$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/xAASmElmAl6vdxN8acFJHfeURio.roa File: xAASmElmAl6vdxN8acFJHfeURio.roa (raw, json) Hash identifier: i227q8wdZlYEbSxQBgtuHhjzedt6wrA3Rx+j2UxDB24= Subject key identifier: C4:00:12:98:49:66:02:5E:AF:77:13:7C:69:C1:49:1D:F7:94:46:2A Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Certificate serial: 6E Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/xAASmElmAl6vdxN8acFJHfeURio.roa Signing time: Mon 12 May 2025 06:19:56 +0000 ROA not before: Mon 12 May 2025 06:19:56 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 55897 IP address blocks: 157.17.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Validity Not Before: May 12 06:19:56 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=C40012984966025EAF77137C69C1491DF794462A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:35:f9:f5:ab:af:11:3a:9a:0a:0c:b4:07:6e: 4a:54:5d:b8:74:56:33:4a:a1:91:c1:48:bb:36:fb: 87:a9:a9:3a:ef:7d:b7:72:a3:1e:3d:60:1d:ec:b1: df:90:7d:29:9d:35:97:a6:0a:9b:ed:5a:0e:83:d5: 74:8c:f8:b9:c1:22:17:b9:57:71:d4:77:0a:b1:28: 73:61:dd:fb:e4:50:90:33:46:00:63:75:1a:e2:f4: 18:71:44:50:f6:7f:d4:b5:db:3b:3a:45:f9:71:fe: 38:90:19:98:c1:fd:88:20:4c:0f:b2:8f:62:3c:d5: 4a:f9:75:a8:68:1c:02:d4:8a:fb:f0:18:58:92:44: 95:9d:da:f6:70:1b:15:a7:1a:44:76:8d:01:03:7a: 02:2d:8d:ac:3f:72:4f:a0:c8:b1:23:cc:54:4a:a7: 61:51:3a:76:59:b4:1c:2c:2a:a0:df:04:55:32:86: 20:6f:5a:ca:8b:db:25:9d:b4:64:4d:17:38:5a:20: a3:a3:4c:73:d1:21:52:27:05:74:39:da:5c:8e:c5: f1:8c:c4:12:bf:a7:f5:92:79:01:15:e7:32:fa:7a: 3c:8f:60:51:a6:a4:01:38:ad:0a:af:ff:ec:fb:ce: c5:38:22:14:4b:66:d0:0f:0d:ec:3a:92:25:47:e0: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:00:12:98:49:66:02:5E:AF:77:13:7C:69:C1:49:1D:F7:94:46:2A X509v3 Authority Key Identifier: keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/xAASmElmAl6vdxN8acFJHfeURio.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.17.176.0/24 Signature Algorithm: sha256WithRSAEncryption 31:25:b3:81:89:60:82:42:ec:82:6b:c0:d6:d2:a5:29:c9:f8: 72:f4:b7:16:19:c5:8f:2a:ec:dd:6a:96:8a:56:de:fa:91:dd: c0:c0:a1:ab:3e:b3:51:00:43:72:a3:43:75:b6:d3:f6:a1:13: 92:19:94:a8:d7:3c:f0:bb:08:dc:85:f8:fc:89:52:7b:59:29: e1:44:1e:47:4e:99:12:d2:52:51:70:d9:4f:26:65:d5:ce:da: e1:af:50:26:58:07:0e:8f:4b:16:46:54:1f:d8:c2:9c:d3:92: 8b:6d:07:ea:e4:3a:fd:45:ce:1e:e5:45:3d:56:80:dd:40:a2: f0:5f:6b:74:28:eb:aa:9a:44:5e:e1:7b:ec:ce:cf:93:c3:bd: 45:01:60:19:7a:af:6a:0b:71:3f:03:26:c7:4e:aa:13:91:9d: 61:f6:ae:fd:37:3e:a1:7b:de:4b:38:15:e0:22:c1:ea:6d:83: d4:b9:90:5d:82:08:c8:60:b1:34:6e:28:e5:9b:0e:f3:c6:f6: 2a:b3:f3:3b:46:8d:da:1d:e4:aa:b6:32:27:25:14:f5:71:70: 63:6c:6d:ae:62:9a:02:2b:07:6c:0a:9a:a2:48:49:46:60:b5: 4d:97:68:b6:43:10:a9:ad:1b:9e:cf:60:6d:cd:62:7d:18:ac: 63:e0:d4:bf -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkM0 NjI5NEE1RDU2NDM3RTE5QTExQUVGOUZCOUI4Nzc2OTAxNDNFMB4XDTI1MDUxMjA2 MTk1NloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQzQwMDEyOTg0OTY2MDI1 RUFGNzcxMzdDNjlDMTQ5MURGNzk0NDYyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANs1+fWrrxE6mgoMtAduSlRduHRWM0qhkcFIuzb7h6mpOu99t3Kj Hj1gHeyx35B9KZ01l6YKm+1aDoPVdIz4ucEiF7lXcdR3CrEoc2Hd++RQkDNGAGN1 GuL0GHFEUPZ/1LXbOzpF+XH+OJAZmMH9iCBMD7KPYjzVSvl1qGgcAtSK+/AYWJJE lZ3a9nAbFacaRHaNAQN6Ai2NrD9yT6DIsSPMVEqnYVE6dlm0HCwqoN8EVTKGIG9a yovbJZ20ZE0XOFogo6NMc9EhUicFdDnaXI7F8YzEEr+n9ZJ5ARXnMvp6PI9gUaak ATitCq//7PvOxTgiFEtm0A8N7DqSJUfgO1UCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTEABKYSWYCXq93E3xpwUkd95RGKjAfBgNVHSMEGDAWgBT7xGKUpdVkN+GaEa75 +5uHdpAUPjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyNDcvLThSaWxLWFZaRGZobWhHdS1mdWJoM2FRRkQ0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLThSaWxLWFZaRGZobWhHdS1mdWJo M2FRRkQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjQ3L3hBQVNtRWxtQWw2dmR4TjhhY0ZKSGZlVVJpby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACdEbAwDQYJKoZIhvcNAQELBQADggEBADEls4GJYIJC7IJrwNbSpSnJ +HL0txYZxY8q7N1qlopW3vqR3cDAoas+s1EAQ3KjQ3W20/ahE5IZlKjXPPC7CNyF +PyJUntZKeFEHkdOmRLSUlFw2U8mZdXO2uGvUCZYBw6PSxZGVB/YwpzTkottB+rk Ov1Fzh7lRT1WgN1AovBfa3Qo66qaRF7he+zOz5PDvUUBYBl6r2oLcT8DJsdOqhOR nWH2rv03PqF73ks4FeAiweptg9S5kF2CCMhgsTRuKOWbDvPG9iqz8ztGjdod5Kq2 MiclFPVxcGNsba5imgIrB2wKmqJISUZgtU2XaLZDEKmtG57PYG3NYn0YrGPg1L8= -----END CERTIFICATE-----Generated at Sat May 17 17:51:55 2025 by rpki-client