$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XPWbDzygO8bVN-Bccajixn0jUfg.roa File: XPWbDzygO8bVN-Bccajixn0jUfg.roa (raw, json) Hash identifier: wrwMYwwfUnWZZTaSn3nlglCrHS0gbfRQiWm8nBa1ufg= Subject key identifier: 5C:F5:9B:0F:3C:A0:3B:C6:D5:37:E0:5C:71:A8:E2:C6:7D:23:51:F8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D87 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XPWbDzygO8bVN-Bccajixn0jUfg.roa Signing time: Tue 01 Apr 2025 02:21:30 +0000 ROA not before: Tue 01 Apr 2025 02:21:30 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.78.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3463 (0xd87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:21:30 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=5CF59B0F3CA03BC6D537E05C71A8E2C67D2351F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:b4:0c:7f:1e:93:27:e8:20:02:c6:c3:1d: b4:8b:39:a4:e6:bb:18:46:35:c8:32:62:94:0b:df: 40:e3:e9:64:63:a8:b4:50:c2:0e:f1:94:b8:2a:c1: 56:ac:fb:75:de:f1:b3:04:de:e8:c4:15:5a:eb:4f: f9:e5:ed:ea:f9:a9:85:33:ff:82:26:88:1c:d3:76: fa:85:e9:1c:d6:d3:d8:62:36:a3:a6:22:e6:0a:f2: 47:1d:06:c2:48:44:49:3c:cf:0b:cc:9c:e0:4e:a8: ce:0a:44:c7:b9:0a:59:03:14:9c:95:94:ed:95:97: 20:ae:c3:c8:a5:72:9f:cd:1f:e4:51:ad:af:48:3f: 23:58:d8:e1:60:b0:72:ae:66:6b:92:03:d5:0a:15: 9f:79:9f:1b:08:74:d7:b0:81:ba:70:80:04:81:85: 23:94:17:b6:de:d9:cc:a8:91:2d:cc:f8:31:54:af: d4:a5:2e:f9:fe:9b:8b:b4:3f:e3:33:95:a6:ee:e2: 64:ea:a6:3f:fb:e4:65:4c:b8:77:7b:f8:d3:17:06: 5a:97:22:23:2c:c3:ca:16:79:21:9f:9b:ee:db:eb: 4b:dc:c1:dc:10:1c:91:93:65:87:30:4a:33:ca:fa: 66:22:e0:04:ce:d0:96:94:a6:4a:cb:94:80:4b:b0: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F5:9B:0F:3C:A0:3B:C6:D5:37:E0:5C:71:A8:E2:C6:7D:23:51:F8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XPWbDzygO8bVN-Bccajixn0jUfg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.44.0/22 Signature Algorithm: sha256WithRSAEncryption 63:5f:5d:e6:6c:42:86:0b:26:96:72:2c:37:1c:3c:99:42:a6: 01:4b:c7:8a:43:fb:41:3a:ad:82:31:ea:88:45:97:f1:00:57: f3:37:cb:3d:ea:c2:68:3b:5f:bb:0d:32:21:c4:ab:78:aa:fe: d8:57:e9:10:a3:fb:a0:b8:dc:99:9b:ea:40:0d:aa:6f:11:93: 0e:23:6e:1f:66:04:71:68:c0:d3:3d:73:45:43:31:d8:4c:71: d1:f3:d2:1e:ed:3e:bc:4c:63:d5:d0:c6:e2:bd:7b:5a:1c:96: ee:9e:54:bd:2d:24:52:dc:e2:6d:eb:00:04:1c:aa:53:e0:f6: 43:63:d2:c7:42:12:b3:4a:66:f3:12:e5:bc:7c:0c:90:df:53: a7:ab:93:fc:92:eb:92:84:81:bd:93:08:70:98:85:10:52:14: a6:0e:13:02:60:3b:5a:50:d8:48:32:3a:38:94:b2:7e:f3:ae: 9b:a2:de:ee:43:21:0f:4c:d3:b6:a0:30:0b:b9:76:01:93:a7: 1c:69:96:10:81:db:90:67:9c:6f:24:1f:11:d7:fa:1d:80:af: a9:6d:dd:ab:62:d9:e2:33:00:64:e0:02:b1:89:73:7e:b9:30: 1b:39:ea:82:e4:5d:99:83:cc:8d:6c:89:fe:17:4f:c1:c7:bf: b3:d9:c7:37 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjIxMzBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVDRjU5QjBGM0NBMDNC QzZENTM3RTA1QzcxQThFMkM2N0QyMzUxRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+BrQMfx6TJ+ggAsbDHbSLOaTmuxhGNcgyYpQL30Dj6WRjqLRQ wg7xlLgqwVas+3Xe8bME3ujEFVrrT/nl7er5qYUz/4ImiBzTdvqF6RzW09hiNqOm IuYK8kcdBsJIREk8zwvMnOBOqM4KRMe5ClkDFJyVlO2VlyCuw8ilcp/NH+RRra9I PyNY2OFgsHKuZmuSA9UKFZ95nxsIdNewgbpwgASBhSOUF7be2cyokS3M+DFUr9Sl Lvn+m4u0P+Mzlabu4mTqpj/75GVMuHd7+NMXBlqXIiMsw8oWeSGfm+7b60vcwdwQ HJGTZYcwSjPK+mYi4ATO0JaUpkrLlIBLsPfFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXPWbDzygO8bVN+Bccajixn0jUfgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hQV2JEenlnTzhiVk4tQmNjYWppeG4walVmZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTiwwDQYJKoZIhvcNAQELBQADggEBAGNfXeZsQoYLJpZyLDccPJlCpgFL x4pD+0E6rYIx6ohFl/EAV/M3yz3qwmg7X7sNMiHEq3iq/thX6RCj+6C43Jmb6kAN qm8Rkw4jbh9mBHFowNM9c0VDMdhMcdHz0h7tPrxMY9XQxuK9e1oclu6eVL0tJFLc 4m3rAAQcqlPg9kNj0sdCErNKZvMS5bx8DJDfU6erk/yS65KEgb2TCHCYhRBSFKYO EwJgO1pQ2EgyOjiUsn7zrpui3u5DIQ9M07agMAu5dgGTpxxplhCB25BnnG8kHxHX +h2Ar6lt3ati2eIzAGTgArGJc365MBs56oLkXZmDzI1sif4XT8HHv7PZxzc= -----END CERTIFICATE-----Generated at Sat Apr 26 18:25:16 2025 by rpki-client