$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/Z4gfS-NSVk8uSXYQZPQVQIGMNis.roa File: Z4gfS-NSVk8uSXYQZPQVQIGMNis.roa (raw, json) Hash identifier: RscVWPgr9QHh1PsJF/zZ1D1BykUnzSPiQwEgofdmUOU= Subject key identifier: 67:88:1F:4B:E3:52:56:4F:2E:49:76:10:64:F4:15:40:81:8C:36:2B Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Certificate serial: 5F Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/Z4gfS-NSVk8uSXYQZPQVQIGMNis.roa Signing time: Thu 01 May 2025 01:32:34 +0000 ROA not before: Thu 01 May 2025 01:32:34 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 24295 IP address blocks: 122.255.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Validity Not Before: May 1 01:32:34 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=67881F4BE352564F2E49761064F41540818C362B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dd:b2:20:41:51:43:53:6a:a7:47:67:1b:21: 09:c7:81:61:75:a1:a6:fc:aa:e1:f4:a8:5a:3a:8a: 00:60:fa:7b:03:4b:9a:84:00:c3:9d:81:22:87:5d: cf:c4:a9:59:c2:0a:b0:34:72:b0:15:2c:c1:cd:58: 91:ff:a4:c8:78:30:12:47:33:3d:73:33:5b:81:da: 31:15:91:2c:b1:4e:53:89:a4:9b:84:1b:83:14:50: f1:5b:48:b7:eb:19:e5:35:89:b6:dd:d9:93:c3:70: d5:7d:94:7d:27:75:85:9e:4a:dd:38:eb:2b:f4:77: 33:6c:01:84:4c:79:90:a1:a6:1b:1c:32:5c:08:d8: d9:3e:bd:87:63:aa:35:35:ff:e1:a8:b9:9e:5d:ca: 62:70:03:7f:0c:6c:7b:8f:ec:96:0d:1b:ec:fb:41: 40:6d:22:8d:4f:54:b5:b1:e7:03:6a:7d:ce:af:14: 98:04:f1:09:8e:7a:35:9b:82:0d:dd:66:e9:9b:9e: 7e:25:e2:0f:8d:c1:94:51:0a:cd:92:b0:36:04:03: 89:46:fe:58:9f:cc:75:8a:93:cd:fc:07:b1:02:f6: 76:66:92:85:25:30:ae:ce:89:6f:48:69:3b:08:e6: 0b:ef:29:1d:da:0c:f0:49:f4:77:0a:e5:66:e2:55: e3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:88:1F:4B:E3:52:56:4F:2E:49:76:10:64:F4:15:40:81:8C:36:2B X509v3 Authority Key Identifier: keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/Z4gfS-NSVk8uSXYQZPQVQIGMNis.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.255.76.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:1b:a0:00:90:8a:57:c5:ac:ee:e0:07:7b:63:b1:69:3c:9f: 1f:6b:8d:01:3d:19:66:77:93:7a:46:cf:2e:d4:81:a7:1c:a9: fc:45:81:2a:4a:fd:68:39:e6:84:dd:d6:3f:8b:31:34:fa:c5: c4:16:18:f5:52:6c:9b:fe:1b:84:9c:47:1f:87:f7:bd:58:bf: 81:69:76:c0:ff:6c:64:dd:e1:13:a2:89:ae:75:91:f7:36:54: 6f:2c:21:cd:ed:44:ad:5c:9b:f1:f2:6c:d5:91:57:05:16:8d: cf:c1:ed:e1:ac:e2:aa:eb:4f:cb:ed:ff:68:cb:1b:b7:5f:f5: ff:63:05:81:60:c1:9b:ca:65:ef:10:ad:d5:4a:6f:25:e2:8f: e1:70:fa:03:14:5b:df:32:db:1e:90:35:f7:01:33:a3:24:01: 24:fd:fd:4e:ee:ad:d1:1f:48:9f:d5:83:e9:ef:e7:fd:28:53: 54:6e:82:c4:87:83:91:da:fb:5e:27:de:c6:10:12:56:ba:e5: a6:c8:6e:0a:be:d7:43:97:91:88:95:26:de:ff:e2:25:99:2d: bc:55:69:f4:36:20:57:e2:78:18:ed:95:6e:64:f1:77:dc:12: 40:c3:4d:ca:34:e9:e2:ea:de:8e:45:de:61:03:2b:09:e0:f2: 94:bc:64:2d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODk5 NUQ2QjBEREMyMDVCMzU5NTkzMzJEMUNCMUQ5RDhDRjAyMjgzMB4XDTI1MDUwMTAx MzIzNFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNjc4ODFGNEJFMzUyNTY0 RjJFNDk3NjEwNjRGNDE1NDA4MThDMzYyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOTdsiBBUUNTaqdHZxshCceBYXWhpvyq4fSoWjqKAGD6ewNLmoQA w52BIoddz8SpWcIKsDRysBUswc1Ykf+kyHgwEkczPXMzW4HaMRWRLLFOU4mkm4Qb gxRQ8VtIt+sZ5TWJtt3Zk8Nw1X2UfSd1hZ5K3TjrK/R3M2wBhEx5kKGmGxwyXAjY 2T69h2OqNTX/4ai5nl3KYnADfwxse4/slg0b7PtBQG0ijU9UtbHnA2p9zq8UmATx CY56NZuCDd1m6ZuefiXiD43BlFEKzZKwNgQDiUb+WJ/MdYqTzfwHsQL2dmaShSUw rs6Jb0hpOwjmC+8pHdoM8En0dwrlZuJV40cCAwEAAaOCAigwggIkMB0GA1UdDgQW BBRniB9L41JWTy5JdhBk9BVAgYw2KzAfBgNVHSMEGDAWgBQomV1rDdwgWzWVkzLR yx2djPAigzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2MDIvS0psZGF3M2NJRnMxbFpNeTBjc2RuWXp3SW9NLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0psZGF3M2NJRnMxbFpNeTBjc2Ru WXp3SW9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwNjAyL1o0Z2ZTLU5TVms4dVNYWVFaUFFWUUlHTU5pcy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJ6/0wwDQYJKoZIhvcNAQELBQADggEBAJoboACQilfFrO7gB3tjsWk8 nx9rjQE9GWZ3k3pGzy7UgaccqfxFgSpK/Wg55oTd1j+LMTT6xcQWGPVSbJv+G4Sc Rx+H971Yv4FpdsD/bGTd4ROiia51kfc2VG8sIc3tRK1cm/HybNWRVwUWjc/B7eGs 4qrrT8vt/2jLG7df9f9jBYFgwZvKZe8QrdVKbyXij+Fw+gMUW98y2x6QNfcBM6Mk AST9/U7urdEfSJ/Vg+nv5/0oU1RugsSHg5Ha+14n3sYQEla65abIbgq+10OXkYiV Jt7/4iWZLbxVafQ2IFfieBjtlW5k8XfcEkDDTco06eLq3o5F3mEDKwng8pS8ZC0= -----END CERTIFICATE-----Generated at Sun May 18 12:21:40 2025 by rpki-client