$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/0YCypEMxhBUZZyAegjyN-LOXmB0.roa File: 0YCypEMxhBUZZyAegjyN-LOXmB0.roa (raw, json) Hash identifier: /jd1E/tl90Y9hH/ThKOpMVawvJPqpja/t6AKp7mFY/A= Subject key identifier: D1:80:B2:A4:43:31:84:15:19:67:20:1E:82:3C:8D:F8:B3:97:98:1D Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Certificate serial: 5D Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/0YCypEMxhBUZZyAegjyN-LOXmB0.roa Signing time: Thu 01 May 2025 01:32:33 +0000 ROA not before: Thu 01 May 2025 01:32:33 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 24295 IP address blocks: 203.95.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 May 2025 06:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Validity Not Before: May 1 01:32:33 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=D180B2A4433184151967201E823C8DF8B397981D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:61:bd:04:4c:f2:bd:17:af:2d:ca:a1:de:3c: 5a:8e:bb:78:1f:eb:a0:ae:f8:af:70:ed:3c:62:1a: 25:3c:c5:62:25:6a:00:82:59:6d:b5:37:c7:f3:56: f8:ab:e2:98:96:68:dd:4b:a6:48:63:d1:fc:3f:e5: b4:99:b7:eb:ee:7a:45:b9:c7:8e:09:28:8b:67:1d: b0:5f:34:92:07:45:ef:bf:33:7b:65:e7:f5:f4:fc: 13:dd:c8:88:e3:bf:60:74:bc:9d:c7:ff:39:bc:94: 66:1b:f7:aa:f2:aa:1e:f4:da:b3:62:07:52:27:16: c1:47:45:b9:55:e9:e2:3b:2a:ae:2a:3a:18:05:02: d0:e6:0e:11:78:99:70:f2:bb:12:05:c2:c5:26:3c: 7d:d0:e4:94:3b:95:02:5f:1a:5e:20:60:7c:a6:b5: 6a:fa:f9:30:8e:35:e9:d4:ed:ba:ae:2e:d2:41:41: 5b:61:6a:15:07:5a:e5:f9:19:4a:e8:ce:de:14:f7: 51:fe:76:14:08:c2:54:00:f4:48:6a:2f:46:86:98: c2:88:89:c2:b1:dc:c0:15:87:8c:4e:28:eb:95:eb: a7:76:e6:93:c9:7c:9d:4a:60:1e:5b:a6:41:ed:f2: 87:87:92:e9:1d:9c:bd:f9:2f:37:69:15:16:79:71: 6b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:80:B2:A4:43:31:84:15:19:67:20:1E:82:3C:8D:F8:B3:97:98:1D X509v3 Authority Key Identifier: keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/0YCypEMxhBUZZyAegjyN-LOXmB0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.95.24.0/21 Signature Algorithm: sha256WithRSAEncryption bb:8f:1b:07:a7:4b:87:f2:91:13:da:24:cf:df:a0:a9:c3:c9: 8a:ee:9c:ca:20:83:d5:9d:7e:12:80:3d:6f:f5:c0:50:c3:89: 1b:61:15:80:1d:f2:5e:3a:de:d9:8d:5a:81:cb:ad:7c:6b:3a: 58:16:41:90:fe:a2:8f:52:08:de:24:c6:c6:92:d4:cd:be:18: 02:9a:d3:c7:86:c1:9d:eb:ab:09:19:10:74:34:4a:a3:52:0b: d7:2d:77:bb:9e:60:da:07:78:af:89:63:0e:93:fd:73:de:70: b5:a3:31:cd:fd:f1:f6:f4:d7:24:e0:e6:3d:de:34:33:24:b7: 14:44:4b:b9:62:87:63:b5:33:5e:aa:45:90:51:38:43:2f:37: c7:53:d6:ca:68:ae:25:0f:34:13:4b:81:92:39:0c:7e:3e:e2: 8c:15:2f:07:06:8a:a9:21:64:51:96:cc:a3:1f:dc:1a:ca:1a: e9:6c:8b:aa:0c:8e:79:2d:3b:69:a6:06:0b:44:21:cc:c2:14: 3a:5d:7c:57:99:27:6e:9c:6f:f2:8b:33:e7:9e:6a:ad:40:8d: a4:37:f8:02:9e:a0:06:18:1a:ef:79:b9:2c:0a:33:d7:1b:4f: 01:56:8d:f2:4c:c7:15:82:47:ee:ce:29:2a:03:05:4c:c8:50: 6a:ff:a5:14 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODk5 NUQ2QjBEREMyMDVCMzU5NTkzMzJEMUNCMUQ5RDhDRjAyMjgzMB4XDTI1MDUwMTAx MzIzM1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRDE4MEIyQTQ0MzMxODQx NTE5NjcyMDFFODIzQzhERjhCMzk3OTgxRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPxhvQRM8r0Xry3Kod48Wo67eB/roK74r3DtPGIaJTzFYiVqAIJZ bbU3x/NW+KvimJZo3UumSGPR/D/ltJm36+56RbnHjgkoi2cdsF80kgdF778ze2Xn 9fT8E93IiOO/YHS8ncf/ObyUZhv3qvKqHvTas2IHUicWwUdFuVXp4jsqrio6GAUC 0OYOEXiZcPK7EgXCxSY8fdDklDuVAl8aXiBgfKa1avr5MI416dTtuq4u0kFBW2Fq FQda5fkZSujO3hT3Uf52FAjCVAD0SGovRoaYwoiJwrHcwBWHjE4o65Xrp3bmk8l8 nUpgHlumQe3yh4eS6R2cvfkvN2kVFnlxawkCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTRgLKkQzGEFRlnIB6CPI34s5eYHTAfBgNVHSMEGDAWgBQomV1rDdwgWzWVkzLR yx2djPAigzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2MDIvS0psZGF3M2NJRnMxbFpNeTBjc2RuWXp3SW9NLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0psZGF3M2NJRnMxbFpNeTBjc2Ru WXp3SW9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwNjAyLzBZQ3lwRU14aEJVWlp5QWVnanlOLUxPWG1CMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAPLXxgwDQYJKoZIhvcNAQELBQADggEBALuPGwenS4fykRPaJM/foKnD yYrunMogg9WdfhKAPW/1wFDDiRthFYAd8l463tmNWoHLrXxrOlgWQZD+oo9SCN4k xsaS1M2+GAKa08eGwZ3rqwkZEHQ0SqNSC9ctd7ueYNoHeK+JYw6T/XPecLWjMc39 8fb01yTg5j3eNDMktxRES7lih2O1M16qRZBROEMvN8dT1sporiUPNBNLgZI5DH4+ 4owVLwcGiqkhZFGWzKMf3BrKGulsi6oMjnktO2mmBgtEIczCFDpdfFeZJ26cb/KL M+eeaq1AjaQ3+AKeoAYYGu95uSwKM9cbTwFWjfJMxxWCR+7OKSoDBUzIUGr/pRQ= -----END CERTIFICATE-----Generated at Mon May 19 09:17:34 2025 by rpki-client