$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZTs5FhWiDriOE4wbsXA08CItUOc.roa File: ZTs5FhWiDriOE4wbsXA08CItUOc.roa (raw, json) Hash identifier: BuoxPxTejW1Da4o0N7EAajk1C40iHcvSVNPcH1ckHow= Subject key identifier: 65:3B:39:16:15:A2:0E:B8:8E:13:8C:1B:B1:70:34:F0:22:2D:50:E7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DC3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZTs5FhWiDriOE4wbsXA08CItUOc.roa Signing time: Tue 01 Apr 2025 02:24:50 +0000 ROA not before: Tue 01 Apr 2025 02:24:50 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3523 (0xdc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:50 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=653B391615A20EB88E138C1BB17034F0222D50E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:d9:fe:96:d4:35:f8:48:63:27:7c:ea:ea: 93:a7:b6:f7:9c:82:92:36:d9:89:12:49:b7:2d:69: 30:35:14:33:05:38:db:56:fd:c1:78:2a:19:66:be: 7d:49:7d:e4:6f:eb:48:9a:98:ff:98:45:ac:09:1b: 33:00:c3:f2:97:f3:e3:3c:26:49:02:ae:ea:2b:86: 9c:b6:8c:65:c6:32:5b:04:fa:29:98:c9:f6:9f:29: 71:b7:83:65:dc:2d:bb:3c:f4:63:58:1e:35:8a:94: b4:6a:02:c8:15:ab:d3:48:2f:cb:1c:e0:4e:66:26: 3e:57:a3:ed:d1:c0:9d:ae:c3:e1:8f:dc:8a:89:74: b1:4d:64:15:3b:69:71:0a:dd:88:0f:b4:7f:0c:24: 1b:f8:b3:33:9d:50:4a:a0:d8:5b:0c:dc:7d:01:58: 90:3d:22:96:3e:40:af:01:2b:36:cd:7c:83:7a:3e: 5c:f7:c0:52:22:da:fe:c3:73:f5:99:cc:0c:f5:c5: 80:03:36:28:6f:19:f3:35:30:fe:84:c8:5d:cc:bf: 5d:01:fb:10:bc:25:81:82:1e:71:c1:d5:d2:9b:5f: 22:5e:89:32:69:fe:a1:4d:cd:6e:16:45:e8:02:fa: dd:74:d5:15:e0:90:7e:7a:83:38:11:e9:f0:3d:cb: e9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3B:39:16:15:A2:0E:B8:8E:13:8C:1B:B1:70:34:F0:22:2D:50:E7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZTs5FhWiDriOE4wbsXA08CItUOc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.90.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:93:cf:27:b6:60:86:96:6c:a8:98:47:91:a4:ec:25:eb:b5: 1d:bf:29:b8:cb:13:b1:73:cf:a5:30:7d:45:ae:c2:e1:f2:2c: c9:dd:2f:4f:98:2c:01:93:96:05:b7:dd:cf:7c:d4:f6:40:ff: b6:91:4c:f7:f7:df:56:49:36:3c:2d:43:26:23:46:e7:ba:d2: 84:e9:78:e5:c5:de:ee:ec:87:97:d3:3e:b4:31:9a:75:02:75: 0d:78:35:7c:53:30:a6:4b:fa:c3:9a:f5:ed:a6:e0:95:ec:d5: 69:4c:ab:8a:b0:e6:a7:60:18:23:8e:55:06:f9:19:28:74:3b: 74:f0:1a:36:93:27:00:4e:22:c1:a7:47:28:73:28:c1:34:5e: b3:0b:c8:73:ad:27:ee:04:d1:6e:bd:83:08:a9:c2:42:6a:55: 78:95:2b:a6:aa:6c:f5:95:c8:5d:04:15:79:63:38:e5:62:08: 8d:2e:02:7d:2f:8e:87:e4:e7:8e:ca:72:d5:93:b8:bf:77:ff: 89:8e:ef:10:7b:77:76:48:bf:e8:5f:1e:8b:f0:0a:8b:d6:75: a7:24:61:f7:20:f7:28:6b:3e:fc:58:d1:f6:54:1c:1e:10:2e: a7:0b:b2:c2:9f:eb:ad:da:03:39:8f:61:1c:c7:ae:bf:8b:7d: 62:1d:40:e8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDcMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0NTBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY1M0IzOTE2MTVBMjBF Qjg4RTEzOEMxQkIxNzAzNEYwMjIyRDUwRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN0Nn+ltQ1+EhjJ3zq6pOntvecgpI22YkSSbctaTA1FDMFONtW /cF4Khlmvn1JfeRv60iamP+YRawJGzMAw/KX8+M8JkkCruorhpy2jGXGMlsE+imY yfafKXG3g2XcLbs89GNYHjWKlLRqAsgVq9NIL8sc4E5mJj5Xo+3RwJ2uw+GP3IqJ dLFNZBU7aXEK3YgPtH8MJBv4szOdUEqg2FsM3H0BWJA9IpY+QK8BKzbNfIN6Plz3 wFIi2v7Dc/WZzAz1xYADNihvGfM1MP6EyF3Mv10B+xC8JYGCHnHB1dKbXyJeiTJp /qFNzW4WRegC+t101RXgkH56gzgR6fA9y+nBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZTs5FhWiDriOE4wbsXA08CItUOcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pUczVGaFdpRHJpT0U0d2JzWEEwOENJdFVPYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBT1owDQYJKoZIhvcNAQELBQADggEBAB6Tzye2YIaWbKiYR5Gk7CXrtR2/ KbjLE7Fzz6UwfUWuwuHyLMndL0+YLAGTlgW33c981PZA/7aRTPf331ZJNjwtQyYj Rue60oTpeOXF3u7sh5fTPrQxmnUCdQ14NXxTMKZL+sOa9e2m4JXs1WlMq4qw5qdg GCOOVQb5GSh0O3TwGjaTJwBOIsGnRyhzKME0XrMLyHOtJ+4E0W69gwipwkJqVXiV K6aqbPWVyF0EFXljOOViCI0uAn0vjofk547KctWTuL93/4mO7xB7d3ZIv+hfHovw CovWdackYfcg9yhrPvxY0fZUHB4QLqcLssKf663aAzmPYRzHrr+LfWIdQOg= -----END CERTIFICATE-----Generated at Sat Apr 26 18:20:43 2025 by rpki-client