$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zs8X-EAkokNLUT4_Ypr03ou_whs.roa File: Zs8X-EAkokNLUT4_Ypr03ou_whs.roa (raw, json) Hash identifier: kBUnlcYQi6PlCsdRD/c5sOx3r19a7Hk5l/WDLDl8PDo= Subject key identifier: 66:CF:17:F8:40:24:A2:43:4B:51:3E:3F:62:9A:F4:DE:8B:BF:C2:1B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D3E Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zs8X-EAkokNLUT4_Ypr03ou_whs.roa Signing time: Tue 01 Apr 2025 02:17:05 +0000 ROA not before: Tue 01 Apr 2025 02:17:05 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3390 (0xd3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:17:05 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=66CF17F84024A2434B513E3F629AF4DE8BBFC21B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:e2:7e:60:52:ba:ca:59:fc:4c:a0:3e:15: 98:b9:86:d7:40:16:73:67:37:71:31:d9:0c:a9:a7: 09:62:5d:c0:69:c5:1b:2a:c0:63:c2:20:f5:d1:b2: 46:8b:04:b2:05:96:97:d6:d0:c7:fc:b4:15:4c:14: ed:35:ef:e0:e1:12:f6:0e:73:ec:1b:c4:9a:e1:85: 6e:ce:e8:1d:a7:72:81:cc:ca:34:b6:48:66:b9:c8: 78:71:51:4f:48:ef:48:bc:5e:e8:7f:fe:17:6b:54: 3d:ce:bf:cc:86:e1:ab:20:6e:85:0a:6a:0a:03:00: 85:60:79:92:2e:a6:b8:63:18:a2:02:ff:78:60:77: 3f:6c:ee:c7:e1:0e:81:0c:ab:9f:5c:71:2d:ed:dd: c3:46:30:ed:42:da:4e:67:4a:f1:e0:02:38:8f:49: 7f:c9:95:a1:e6:9e:45:c0:7b:ad:d8:61:01:4f:3b: 8b:29:d4:17:8a:f9:a6:8d:54:31:b9:4d:06:b4:ad: e1:fe:db:d7:5d:92:c5:56:d5:5c:69:f5:28:82:71: 12:05:21:94:cc:e2:ee:e8:14:61:17:f1:92:c1:54: f7:be:ed:21:62:07:4d:14:02:81:81:12:d8:ff:27: 43:df:01:e4:24:bd:a2:e3:b8:86:43:e0:d3:e3:9c: 1b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CF:17:F8:40:24:A2:43:4B:51:3E:3F:62:9A:F4:DE:8B:BF:C2:1B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zs8X-EAkokNLUT4_Ypr03ou_whs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.238.0/23 Signature Algorithm: sha256WithRSAEncryption 01:b5:4a:d5:a5:82:64:a6:39:5a:29:82:8f:e0:0e:5a:40:74: 26:fe:3d:11:ea:5b:a2:78:f6:c2:36:98:4c:8b:e5:41:e1:07: f8:c2:c6:c3:d8:59:fb:72:5b:31:70:dd:bc:dc:ae:92:8d:f3: c5:fe:b6:60:38:f1:b3:f2:50:04:7f:c0:ed:4a:80:2b:64:84: d5:59:bc:9a:ec:24:7d:d0:65:12:98:e5:fe:31:23:1f:e5:39: 02:6b:e4:2e:06:80:c6:e4:73:78:2d:b9:e3:3b:70:db:87:ad: 67:66:c8:03:53:8d:40:d7:a5:51:34:07:a4:05:78:7d:6b:d1: a9:79:88:1e:52:a9:78:0f:e0:c2:e8:47:e7:a3:ff:64:61:9a: 62:91:a5:4e:c0:a3:5a:57:23:ff:6a:7f:d2:e6:a5:9c:65:da: 93:e4:a2:f4:7e:90:ec:15:9f:4a:68:9d:2f:6f:b2:eb:d6:36: d7:c5:f6:86:94:94:f2:49:cd:08:1a:f9:a3:ac:50:d1:dc:b1: 90:ba:3a:3c:30:e9:a9:9e:6f:86:ce:7c:29:8f:08:3b:bc:8b: 13:0b:c0:1e:11:09:a1:f7:c1:8b:90:31:b7:35:25:d9:a3:5d: d1:51:f9:33:48:f4:0a:ee:4f:56:8a:d3:54:46:37:b6:a7:9a: 88:36:02:44 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE3MDVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY2Q0YxN0Y4NDAyNEEy NDM0QjUxM0UzRjYyOUFGNERFOEJCRkMyMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCMuJ+YFK6yln8TKA+FZi5htdAFnNnN3Ex2QyppwliXcBpxRsq wGPCIPXRskaLBLIFlpfW0Mf8tBVMFO017+DhEvYOc+wbxJrhhW7O6B2ncoHMyjS2 SGa5yHhxUU9I70i8Xuh//hdrVD3Ov8yG4asgboUKagoDAIVgeZIuprhjGKIC/3hg dz9s7sfhDoEMq59ccS3t3cNGMO1C2k5nSvHgAjiPSX/JlaHmnkXAe63YYQFPO4sp 1BeK+aaNVDG5TQa0reH+29ddksVW1Vxp9SiCcRIFIZTM4u7oFGEX8ZLBVPe+7SFi B00UAoGBEtj/J0PfAeQkvaLjuIZD4NPjnBulAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZs8X+EAkokNLUT4/Ypr03ou/whswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pzOFgtRUFrb2tOTFVUNF9ZcHIwM291X3docy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS+4wDQYJKoZIhvcNAQELBQADggEBAAG1StWlgmSmOVopgo/gDlpAdCb+ PRHqW6J49sI2mEyL5UHhB/jCxsPYWftyWzFw3bzcrpKN88X+tmA48bPyUAR/wO1K gCtkhNVZvJrsJH3QZRKY5f4xIx/lOQJr5C4GgMbkc3gtueM7cNuHrWdmyANTjUDX pVE0B6QFeH1r0al5iB5SqXgP4MLoR+ej/2RhmmKRpU7Ao1pXI/9qf9LmpZxl2pPk ovR+kOwVn0ponS9vsuvWNtfF9oaUlPJJzQga+aOsUNHcsZC6Ojww6ameb4bOfCmP CDu8ixMLwB4RCaH3wYuQMbc1JdmjXdFR+TNI9AruT1aK01RGN7anmog2AkQ= -----END CERTIFICATE-----Generated at Sat Apr 26 18:23:22 2025 by rpki-client