$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/4FF-KE1iSdtNItqNgfdvPfMF51M.roa File: 4FF-KE1iSdtNItqNgfdvPfMF51M.roa (raw, json) Hash identifier: iql3rIP6dzss2MZx6el8OU0+d3+cVeg1NxxknbNh3Xk= Subject key identifier: E0:51:7E:28:4D:62:49:DB:4D:22:DA:8D:81:F7:6F:3D:F3:05:E7:53 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0224 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/4FF-KE1iSdtNItqNgfdvPfMF51M.roa Signing time: Thu 01 May 2025 01:31:39 +0000 ROA not before: Thu 01 May 2025 01:31:39 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 210.160.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 13:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:39 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=E0517E284D6249DB4D22DA8D81F76F3DF305E753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:41:98:d0:1f:5d:ad:3d:45:88:a5:58:77: 37:53:39:69:c5:36:11:23:9c:27:dc:c3:93:6c:e7: 68:47:d6:59:6e:24:a7:4e:bf:22:64:57:5e:85:69: 4a:cc:fe:98:5a:6e:fb:6e:96:4f:2a:82:b1:fa:81: e0:b5:11:d5:8d:30:e4:e8:1c:bd:0f:d4:07:3f:3d: 8c:49:4c:b6:df:e5:57:56:24:59:fd:05:c1:5c:06: 7e:64:72:e3:94:ac:31:60:a0:ba:da:94:7e:ca:9b: 49:01:19:b2:7b:bd:18:b8:60:e1:ab:91:bd:27:ca: 77:8e:be:f0:88:1e:1c:fd:e3:e5:e3:4c:fd:7f:de: fe:35:d3:c8:ca:00:df:7e:09:18:4a:b4:b7:71:04: e1:a2:39:8a:7b:62:75:de:8c:e3:d6:8b:78:19:c2: 9d:e0:c8:2a:47:02:b5:e6:9b:ea:84:48:83:5e:2c: 02:9f:55:48:94:61:8a:36:fa:b2:59:1d:47:7c:d7: c0:84:74:55:2e:3e:9a:b5:8f:9f:85:ed:bc:56:2b: a9:8e:c1:78:3b:f3:17:ed:40:e3:24:09:65:2c:bf: f7:28:c0:85:aa:2a:a5:b8:b8:68:d0:0f:dd:e0:c1: 61:de:74:03:54:f6:ef:1b:3f:e2:58:27:90:f0:f0: 49:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:51:7E:28:4D:62:49:DB:4D:22:DA:8D:81:F7:6F:3D:F3:05:E7:53 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/4FF-KE1iSdtNItqNgfdvPfMF51M.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.160.0.0/14 Signature Algorithm: sha256WithRSAEncryption 6f:07:5a:8f:a4:30:3a:7a:78:ec:79:98:7a:9d:44:69:b8:0b: 48:5f:00:dc:f6:3b:da:4c:71:6b:b8:a8:1a:bb:99:1a:1a:ee: 1d:91:9b:5e:51:5d:2f:ec:43:04:48:fa:1b:3e:0e:58:05:b9: 0c:01:9c:7c:14:99:06:26:33:0e:84:b7:51:6e:ff:2b:9a:db: 64:a0:d4:69:65:40:d7:13:84:05:76:68:72:62:97:82:aa:fc: 41:b1:5a:45:6f:d7:9e:3b:28:23:23:ad:8c:55:6a:86:40:99: 92:d6:0c:26:42:22:3f:00:dd:9a:7f:d1:80:62:30:c2:6d:3d: 5f:7d:a8:0b:51:02:b7:69:08:37:31:4d:94:34:15:34:3c:52: ac:1f:ef:4d:dc:6b:7d:90:45:ac:a7:00:1b:42:83:36:e0:d3: b3:e5:0a:f9:ff:f0:ef:f9:5b:b7:94:a8:48:d4:39:2a:17:c5: 29:95:63:df:29:e2:67:16:0f:98:6f:e1:0f:2b:bb:14:d4:06: 99:b8:7e:00:13:08:b1:a5:2d:14:c0:45:87:29:98:9d:66:81: 12:bd:eb:70:a7:81:c5:a1:55:69:ec:0b:25:d0:69:dd:b8:a3: 76:61:98:ad:0d:4d:b0:d8:84:01:77:0d:02:8d:4b:01:6e:37: 8b:84:c0:98 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxMzlaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUwNTE3RTI4NEQ2MjQ5 REI0RDIyREE4RDgxRjc2RjNERjMwNUU3NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE8UGY0B9drT1FiKVYdzdTOWnFNhEjnCfcw5Ns52hH1lluJKdO vyJkV16FaUrM/phabvtulk8qgrH6geC1EdWNMOToHL0P1Ac/PYxJTLbf5VdWJFn9 BcFcBn5kcuOUrDFgoLralH7Km0kBGbJ7vRi4YOGrkb0nyneOvvCIHhz94+XjTP1/ 3v4108jKAN9+CRhKtLdxBOGiOYp7YnXejOPWi3gZwp3gyCpHArXmm+qESINeLAKf VUiUYYo2+rJZHUd818CEdFUuPpq1j5+F7bxWK6mOwXg78xftQOMkCWUsv/cowIWq KqW4uGjQD93gwWHedANU9u8bP+JYJ5Dw8EkvAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU4FF+KE1iSdtNItqNgfdvPfMF51MwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxLzRGRi1LRTFpU2R0Tkl0cU5nZmR2UGZNRjUxTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwLSoDANBgkqhkiG9w0BAQsFAAOCAQEAbwdaj6QwOnp47HmYep1EabgLSF8A 3PY72kxxa7ioGruZGhruHZGbXlFdL+xDBEj6Gz4OWAW5DAGcfBSZBiYzDoS3UW7/ K5rbZKDUaWVA1xOEBXZocmKXgqr8QbFaRW/XnjsoIyOtjFVqhkCZktYMJkIiPwDd mn/RgGIwwm09X32oC1ECt2kINzFNlDQVNDxSrB/vTdxrfZBFrKcAG0KDNuDTs+UK +f/w7/lbt5SoSNQ5KhfFKZVj3yniZxYPmG/hDyu7FNQGmbh+ABMIsaUtFMBFhymY nWaBEr3rcKeBxaFVaewLJdBp3bijdmGYrQ1NsNiEAXcNAo1LAW43i4TAmA== -----END CERTIFICATE-----Generated at Sun May 18 15:25:13 2025 by rpki-client