2:88:2c:d0:f0:fd:06:77:b1:5a:0e:7e: dd:f5:6e:ef:7e:ff:5e:9c:e8:af:b7:13:45:f2:61:c4:ef:09: f8:00:4a:d9:a5:10:5c:e9:a4:ef:4d:0c:a9:01:47:d3:19:c6: 81:d3:54:8c:3a:79:58:49:4f:7f:99:12:01:d6:3a:71:04:cc: bd:ca:a7:ee -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MjJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVBQkYxM0I2QjlFNzRF MkM0OTM4MTNCODAzNTc2NkZCRDk3NUM5QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/kG/ZhT78gk+0DwudruXVgvCPzQ+nLRdl5BK1SBiSyB4ieX6a Hq3NUWD3TnTPj0TI9uqtnhxMdNbAY8Fp7ExEbG59HN3rOIp+cNeppmHOLcE0x3PM UdKSxmZVgD8IBWKkwMzYC/NcJ5daPblWOuad6wLakTfZTfUJUdw3fjcO7s9K9YD2 fi8qkmofSSNxPH0tnMMUrNMNcRkftpSCtfNtiTUsJAVAKBeaji3tKSDIIl4O5z6B xgv3P6C1ohiS7sc2+l2j9dpo8E2vi5wNdH2HcBIhkom31OwGP1MuhcZJuFxQm1mh jpumImTsrPoHmb+ZSKmiZTIpkcbX9qnQAXAPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUWr8TtrnnTixJOBO4A1dm+9l1ybMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1dyOFR0cm5uVGl4Sk9CTzRBMWRtLTlsMXliTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0kYwDQYJKoZIhvcNAQELBQADggEBAOA7iTlihItDuD3OMeyBz+IlzFNc O/kNoz1vweDiixLVJvQKRSWPdrC2cC7gHtZGJD2k9SXS1GBYRJSlKJU459XVbMnv dzaDQP//ZmiAchlhbL5KSi8mz0WbqLJ48pea9MxXIwC2D1F9lhRoOqNViMmsaCD5 IDaO+5kUwu2jwNJSh9V1h3Womf+vnuD+ChEpeLMZCaeAt3RoJsgKctOsoXIJkmFE hy/1q6l6EffJiY3EZy/nPuLfX3cRIOKILNDw/QZ3sVoOft31bu9+/16c6K+3E0Xy YcTvCfgAStmlEFzppO9NDKkBR9MZxoHTVIw6eVhJT3+ZEgHWOnEEzL3Kp+4= -----END CERTIFICATE-----Generated at Sat Apr 26 20:39:45 2025 by rpki-client