$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gIWI1a86E-fncLy9nbi89q1rQZo.roa File: gIWI1a86E-fncLy9nbi89q1rQZo.roa (raw, json) Hash identifier: 2+T8dWcGPTT7gXKEIRv3DFMmobuMWbSxjqSftbZW6zs= Subject key identifier: 80:85:88:D5:AF:3A:13:E7:E7:70:BC:BD:9D:B8:BC:F6:AD:6B:41:9A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CF7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gIWI1a86E-fncLy9nbi89q1rQZo.roa Signing time: Tue 01 Apr 2025 02:11:33 +0000 ROA not before: Tue 01 Apr 2025 02:11:33 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:33 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=808588D5AF3A13E7E770BCBD9DB8BCF6AD6B419A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:26:39:f9:a0:10:eb:0a:f6:15:a6:c4:99: 09:f4:95:35:22:b6:a2:72:f0:fe:9a:53:b0:ba:93: 3d:a0:f8:e7:91:8f:5f:06:75:67:da:da:5c:40:93: 78:4b:80:f1:f3:2f:6a:07:ab:2b:87:5d:00:af:6e: 95:05:fe:0f:c7:0c:29:e6:2a:22:d2:e2:e9:b7:e1: 42:92:c0:1e:22:91:68:13:c4:24:13:e9:9a:d0:2d: e0:4e:4c:9e:5c:31:c5:72:2d:39:d8:78:b4:7f:7c: 6b:02:74:90:c3:7a:6e:74:cd:21:01:bd:9b:1f:0e: 08:4f:e6:30:9d:4d:6d:4b:e0:e0:22:19:7e:76:84: 4e:55:35:3e:62:5e:16:bd:f8:da:4b:84:6f:9b:f8: 7a:3a:e8:77:65:5d:5b:86:6e:44:0b:d6:fa:5f:c8: ad:8c:5a:b8:7f:68:07:d3:ba:3d:61:9f:5b:aa:ae: 3f:3b:d5:d9:83:1e:b8:2a:84:35:13:21:32:2f:8b: 96:00:90:b7:37:a7:78:4a:12:c0:d6:18:93:c3:23: 53:00:32:57:bd:72:98:a7:03:75:34:2a:30:d4:f7: 58:1c:77:77:94:c6:9f:75:a5:34:bd:b9:fd:17:21: d0:6e:10:20:57:5d:85:a1:67:49:19:61:f3:a8:b8: f7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:85:88:D5:AF:3A:13:E7:E7:70:BC:BD:9D:B8:BC:F6:AD:6B:41:9A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gIWI1a86E-fncLy9nbi89q1rQZo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.184.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:b4:4d:74:76:31:5a:79:1d:3d:39:63:f8:5f:bc:29:60:95: 76:8a:6b:97:6a:35:fb:4e:29:e6:74:60:62:33:bf:9b:bf:aa: ea:a3:91:c1:8a:df:00:76:46:b7:90:c0:de:4b:11:b7:8d:58: 4e:af:a6:d6:52:6b:05:19:9f:8f:b9:70:7b:a8:d1:2b:e1:40: 73:9a:92:b2:2f:5b:75:94:c6:88:8a:58:3b:0a:ba:6c:a2:8c: 5f:98:a2:bc:db:a1:50:33:6b:57:fb:04:69:13:a7:6d:49:77: 0e:4f:4e:aa:cd:6a:76:93:31:9a:21:37:3d:34:86:7e:43:53: 7f:34:a0:c8:3f:35:33:8d:f7:eb:9b:15:1b:90:2b:c5:90:42: 4a:aa:fe:e9:00:88:37:2d:7e:75:d6:a3:f7:76:da:66:78:64: 22:fb:4e:8a:d9:d3:58:f8:ed:c8:3c:ce:b4:26:44:b5:92:8b: 0e:1b:58:bf:3a:ff:a8:1f:19:74:44:ae:70:3e:3f:48:b6:e4: 40:40:3c:f1:c5:47:48:dd:9a:47:7b:9a:aa:dd:09:cc:ff:02: 77:98:44:6d:7f:92:81:3c:b5:49:f9:ab:2f:8f:f7:01:37:9f: d1:4b:1a:7d:74:b3:f1:6e:20:8e:d6:16:8d:6f:72:12:83:b7: 58:6d:a5:71 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExMzNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgwODU4OEQ1QUYzQTEz RTdFNzcwQkNCRDlEQjhCQ0Y2QUQ2QjQxOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyVCY5+aAQ6wr2FabEmQn0lTUitqJy8P6aU7C6kz2g+OeRj18G dWfa2lxAk3hLgPHzL2oHqyuHXQCvbpUF/g/HDCnmKiLS4um34UKSwB4ikWgTxCQT 6ZrQLeBOTJ5cMcVyLTnYeLR/fGsCdJDDem50zSEBvZsfDghP5jCdTW1L4OAiGX52 hE5VNT5iXha9+NpLhG+b+Ho66HdlXVuGbkQL1vpfyK2MWrh/aAfTuj1hn1uqrj87 1dmDHrgqhDUTITIvi5YAkLc3p3hKEsDWGJPDI1MAMle9cpinA3U0KjDU91gcd3eU xp91pTS9uf0XIdBuECBXXYWhZ0kZYfOouPdRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgIWI1a86E+fncLy9nbi89q1rQZowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2dJV0kxYTg2RS1mbmNMeTluYmk4OXExclFaby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBS7gwDQYJKoZIhvcNAQELBQADggEBAE20TXR2MVp5HT05Y/hfvClglXaK a5dqNftOKeZ0YGIzv5u/quqjkcGK3wB2RreQwN5LEbeNWE6vptZSawUZn4+5cHuo 0SvhQHOakrIvW3WUxoiKWDsKumyijF+YorzboVAza1f7BGkTp21Jdw5PTqrNanaT MZohNz00hn5DU380oMg/NTON9+ubFRuQK8WQQkqq/ukAiDctfnXWo/d22mZ4ZCL7 TorZ01j47cg8zrQmRLWSiw4bWL86/6gfGXRErnA+P0i25EBAPPHFR0jdmkd7mqrd Ccz/AneYRG1/koE8tUn5qy+P9wE3n9FLGn10s/FuII7WFo1vchKDt1htpXE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:43:51 2025 by rpki-client