$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rXEe5JaAhl0VTY6roSQ8MtEjcX0.roa File: rXEe5JaAhl0VTY6roSQ8MtEjcX0.roa (raw, json) Hash identifier: ki5UpJByYBYPRV0nOWiQEqSA5/RFWrnaa0rHIHFE1vE= Subject key identifier: AD:71:1E:E4:96:80:86:5D:15:4D:8E:AB:A1:24:3C:32:D1:23:71:7D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DB0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rXEe5JaAhl0VTY6roSQ8MtEjcX0.roa Signing time: Tue 01 Apr 2025 02:24:42 +0000 ROA not before: Tue 01 Apr 2025 02:24:42 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3504 (0xdb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:42 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=AD711EE49680865D154D8EABA1243C32D123717D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:9c:fd:c7:a4:53:fd:e2:33:53:02:9f:70: 01:52:42:fe:37:53:d6:ff:44:06:84:be:cb:70:2a: df:e3:f6:40:20:42:13:cd:56:5b:09:ba:99:79:db: 9a:00:4d:46:bf:6d:c3:cb:16:a5:42:e7:50:29:e9: c6:db:0d:0d:eb:6f:1d:c4:74:eb:0c:b0:39:94:a2: aa:4d:84:17:7b:a0:02:3f:2d:4d:7f:2b:d8:c3:9a: 9c:c9:b9:19:4a:32:c8:7b:bf:fc:bc:7e:59:d3:1e: 81:9c:66:72:49:d4:eb:10:ad:e9:78:ea:5e:ca:54: d4:da:46:76:ea:a9:c8:1a:d6:9f:5c:99:69:6c:bb: 03:1d:07:b5:2f:6c:7c:d2:a5:a5:59:a1:d9:20:03: f9:ec:d4:eb:39:3b:3d:70:30:6b:ec:c1:ea:fe:5b: 60:d7:ac:bd:d3:80:79:83:3d:72:0e:38:10:9c:87: 8c:c1:79:cd:30:84:80:d8:61:ed:50:2e:09:6a:33: d1:b3:a5:5d:d2:22:1f:e2:d3:02:26:3c:45:1a:12: 4d:93:6d:78:f9:f1:5e:cd:0f:a9:81:93:81:3f:6b: 19:94:bb:05:70:e8:53:e1:50:62:8e:f1:9f:7f:a7: 1a:45:9a:76:8a:69:a0:ad:df:61:d0:fc:f6:9d:02: 05:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:71:1E:E4:96:80:86:5D:15:4D:8E:AB:A1:24:3C:32:D1:23:71:7D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rXEe5JaAhl0VTY6roSQ8MtEjcX0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.230.0/24 Signature Algorithm: sha256WithRSAEncryption b1:8b:c2:e4:fd:2c:34:15:02:e9:04:20:b4:f0:4e:48:7c:bb: 6a:b7:63:41:f3:aa:d6:17:6e:3e:7a:93:ba:99:d5:16:ad:7a: 88:c9:52:7c:9e:79:a6:83:2c:bc:9f:6e:b9:24:e6:a9:5d:3a: 03:38:70:de:78:00:63:1d:e1:c8:36:c6:74:f4:fc:0b:44:d3: 35:c0:7d:97:4c:42:72:04:98:68:4e:e0:20:02:7a:97:42:e8: 80:da:fe:8b:1a:aa:ba:f7:42:69:7f:86:5c:44:37:f1:f1:5f: 2a:a0:c0:cc:e0:49:76:dc:bb:a3:5f:14:10:24:68:63:61:c7: b1:00:ce:dc:94:cd:ca:c8:06:9a:53:1b:55:97:d5:99:07:84: ad:50:3e:d7:5b:e4:fb:44:b6:19:2a:ff:58:bd:93:2c:e2:38: ce:84:79:35:32:6e:03:e8:c4:d5:a7:8d:d8:5d:2c:08:f3:18: cc:5e:7e:0f:06:9e:67:12:80:ae:32:c9:a7:f8:85:0d:2a:c9: 78:cc:64:92:5e:a0:0e:fb:82:0d:d3:63:17:3b:36:3c:5f:43: 6b:53:d9:aa:1f:4f:bc:65:53:1e:fb:b2:76:d3:47:b6:22:cf: 30:ad:e1:99:f6:d0:34:38:ae:1b:76:ff:52:da:7c:bf:e7:aa: ba:26:aa:7b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0NDJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFENzExRUU0OTY4MDg2 NUQxNTREOEVBQkExMjQzQzMyRDEyMzcxN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQZpz9x6RT/eIzUwKfcAFSQv43U9b/RAaEvstwKt/j9kAgQhPN VlsJupl525oATUa/bcPLFqVC51Ap6cbbDQ3rbx3EdOsMsDmUoqpNhBd7oAI/LU1/ K9jDmpzJuRlKMsh7v/y8flnTHoGcZnJJ1OsQrel46l7KVNTaRnbqqcga1p9cmWls uwMdB7UvbHzSpaVZodkgA/ns1Os5Oz1wMGvswer+W2DXrL3TgHmDPXIOOBCch4zB ec0whIDYYe1QLglqM9GzpV3SIh/i0wImPEUaEk2TbXj58V7ND6mBk4E/axmUuwVw 6FPhUGKO8Z9/pxpFmnaKaaCt32HQ/PadAgWrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrXEe5JaAhl0VTY6roSQ8MtEjcX0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3JYRWU1SmFBaGwwVlRZNnJvU1E4TXRFamNYMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABS+YwDQYJKoZIhvcNAQELBQADggEBALGLwuT9LDQVAukEILTwTkh8u2q3 Y0HzqtYXbj56k7qZ1RateojJUnyeeaaDLLyfbrkk5qldOgM4cN54AGMd4cg2xnT0 /AtE0zXAfZdMQnIEmGhO4CACepdC6IDa/osaqrr3Qml/hlxEN/HxXyqgwMzgSXbc u6NfFBAkaGNhx7EAztyUzcrIBppTG1WX1ZkHhK1QPtdb5PtEthkq/1i9kyziOM6E eTUybgPoxNWnjdhdLAjzGMxefg8GnmcSgK4yyaf4hQ0qyXjMZJJeoA77gg3TYxc7 NjxfQ2tT2aofT7xlUx77snbTR7YizzCt4Zn20DQ4rht2/1LafL/nqromqns= -----END CERTIFICATE-----Generated at Sat Apr 26 18:22:54 2025 by rpki-client