$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/exhObln6bvPyKMARkrxhn_0p660.roa File: exhObln6bvPyKMARkrxhn_0p660.roa (raw, json) Hash identifier: mLYN+/OicowwxoOV8chjOH/lZlSPAixHa7PSKXWWJF4= Subject key identifier: 7B:18:4E:6E:59:FA:6E:F3:F2:28:C0:11:92:BC:61:9F:FD:29:EB:AD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C5D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/exhObln6bvPyKMARkrxhn_0p660.roa Signing time: Tue 01 Apr 2025 01:57:29 +0000 ROA not before: Tue 01 Apr 2025 01:57:29 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:29 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=7B184E6E59FA6EF3F228C01192BC619FFD29EBAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:0a:ce:ce:85:45:0f:57:f3:fc:40:bf:97: 02:a5:f2:3f:72:f8:50:1e:04:fa:b0:d1:63:77:42: 86:74:ac:9b:ee:42:8c:e8:a6:b2:e8:3b:08:a0:a5: f2:e5:4f:e8:9a:1a:8e:4a:51:03:08:cb:85:2d:90: ee:3d:00:c9:78:02:54:f3:6a:16:e6:16:d0:e1:aa: 04:78:a5:00:b9:e4:2e:32:11:23:11:95:ba:3f:64: ab:9b:5b:8b:f1:14:9f:a7:89:4d:b8:c8:03:d4:2e: b6:0b:64:e3:d2:eb:72:54:08:79:b6:67:14:2d:dd: 7f:f8:94:da:d8:36:78:3f:98:f8:c8:df:cd:a1:41: e0:9a:85:7d:60:2c:4e:a4:4e:17:d2:1c:ac:26:96: 5c:8c:0c:03:24:f7:2b:d5:36:ec:57:9b:79:6a:4e: 86:d3:c5:ce:d9:05:83:bd:90:1c:61:5e:13:a4:d3: e7:fc:e0:84:7b:e3:3f:73:c5:67:2c:30:7a:49:b2: cb:d7:00:69:7e:06:43:52:79:1b:b6:6b:15:ac:6e: 17:d5:59:04:8a:a9:21:76:4f:19:80:e0:18:99:8e: e8:59:46:39:91:f0:24:4b:e5:7e:c7:70:44:03:73: c4:79:c2:54:94:21:8a:62:70:2d:45:7e:27:7f:15: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:18:4E:6E:59:FA:6E:F3:F2:28:C0:11:92:BC:61:9F:FD:29:EB:AD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/exhObln6bvPyKMARkrxhn_0p660.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.128.0/19 Signature Algorithm: sha256WithRSAEncryption 44:4a:20:d6:14:4e:f2:67:3f:c0:37:5e:5a:89:c9:cd:94:2f: 11:d5:47:53:18:f7:43:93:f5:65:f0:39:4d:b8:69:1c:be:e5: 66:4a:96:a6:6f:52:f7:1a:5d:ef:73:2d:63:19:e5:d4:dc:93: 03:ac:62:4e:80:ee:27:f9:71:cd:9b:ab:86:96:0b:33:5c:c7: f5:6c:bd:5e:32:8f:8d:41:91:68:2e:8c:fb:c2:49:45:87:de: ea:30:c1:e4:a5:ff:fd:d8:a8:28:72:3e:44:47:a8:01:29:0d: c6:3f:9e:01:12:3f:1c:83:91:ac:aa:fc:c7:a8:96:41:c5:e5: 5d:e2:b8:c3:43:c2:63:52:7c:d9:52:fe:f4:1b:82:b6:37:9a: 9b:c3:ce:73:ee:ca:bf:89:d4:0e:48:3f:a8:29:01:e8:9f:a4: 22:8c:70:5a:a1:03:3f:3b:ed:12:40:90:ba:9b:bf:2e:1b:b6: 1a:4e:53:4d:c9:8b:44:ad:04:7a:d6:94:a1:2e:04:70:c5:00: 56:55:13:f9:06:1f:99:54:5f:79:55:da:53:b1:bb:1c:b1:59: dc:9f:25:05:8c:3d:31:62:d0:78:9b:3a:25:6f:60:74:e7:6e: b1:21:1f:0f:fd:5d:ef:a8:1e:28:da:f9:3d:67:e0:6c:f3:c4: 2a:79:d3:20 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MjlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdCMTg0RTZFNTlGQTZF RjNGMjI4QzAxMTkyQkM2MTlGRkQyOUVCQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHoArOzoVFD1fz/EC/lwKl8j9y+FAeBPqw0WN3QoZ0rJvuQozo prLoOwigpfLlT+iaGo5KUQMIy4UtkO49AMl4AlTzahbmFtDhqgR4pQC55C4yESMR lbo/ZKubW4vxFJ+niU24yAPULrYLZOPS63JUCHm2ZxQt3X/4lNrYNng/mPjI382h QeCahX1gLE6kThfSHKwmllyMDAMk9yvVNuxXm3lqTobTxc7ZBYO9kBxhXhOk0+f8 4IR74z9zxWcsMHpJssvXAGl+BkNSeRu2axWsbhfVWQSKqSF2TxmA4BiZjuhZRjmR 8CRL5X7HcEQDc8R5wlSUIYpicC1Ffid/Fe1BAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUexhObln6bvPyKMARkrxhn/0p660wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2V4aE9ibG42YnZQeUtNQVJrcnhobl8wcDY2MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUb5oAwDQYJKoZIhvcNAQELBQADggEBAERKINYUTvJnP8A3XlqJyc2ULxHV R1MY90OT9WXwOU24aRy+5WZKlqZvUvcaXe9zLWMZ5dTckwOsYk6A7if5cc2bq4aW CzNcx/VsvV4yj41BkWgujPvCSUWH3uowweSl//3YqChyPkRHqAEpDcY/ngESPxyD kayq/MeolkHF5V3iuMNDwmNSfNlS/vQbgrY3mpvDznPuyr+J1A5IP6gpAeifpCKM cFqhAz877RJAkLqbvy4bthpOU03Ji0StBHrWlKEuBHDFAFZVE/kGH5lUX3lV2lOx uxyxWdyfJQWMPTFi0HibOiVvYHTnbrEhHw/9Xe+oHija+T1n4GzzxCp50yA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:40:02 2025 by rpki-client