$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pF9Ar59i0a1qMTblMahWIUrI2jo.roa File: pF9Ar59i0a1qMTblMahWIUrI2jo.roa (raw, json) Hash identifier: 8lQPaNm8RpxSZbX7Lxy/03vcFy37nfpwHRJabJqaPrk= Subject key identifier: A4:5F:40:AF:9F:62:D1:AD:6A:31:36:E5:31:A8:56:21:4A:C8:DA:3A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CF2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pF9Ar59i0a1qMTblMahWIUrI2jo.roa Signing time: Tue 01 Apr 2025 02:11:30 +0000 ROA not before: Tue 01 Apr 2025 02:11:30 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:30 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=A45F40AF9F62D1AD6A3136E531A856214AC8DA3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:da:84:7d:4c:0b:c9:9c:bd:3e:53:5c:f7: fa:bd:34:94:d4:8e:1c:59:c6:a7:c9:00:40:32:32: e5:f9:43:d5:99:80:2f:06:05:6d:01:c5:de:d1:e0: 68:4a:e2:25:3b:1d:73:92:00:e7:e9:ba:d2:03:a5: c6:5e:75:87:d6:73:e1:61:74:3e:d0:ea:66:c6:f5: 66:de:57:db:08:be:61:65:ca:6b:11:0d:a2:00:2f: 44:b9:56:39:35:17:29:b5:8e:f9:d6:70:e1:ce:0d: 0c:61:98:61:6e:2e:3d:df:d6:b1:9d:8f:cc:6a:1c: 5c:f2:cf:1b:ad:9c:fb:e3:74:0c:c0:c0:9b:78:67: 06:e5:1a:7c:58:72:51:c2:e6:f7:61:42:41:e7:c1: 3c:d8:ee:1e:4b:f8:cd:63:85:85:4f:80:b5:c0:ad: c0:c3:d8:51:0e:d0:08:41:a4:d1:ec:ea:76:c9:e6: 18:ad:46:ec:ea:9c:74:a6:58:13:c9:11:49:8a:ad: c1:66:56:d1:d9:16:14:b5:c3:30:5c:7b:68:49:e9: c3:b3:03:fd:9f:80:05:70:fc:5c:26:19:11:fb:3c: 04:72:04:3d:ba:13:0c:1e:72:31:6f:52:47:62:21: 71:ef:a9:3f:1f:ac:68:d6:5c:6e:c2:97:f8:59:46: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5F:40:AF:9F:62:D1:AD:6A:31:36:E5:31:A8:56:21:4A:C8:DA:3A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pF9Ar59i0a1qMTblMahWIUrI2jo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.20.0/23 Signature Algorithm: sha256WithRSAEncryption 75:9f:36:fc:b1:6d:e1:99:05:19:45:93:63:e3:74:45:df:22: 22:8c:f8:c5:6d:a9:f8:16:6f:e4:f9:0f:ee:38:5b:f7:0e:41: 3b:7b:fb:00:74:a9:65:0b:20:23:d2:25:90:7c:51:d4:c5:49: 62:7d:8a:d6:f1:3c:9d:ac:f7:bd:23:8c:89:62:aa:92:4e:cf: ee:d7:96:64:c4:05:1a:98:fb:d1:d3:f0:e9:ec:0e:02:36:88: af:38:06:ea:75:09:2e:9c:b9:72:c9:de:12:5d:70:1e:09:34: 2a:b8:d7:a7:97:a6:85:e5:27:75:66:c6:1c:20:73:44:a1:48: 33:fe:61:4c:d8:0e:29:60:5c:ee:1d:1c:37:9e:89:ff:69:80: 71:f6:d7:84:0a:ae:d6:a2:a1:92:34:67:dd:08:97:0d:83:7a: 3b:71:de:14:d2:3d:4e:2c:44:58:26:b0:74:3e:67:a0:41:4f: 94:6b:81:c1:ef:d0:ad:23:3c:5f:a2:b2:c3:77:12:44:ce:dc: 0e:7d:b7:fd:93:4d:79:b7:cd:0b:f4:17:2c:20:f5:89:ab:55: d2:7f:bf:ac:b4:81:c8:04:4d:49:f9:76:df:35:46:cb:66:7b: 37:ac:e8:00:80:a1:ba:cc:27:c7:3a:8e:a1:25:e2:d2:b7:be: e1:2e:67:97 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExMzBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE0NUY0MEFGOUY2MkQx QUQ2QTMxMzZFNTMxQTg1NjIxNEFDOERBM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzJ9qEfUwLyZy9PlNc9/q9NJTUjhxZxqfJAEAyMuX5Q9WZgC8G BW0Bxd7R4GhK4iU7HXOSAOfputIDpcZedYfWc+FhdD7Q6mbG9WbeV9sIvmFlymsR DaIAL0S5Vjk1Fym1jvnWcOHODQxhmGFuLj3f1rGdj8xqHFzyzxutnPvjdAzAwJt4 ZwblGnxYclHC5vdhQkHnwTzY7h5L+M1jhYVPgLXArcDD2FEO0AhBpNHs6nbJ5hit RuzqnHSmWBPJEUmKrcFmVtHZFhS1wzBce2hJ6cOzA/2fgAVw/FwmGRH7PARyBD26 EwwecjFvUkdiIXHvqT8frGjWXG7Cl/hZRlI9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUpF9Ar59i0a1qMTblMahWIUrI2jowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3BGOUFyNTlpMGExcU1UYmxNYWhXSVVySTJqby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHc0hQwDQYJKoZIhvcNAQELBQADggEBAHWfNvyxbeGZBRlFk2PjdEXfIiKM +MVtqfgWb+T5D+44W/cOQTt7+wB0qWULICPSJZB8UdTFSWJ9itbxPJ2s970jjIli qpJOz+7XlmTEBRqY+9HT8OnsDgI2iK84Bup1CS6cuXLJ3hJdcB4JNCq416eXpoXl J3Vmxhwgc0ShSDP+YUzYDilgXO4dHDeeif9pgHH214QKrtaioZI0Z90Ilw2Dejtx 3hTSPU4sRFgmsHQ+Z6BBT5RrgcHv0K0jPF+issN3EkTO3A59t/2TTXm3zQv0Fywg 9YmrVdJ/v6y0gcgETUn5dt81Rstmezes6ACAobrMJ8c6jqEl4tK3vuEuZ5c= -----END CERTIFICATE-----Generated at Sat Apr 26 19:43:53 2025 by rpki-client