$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xhFwGJu9Z3YVUdLPKYr0o2W-9KE.roa File: xhFwGJu9Z3YVUdLPKYr0o2W-9KE.roa (raw, json) Hash identifier: k3nJL7DYLMxv6EKtJxIdDaO1uP0tBXETihX4938WMEE= Subject key identifier: C6:11:70:18:9B:BD:67:76:15:51:D2:CF:29:8A:F4:A3:65:BE:F4:A1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E0D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xhFwGJu9Z3YVUdLPKYr0o2W-9KE.roa Signing time: Tue 01 Apr 2025 02:31:27 +0000 ROA not before: Tue 01 Apr 2025 02:31:27 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3597 (0xe0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:31:27 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C61170189BBD67761551D2CF298AF4A365BEF4A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:bf:a7:c7:cb:7b:0f:e0:e5:77:dd:72:e1: a7:98:10:da:ab:b3:38:fe:c7:26:dd:1a:a8:c5:e9: 20:a5:8b:86:59:3d:10:03:58:52:13:a4:82:fc:ba: 0c:f4:88:9b:a0:0a:81:a0:d3:2a:18:6e:44:04:72: e1:cc:d6:d6:32:22:bd:00:1a:00:f4:4f:73:01:a7: 1a:19:72:56:6a:68:92:9f:b8:87:b7:3a:de:83:a5: ed:58:6f:c7:01:cf:93:83:84:ef:26:d4:83:76:a2: 17:2e:9e:d5:59:16:fe:15:f3:1f:59:cb:c1:f2:93: 38:af:98:48:35:d7:7e:52:a6:4e:ff:d8:a0:75:54: a8:b8:82:21:26:cf:e4:bb:09:46:3f:30:23:27:a7: ed:47:5c:c0:26:6b:6b:43:4c:46:5f:b8:2d:10:1b: 09:72:2c:61:c7:cc:13:98:b4:a8:9f:3a:f2:26:86: e5:15:10:f4:8c:bb:42:20:29:86:c9:bf:2c:78:7f: 5e:51:71:d4:a6:72:e1:1c:e7:e3:20:1d:d9:5c:61: 3e:00:71:cb:a9:35:00:3b:82:05:a4:d4:d9:d4:77: 75:df:24:f1:14:b1:5b:d1:49:f0:b2:dc:6d:2c:d1: 1f:48:c1:69:9e:2c:b8:b6:7b:77:1b:dd:0f:d3:c5: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:11:70:18:9B:BD:67:76:15:51:D2:CF:29:8A:F4:A3:65:BE:F4:A1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xhFwGJu9Z3YVUdLPKYr0o2W-9KE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.240.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:a8:97:06:0c:67:82:20:e9:f8:1e:fa:2f:72:b0:cc:fb:fd: cc:13:05:9e:4b:3e:74:ab:df:22:68:28:70:d6:3b:4a:10:a7: a6:a0:29:ea:e7:0b:ab:74:a4:c2:fb:91:16:93:2e:31:a1:97: 78:ea:3d:e2:00:fe:0e:3b:b4:ea:92:50:02:0b:8d:b3:42:97: 2c:69:e5:ea:ab:03:b6:93:4a:fd:de:51:b1:37:bb:bc:8b:65: 21:3c:d8:c5:a1:be:c5:cc:e2:fe:97:e0:4f:df:7d:5e:9a:90: 7b:47:6f:f4:f2:4e:4f:ac:95:9c:85:1c:f1:af:ea:10:bb:74: 7a:9f:1a:33:54:b5:c1:2c:dc:9b:48:3d:7d:c9:85:ee:9f:73: b7:45:5b:56:cb:f0:74:97:72:05:db:f0:35:79:b6:f7:7c:ad: 98:31:ac:f9:4e:b1:d7:fc:46:60:0b:d6:f5:08:e2:4e:6d:d1: 65:d1:d8:a1:f3:9f:2c:44:10:9d:ef:60:d6:34:49:a2:d6:e0: 54:09:9d:a8:f8:cb:58:db:d8:bc:5f:11:bc:1c:c3:71:49:80: b3:ce:a2:dd:c1:93:87:70:c2:1a:4f:9d:9e:cc:1b:f0:e8:1a: fe:5b:aa:3d:5e:9d:69:08:dd:09:a7:0a:8f:44:bd:ca:ef:b2: de:3b:e1:41 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDg0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMxMjdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM2MTE3MDE4OUJCRDY3 NzYxNTUxRDJDRjI5OEFGNEEzNjVCRUY0QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJqb+nx8t7D+Dld91y4aeYENqrszj+xybdGqjF6SCli4ZZPRAD WFITpIL8ugz0iJugCoGg0yoYbkQEcuHM1tYyIr0AGgD0T3MBpxoZclZqaJKfuIe3 Ot6Dpe1Yb8cBz5ODhO8m1IN2ohcuntVZFv4V8x9Zy8HykzivmEg1135Spk7/2KB1 VKi4giEmz+S7CUY/MCMnp+1HXMAma2tDTEZfuC0QGwlyLGHHzBOYtKifOvImhuUV EPSMu0IgKYbJvyx4f15RcdSmcuEc5+MgHdlcYT4AccupNQA7ggWk1NnUd3XfJPEU sVvRSfCy3G0s0R9IwWmeLLi2e3cb3Q/TxSGLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxhFwGJu9Z3YVUdLPKYr0o2W+9KEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3hoRndHSnU5WjNZVlVkTFBLWXIwbzJXLTlLRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBS/AwDQYJKoZIhvcNAQELBQADggEBAA+olwYMZ4Ig6fge+i9ysMz7/cwT BZ5LPnSr3yJoKHDWO0oQp6agKernC6t0pML7kRaTLjGhl3jqPeIA/g47tOqSUAIL jbNClyxp5eqrA7aTSv3eUbE3u7yLZSE82MWhvsXM4v6X4E/ffV6akHtHb/TyTk+s lZyFHPGv6hC7dHqfGjNUtcEs3JtIPX3Jhe6fc7dFW1bL8HSXcgXb8DV5tvd8rZgx rPlOsdf8RmAL1vUI4k5t0WXR2KHznyxEEJ3vYNY0SaLW4FQJnaj4y1jb2LxfEbwc w3FJgLPOot3Bk4dwwhpPnZ7MG/DoGv5bqj1enWkI3QmnCo9Evcrvst474UE= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:28 2025 by rpki-client on console.sobornost.net