$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/k4cDjgnhwPaLJ8B55EieF_gL9sI.roa File: k4cDjgnhwPaLJ8B55EieF_gL9sI.roa (raw, json) Hash identifier: frubvPGpiYZZQaITiqKqx1MEcS9jjGcs+/MMq24FLvQ= Subject key identifier: 93:87:03:8E:09:E1:C0:F6:8B:27:C0:79:E4:48:9E:17:F8:0B:F6:C2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DE1 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k4cDjgnhwPaLJ8B55EieF_gL9sI.roa Signing time: Tue 01 Apr 2025 02:27:28 +0000 ROA not before: Tue 01 Apr 2025 02:27:28 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3553 (0xde1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:28 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=9387038E09E1C0F68B27C079E4489E17F80BF6C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:1a:9f:bb:59:d9:ec:6c:8e:b5:47:cd:aa: e4:ec:62:7f:a5:a8:42:ca:ac:6d:a8:a2:a0:7c:95: de:ff:72:13:8c:ed:f2:ea:08:43:fd:bb:b7:45:8f: 0c:c5:30:92:82:23:72:86:60:90:48:db:11:d5:57: 70:90:6a:ec:f2:82:67:6c:48:16:25:d4:5f:c5:73: 12:f0:38:72:68:e4:5a:ee:d0:fd:a6:40:cb:44:21: 7c:58:c4:d4:34:db:a9:b9:d3:9d:ac:2c:8c:64:79: db:94:10:41:bd:a2:41:e5:fb:24:fe:64:54:3a:55: 4a:6a:05:0b:72:04:29:c8:ce:01:75:0c:f3:14:da: 56:59:3c:d0:8d:bd:3d:cc:21:b2:46:ac:44:0a:c5: 64:1c:af:9c:f5:3d:6d:81:79:d4:41:0a:fc:67:bb: 1e:86:2a:a0:75:0b:2d:c3:44:b1:e7:46:57:d3:aa: 1f:96:bf:d4:82:e3:07:d5:f1:31:78:09:72:ac:4b: d6:ad:f5:95:2c:d1:5b:cd:4a:c0:1c:19:56:b1:27: 5a:18:9c:69:28:ee:95:b7:9c:f3:cb:ce:95:b1:fe: 55:bd:5e:74:d1:8c:f7:ab:83:b1:94:39:7d:6f:c4: 3d:68:d8:e3:53:86:55:a0:97:e8:b8:46:3a:05:a5: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:87:03:8E:09:E1:C0:F6:8B:27:C0:79:E4:48:9E:17:F8:0B:F6:C2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k4cDjgnhwPaLJ8B55EieF_gL9sI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.100.0/22 Signature Algorithm: sha256WithRSAEncryption aa:90:70:cd:37:5a:52:55:67:fa:1a:85:d3:20:3a:74:e1:8d: 26:3e:83:fa:ea:6c:50:91:12:4d:76:d9:06:43:76:db:5e:db: ea:8c:84:b2:4d:cd:3f:0b:a8:f8:5d:33:99:20:9b:ee:0e:6c: 28:c1:c6:df:36:1a:4c:09:9c:01:b7:58:22:da:3c:37:a5:80: fa:31:de:11:cc:66:de:bb:be:8d:cb:20:c2:9b:71:a2:3b:2c: 69:e0:73:b9:a8:b8:24:c6:dc:b0:07:87:da:10:9f:4c:d1:de: b5:0b:3e:0c:bd:51:c5:ee:15:b7:b3:65:fb:ad:16:5b:37:43: db:aa:1b:49:7e:a4:f1:11:eb:eb:3e:87:8a:74:ae:49:6f:aa: 54:10:3c:82:13:4d:6c:6b:af:63:af:32:be:cf:22:08:c8:7a: eb:ce:d7:56:aa:8c:4b:f0:06:28:23:8a:9c:dc:70:e8:95:3a: 07:9c:4e:85:14:c1:43:f3:76:ef:ad:39:7a:5e:fa:8c:ab:e7: 08:89:fc:a6:9c:5c:9f:cf:f9:ee:75:42:b9:bb:98:68:81:51: 54:79:51:31:c8:ec:29:e7:f5:88:2f:e0:14:4f:d4:76:bd:4f: b3:cf:d4:39:06:a9:85:83:3d:fe:65:b3:7a:51:54:50:70:1b: eb:be:45:99 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDeEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MjhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkzODcwMzhFMDlFMUMw RjY4QjI3QzA3OUU0NDg5RTE3RjgwQkY2QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDImBqfu1nZ7GyOtUfNquTsYn+lqELKrG2ooqB8ld7/chOM7fLq CEP9u7dFjwzFMJKCI3KGYJBI2xHVV3CQauzygmdsSBYl1F/FcxLwOHJo5Fru0P2m QMtEIXxYxNQ026m5052sLIxkeduUEEG9okHl+yT+ZFQ6VUpqBQtyBCnIzgF1DPMU 2lZZPNCNvT3MIbJGrEQKxWQcr5z1PW2BedRBCvxnux6GKqB1Cy3DRLHnRlfTqh+W v9SC4wfV8TF4CXKsS9at9ZUs0VvNSsAcGVaxJ1oYnGko7pW3nPPLzpWx/lW9XnTR jPerg7GUOX1vxD1o2ONThlWgl+i4RjoFpV4NAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUk4cDjgnhwPaLJ8B55EieF/gL9sIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2s0Y0RqZ25od1BhTEo4QjU1RWllRl9nTDlzSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIb5mQwDQYJKoZIhvcNAQELBQADggEBAKqQcM03WlJVZ/oahdMgOnThjSY+ g/rqbFCREk122QZDdtte2+qMhLJNzT8LqPhdM5kgm+4ObCjBxt82GkwJnAG3WCLa PDelgPox3hHMZt67vo3LIMKbcaI7LGngc7mouCTG3LAHh9oQn0zR3rULPgy9UcXu FbezZfutFls3Q9uqG0l+pPER6+s+h4p0rklvqlQQPIITTWxrr2OvMr7PIgjIeuvO 11aqjEvwBigjipzccOiVOgecToUUwUPzdu+tOXpe+oyr5wiJ/KacXJ/P+e51Qrm7 mGiBUVR5UTHI7Cnn9Ygv4BRP1Ha9T7PP1DkGqYWDPf5ls3pRVFBwG+u+RZk= -----END CERTIFICATE-----Generated at Sat Apr 26 18:23:22 2025 by rpki-client