$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/-_346EZqSFTtX8qwBRigSGZruro.roa File: -_346EZqSFTtX8qwBRigSGZruro.roa (raw, json) Hash identifier: z2M/WlXgQ3p42AjSmrjEUA4uRrEPF9dht79BpSyEPgU= Subject key identifier: FB:FD:F8:E8:46:6A:48:54:ED:5F:CA:B0:05:18:A0:48:66:6B:BA:BA Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0238 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/-_346EZqSFTtX8qwBRigSGZruro.roa Signing time: Thu 01 May 2025 01:31:48 +0000 ROA not before: Thu 01 May 2025 01:31:48 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 219.114.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 07:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:48 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=FBFDF8E8466A4854ED5FCAB00518A048666BBABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:9b:63:0c:5b:05:0a:5b:07:7f:3d:12:6f: fc:7a:bd:2f:a1:23:53:4a:56:70:63:d1:9b:93:e9: bb:66:09:3a:1d:01:77:49:c9:04:57:23:b2:d7:f6: 3b:23:ee:fe:af:81:3f:dc:ed:1a:4f:23:fd:24:77: 2a:ce:59:0b:f0:c4:5a:be:a2:6d:42:c9:18:20:84: f4:b4:f2:01:2f:dd:43:6d:3a:20:26:e3:de:bc:aa: a3:7b:3c:4e:7d:ca:89:a5:48:4d:b8:b1:44:9a:8e: ce:fe:44:28:7e:0b:ef:1a:bf:01:59:68:8d:e8:51: a2:6a:4b:3d:d4:8c:60:71:fa:0e:7f:0f:a4:1d:0b: 1b:9a:c9:1b:42:01:70:76:b1:ce:7e:d4:f2:a5:da: 71:21:51:b1:7e:d7:90:c1:ce:bc:38:b1:2a:af:7f: d8:e9:b4:9f:bd:d9:8a:02:1f:ff:a0:05:a5:f8:25: ab:67:f2:2a:0a:14:5e:ea:ea:5d:06:11:fa:b2:0b: 50:0a:c5:ed:05:f3:7d:77:58:55:62:23:9a:c5:10: 6f:03:5e:0f:68:21:e8:9d:bb:f0:26:aa:54:ce:f2: 43:47:b7:ef:f7:7c:61:de:df:ee:75:13:5f:11:e2: 74:6b:51:d6:89:87:cc:b8:5f:a1:26:d0:63:e2:57: 0a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FD:F8:E8:46:6A:48:54:ED:5F:CA:B0:05:18:A0:48:66:6B:BA:BA X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/-_346EZqSFTtX8qwBRigSGZruro.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.114.0.0/17 Signature Algorithm: sha256WithRSAEncryption 79:a4:18:60:b6:2a:80:5c:36:6a:9c:18:7e:52:dd:73:cb:59: c1:7d:69:16:0d:c5:27:bc:40:4c:a1:19:6a:bb:0e:ec:e1:02: 62:b0:4d:e7:58:56:5a:60:93:ae:a4:7d:a8:66:2b:88:c2:e7: 5d:9b:88:9c:35:ae:de:fd:8c:26:b5:ae:4b:31:9a:9c:e4:ff: b3:e4:0a:b7:11:e9:75:58:bb:71:a2:52:3d:8b:b8:05:0e:6b: 90:6c:ba:8b:2a:db:62:2f:11:f7:04:2b:77:ef:ff:8d:c3:79: 50:00:32:6a:0c:5a:77:da:1e:74:e3:9d:ac:3f:cf:6e:31:53: 8d:1b:a1:43:3d:14:86:c1:39:e5:0f:d7:0a:27:db:4c:d1:02: c5:cd:4d:bb:64:97:9b:e0:68:fc:a8:6e:76:24:74:c8:69:7d: b6:2d:52:2a:89:1b:59:db:df:b0:85:01:1a:29:c4:75:65:23: 61:f3:7d:3c:41:51:e9:85:63:c4:60:cf:d5:52:fb:f7:76:2a: 79:34:f9:7f:e9:3c:da:49:e1:68:87:b8:9a:06:d9:d5:ae:2c: e3:49:c6:2e:17:87:cc:2d:ca:06:12:94:d7:c7:ed:07:f8:3c: 61:a8:04:82:d1:d5:e0:9c:be:b2:d8:7e:59:af:d9:e6:70:3a: 10:cd:f0:72 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxNDhaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEZCRkRGOEU4NDY2QTQ4 NTRFRDVGQ0FCMDA1MThBMDQ4NjY2QkJBQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8bptjDFsFClsHfz0Sb/x6vS+hI1NKVnBj0ZuT6btmCTodAXdJ yQRXI7LX9jsj7v6vgT/c7RpPI/0kdyrOWQvwxFq+om1CyRgghPS08gEv3UNtOiAm 4968qqN7PE59yomlSE24sUSajs7+RCh+C+8avwFZaI3oUaJqSz3UjGBx+g5/D6Qd CxuayRtCAXB2sc5+1PKl2nEhUbF+15DBzrw4sSqvf9jptJ+92YoCH/+gBaX4Jatn 8ioKFF7q6l0GEfqyC1AKxe0F8313WFViI5rFEG8DXg9oIeidu/AmqlTO8kNHt+/3 fGHe3+51E18R4nRrUdaJh8y4X6Em0GPiVwrtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+/346EZqSFTtX8qwBRigSGZrurowHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxLy1fMzQ2RVpxU0ZUdFg4cXdCUmlnU0dacnVyby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfbcgAwDQYJKoZIhvcNAQELBQADggEBAHmkGGC2KoBcNmqcGH5S3XPLWcF9 aRYNxSe8QEyhGWq7DuzhAmKwTedYVlpgk66kfahmK4jC512biJw1rt79jCa1rksx mpzk/7PkCrcR6XVYu3GiUj2LuAUOa5Bsuosq22IvEfcEK3fv/43DeVAAMmoMWnfa HnTjnaw/z24xU40boUM9FIbBOeUP1won20zRAsXNTbtkl5vgaPyobnYkdMhpfbYt UiqJG1nb37CFARopxHVlI2HzfTxBUemFY8Rgz9VS+/d2Knk0+X/pPNpJ4WiHuJoG 2dWuLONJxi4Xh8wtygYSlNfH7Qf4PGGoBILR1eCcvrLYflmv2eZwOhDN8HI= -----END CERTIFICATE-----Generated at Sat May 17 10:40:40 2025 by rpki-client