$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bLry2tZ4mYI3q8DjbPUVj62wQgk.roa File: bLry2tZ4mYI3q8DjbPUVj62wQgk.roa (raw, json) Hash identifier: O2hRjWn0+I/lDCfuVRDb2DgskDmZt32vmZnrAFFvSBM= Subject key identifier: 6C:BA:F2:DA:D6:78:99:82:37:AB:C0:E3:6C:F5:15:8F:AD:B0:42:09 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D49 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bLry2tZ4mYI3q8DjbPUVj62wQgk.roa Signing time: Tue 01 Apr 2025 02:17:10 +0000 ROA not before: Tue 01 Apr 2025 02:17:10 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 211.14.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3401 (0xd49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:17:10 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=6CBAF2DAD678998237ABC0E36CF5158FADB04209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f3:61:11:7f:10:ce:dd:83:36:7c:9c:71:a8: 24:8b:06:68:a5:63:b3:ef:78:eb:d7:3c:db:19:30: bf:31:e1:9f:b4:0f:c3:22:67:8b:81:bb:3d:0d:89: 71:0b:de:ab:c6:3f:76:d5:7d:fa:e8:ae:bf:3e:8d: 15:13:f9:3f:b7:35:e6:30:90:3f:27:74:32:07:a3: 7c:f4:af:28:82:8e:f7:94:6d:42:69:40:93:15:d9: 91:b4:3d:92:67:d1:c2:ae:e7:bd:8c:97:1b:21:e2: 2b:eb:a6:54:da:3a:56:84:b0:76:e3:a0:ee:f2:c3: eb:0b:de:df:62:f0:1f:30:a3:76:c7:99:2a:d6:3f: 87:1d:ee:0d:10:74:6b:32:bf:35:f9:34:af:b5:13: 29:47:ff:b4:0c:57:d6:78:58:97:c2:ab:2f:c9:b3: 49:09:89:2e:d7:81:61:bb:1c:08:c1:9f:89:ad:42: b7:03:d5:6c:19:50:02:af:6b:ef:3c:b0:c0:e9:a9: ec:2b:7d:7c:62:ad:32:4a:49:10:12:29:64:1c:08: d8:c2:8e:a2:68:71:a5:71:25:f9:20:cd:02:b8:0f: 30:70:89:df:9b:34:df:f7:23:10:20:3f:b4:c6:35: 87:49:57:21:42:7d:9f:46:66:a1:8a:be:3e:32:b3: d1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BA:F2:DA:D6:78:99:82:37:AB:C0:E3:6C:F5:15:8F:AD:B0:42:09 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bLry2tZ4mYI3q8DjbPUVj62wQgk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.92.0/23 Signature Algorithm: sha256WithRSAEncryption 13:7c:83:77:e2:75:db:ab:41:99:3c:b5:fe:3e:7c:18:8f:2f: d9:97:d7:61:e8:b1:dc:1c:9c:f6:80:cf:14:d1:89:be:47:09: 44:fa:47:96:36:4a:ea:2c:41:48:18:23:e4:31:4a:39:10:13: c1:b4:cc:4d:ef:1f:b6:c3:c6:34:85:80:ab:46:3b:92:7c:27: 25:63:98:b0:39:a0:6c:3c:8e:7d:41:7e:b9:d2:23:97:95:58: 44:26:2f:db:9c:ac:ef:98:af:2f:9d:fb:f8:82:41:93:c0:fb: 3a:66:49:fc:3f:36:5b:cd:ac:e7:c8:32:7c:16:54:ab:fa:7a: 14:37:84:c3:d3:de:dd:8f:b7:ad:b7:0e:32:f3:d6:db:98:a6: 79:ed:74:73:39:7f:ec:41:c1:6a:18:26:e0:7c:75:2b:2a:33: 33:87:93:f1:e5:28:32:5c:9d:eb:06:dd:de:18:a3:b4:93:37: 1f:ce:4e:ae:a4:3e:da:d7:b6:f4:3d:59:58:16:af:c7:59:5e: 6a:88:0c:e4:93:f4:9c:ff:38:77:3a:98:9d:44:1e:ee:65:e7: 3c:b1:99:4d:5a:e3:c5:90:66:36:59:8d:18:94:37:b4:fb:6d: 3a:65:18:51:f5:c8:ca:be:23:84:56:aa:df:7f:bc:3e:8d:45: cf:45:12:a5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE3MTBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZDQkFGMkRBRDY3ODk5 ODIzN0FCQzBFMzZDRjUxNThGQURCMDQyMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC182ERfxDO3YM2fJxxqCSLBmilY7PveOvXPNsZML8x4Z+0D8Mi Z4uBuz0NiXEL3qvGP3bVffrorr8+jRUT+T+3NeYwkD8ndDIHo3z0ryiCjveUbUJp QJMV2ZG0PZJn0cKu572Mlxsh4ivrplTaOlaEsHbjoO7yw+sL3t9i8B8wo3bHmSrW P4cd7g0QdGsyvzX5NK+1EylH/7QMV9Z4WJfCqy/Js0kJiS7XgWG7HAjBn4mtQrcD 1WwZUAKva+88sMDpqewrfXxirTJKSRASKWQcCNjCjqJocaVxJfkgzQK4DzBwid+b NN/3IxAgP7TGNYdJVyFCfZ9GZqGKvj4ys9GPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbLry2tZ4mYI3q8DjbPUVj62wQgkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2JMcnkydFo0bVlJM3E4RGpiUFVWajYyd1Fnay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTDlwwDQYJKoZIhvcNAQELBQADggEBABN8g3fiddurQZk8tf4+fBiPL9mX 12HosdwcnPaAzxTRib5HCUT6R5Y2SuosQUgYI+QxSjkQE8G0zE3vH7bDxjSFgKtG O5J8JyVjmLA5oGw8jn1BfrnSI5eVWEQmL9ucrO+Yry+d+/iCQZPA+zpmSfw/NlvN rOfIMnwWVKv6ehQ3hMPT3t2Pt623DjLz1tuYpnntdHM5f+xBwWoYJuB8dSsqMzOH k/HlKDJcnesG3d4Yo7STNx/OTq6kPtrXtvQ9WVgWr8dZXmqIDOST9Jz/OHc6mJ1E Hu5l5zyxmU1a48WQZjZZjRiUN7T7bTplGFH1yMq+I4RWqt9/vD6NRc9FEqU= -----END CERTIFICATE-----Generated at Sun May 18 11:16:45 2025 by rpki-client