$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_3SbeLzd4ZiQpOPqXidwNEbinPM.roa File: _3SbeLzd4ZiQpOPqXidwNEbinPM.roa (raw, json) Hash identifier: pkmSapXRttqpG7NBfNGObHE/3FgjCxEfQJTeDQy2vrs= Subject key identifier: FF:74:9B:78:BC:DD:E1:98:90:A4:E3:EA:5E:27:70:34:46:E2:9C:F3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C86 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_3SbeLzd4ZiQpOPqXidwNEbinPM.roa Signing time: Tue 01 Apr 2025 02:03:17 +0000 ROA not before: Tue 01 Apr 2025 02:03:17 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:17 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=FF749B78BCDDE19890A4E3EA5E27703446E29CF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ef:04:0e:46:9d:05:19:9a:38:e3:68:4b:6b: f1:4d:f9:64:c2:ea:ce:d7:13:89:e1:05:64:26:57: be:42:35:9d:4e:54:e0:2e:50:4b:1a:5f:30:2c:c7: 15:19:3b:49:ba:75:1e:7a:b4:6b:95:7e:ef:de:89: fb:b6:be:3d:89:ff:cb:1a:cd:f0:c0:ab:c3:39:3b: 0f:d8:c6:54:2c:6e:b4:95:1c:21:67:5c:15:63:94: 0e:f0:87:9b:79:a0:96:df:99:62:65:9d:c2:dc:53: 19:d9:83:41:a3:c1:b5:bb:b5:7e:a8:ce:98:e0:95: fb:2e:00:71:3a:3c:a0:8d:6c:55:a4:65:6a:bb:4c: 7c:88:ff:06:c0:f1:5a:a7:39:c1:0b:af:9d:9a:50: 15:47:e1:21:0b:25:4c:68:f5:89:d7:67:eb:5b:34: 20:1c:c6:0d:89:30:3a:df:6c:88:c2:17:86:97:d1: 82:0f:80:fe:56:d4:a7:19:43:4c:3c:83:b8:90:11: d2:f4:56:c0:ef:fa:4b:c6:5f:2b:e4:ae:46:82:83: fe:c0:02:34:2c:d4:7f:41:47:c2:0a:42:6d:6b:60: 55:1b:3a:14:41:f9:19:a6:dc:ea:1c:b2:72:99:2e: 68:a9:ec:67:af:43:4b:ce:99:bd:7b:26:b7:0c:64: af:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:74:9B:78:BC:DD:E1:98:90:A4:E3:EA:5E:27:70:34:46:E2:9C:F3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_3SbeLzd4ZiQpOPqXidwNEbinPM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.196.0/23 Signature Algorithm: sha256WithRSAEncryption d6:f3:52:5c:47:bc:92:5f:a7:cf:ec:e6:56:64:86:ba:62:67: 55:4e:cd:18:a1:9d:a1:5f:c6:91:be:e2:fc:b1:0a:31:33:2c: fc:2d:ce:42:c3:30:f4:ae:fc:b9:dd:88:8b:c2:3b:27:ff:a8: be:ae:92:44:45:64:6e:de:3e:05:61:5c:bc:37:d3:24:90:cc: f4:e1:92:41:aa:e6:ab:28:9f:ed:ac:34:14:7a:ce:bc:f4:76: 6c:82:26:79:bd:20:2e:44:2a:ba:31:50:93:51:a7:6e:e2:cd: 69:93:d0:f0:0f:96:30:45:f8:93:ac:67:0b:ab:db:56:2f:43: dc:32:78:58:c9:a6:1c:74:48:55:72:f5:80:b9:34:7b:88:a4: 8a:7a:6b:d8:05:7f:29:25:b2:50:84:19:bc:b0:1c:f7:ea:9d: 69:42:ff:17:33:a8:32:56:ea:8d:d5:5c:40:26:bd:65:14:81: d3:11:04:d9:08:18:33:a1:15:b8:41:8b:19:1a:5a:7b:f1:30: 4f:19:86:06:7b:fe:95:40:d9:26:e7:e6:37:90:31:e1:02:40: d1:df:fa:8a:96:1f:4d:84:2a:dd:52:d4:2b:9f:55:ca:b3:76: a1:f8:23:8c:8a:48:6e:0f:58:d4:4a:6e:5f:e3:81:77:a1:9d: a6:1c:a1:d1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMTdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEZGNzQ5Qjc4QkNEREUx OTg5MEE0RTNFQTVFMjc3MDM0NDZFMjlDRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDo7wQORp0FGZo442hLa/FN+WTC6s7XE4nhBWQmV75CNZ1OVOAu UEsaXzAsxxUZO0m6dR56tGuVfu/eifu2vj2J/8sazfDAq8M5Ow/YxlQsbrSVHCFn XBVjlA7wh5t5oJbfmWJlncLcUxnZg0GjwbW7tX6ozpjglfsuAHE6PKCNbFWkZWq7 THyI/wbA8VqnOcELr52aUBVH4SELJUxo9YnXZ+tbNCAcxg2JMDrfbIjCF4aX0YIP gP5W1KcZQ0w8g7iQEdL0VsDv+kvGXyvkrkaCg/7AAjQs1H9BR8IKQm1rYFUbOhRB +Rmm3OocsnKZLmip7GevQ0vOmb17JrcMZK9NAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/3SbeLzd4ZiQpOPqXidwNEbinPMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L18zU2JlTHpkNFppUXBPUHFYaWR3TkViaW5QTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBS8QwDQYJKoZIhvcNAQELBQADggEBANbzUlxHvJJfp8/s5lZkhrpiZ1VO zRihnaFfxpG+4vyxCjEzLPwtzkLDMPSu/LndiIvCOyf/qL6ukkRFZG7ePgVhXLw3 0ySQzPThkkGq5qson+2sNBR6zrz0dmyCJnm9IC5EKroxUJNRp27izWmT0PAPljBF +JOsZwur21YvQ9wyeFjJphx0SFVy9YC5NHuIpIp6a9gFfyklslCEGbywHPfqnWlC /xczqDJW6o3VXEAmvWUUgdMRBNkIGDOhFbhBixkaWnvxME8ZhgZ7/pVA2Sbn5jeQ MeECQNHf+oqWH02EKt1S1CufVcqzdqH4I4yKSG4PWNRKbl/jgXehnaYcodE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:19:17 2025 by rpki-client