$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/HV1MMtShY9OMpnAgy5CSYefMoIk.roa File: HV1MMtShY9OMpnAgy5CSYefMoIk.roa (raw, json) Hash identifier: atXTfaxeAXWyWA6bsX3gTDr0jP4pwQytc2UH6xzAPV4= Subject key identifier: 1D:5D:4C:32:D4:A1:63:D3:8C:A6:70:20:CB:90:92:61:E7:CC:A0:89 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 022E Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/HV1MMtShY9OMpnAgy5CSYefMoIk.roa Signing time: Thu 01 May 2025 01:31:44 +0000 ROA not before: Thu 01 May 2025 01:31:44 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 211.11.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 07:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:44 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=1D5D4C32D4A163D38CA67020CB909261E7CCA089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:08:22:f1:a4:c7:17:eb:44:fd:24:be:e3:9e: ca:a7:cc:f6:c3:db:0f:f7:3c:14:d8:5d:f0:10:ee: 9b:66:40:8b:9e:31:21:ff:7f:31:ec:fe:d4:66:b1: e8:0b:c3:dc:a0:e2:da:26:fe:3f:be:ae:71:83:ae: 56:57:43:95:89:07:74:2b:20:bf:a5:00:98:9b:88: ed:0c:eb:d8:8e:7b:5a:b5:c8:10:57:a5:02:ed:1c: 4b:0b:9e:5e:97:36:de:ac:18:ec:14:48:89:0e:88: 2d:21:48:17:c0:c5:8b:98:e2:0b:c9:7d:d9:40:48: c4:c3:5c:45:2b:b1:81:4c:20:65:a3:f1:60:e1:e6: fe:45:8a:a4:13:02:c6:63:51:de:80:57:9c:a6:74: e0:5a:3b:b4:97:3c:25:aa:51:02:42:dc:da:42:1e: 40:c1:52:c4:07:b7:f0:43:56:b8:09:4a:3f:8a:00: b3:9e:ad:b2:c7:19:de:7f:18:e0:c0:01:b7:e0:17: 19:62:9f:49:59:e4:66:81:12:33:c0:4a:74:aa:69: ba:19:09:14:fa:d2:36:41:7f:f6:de:3b:a5:05:f3: 11:41:a6:9e:3d:cb:07:43:71:97:2e:8d:82:76:f4: 10:a0:2e:6a:9a:56:d7:98:2b:2d:6c:e3:46:7e:46: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5D:4C:32:D4:A1:63:D3:8C:A6:70:20:CB:90:92:61:E7:CC:A0:89 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/HV1MMtShY9OMpnAgy5CSYefMoIk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.11.0.0/16 Signature Algorithm: sha256WithRSAEncryption b4:4e:e2:2d:38:fb:7b:2b:5b:6e:c8:d9:e4:5b:97:c6:70:f3: 7f:c3:0f:bd:a9:2e:d6:df:d7:95:05:7a:ed:2d:8c:1c:61:8d: a5:88:c6:a7:6e:53:e2:59:63:cf:9e:ea:54:99:f7:5f:0a:72: f9:da:41:da:e3:ec:2f:80:f2:f0:fa:4f:7c:51:5c:2e:0e:3b: 05:e6:40:94:e4:08:db:10:62:d6:31:48:40:4d:71:55:36:a8: 24:6a:30:c0:65:7b:fe:31:fb:c1:a6:49:b6:f4:d5:f1:38:1c: 65:64:7a:6b:57:75:76:3c:a3:0f:cb:13:37:f4:8d:7f:f5:85: d0:b4:b2:51:02:20:82:7b:91:a5:a8:c0:66:96:a6:05:44:15: e8:7c:af:cb:f5:b5:81:4b:14:e2:10:bf:dc:11:62:0a:0a:64: 2a:e8:a4:00:07:17:f3:a7:b1:08:a7:5c:4c:96:8a:1e:9e:62: a3:1e:2e:b7:db:14:85:d9:0d:94:8c:06:41:99:58:1a:4d:79: 49:ed:97:98:de:f7:6f:cc:ce:12:c9:22:0f:95:0e:5e:40:f6: cf:4a:bf:ed:7e:e6:89:eb:b4:18:6d:fa:e5:e8:ec:56:e2:c2: 64:2a:0f:de:f8:46:a4:7f:24:61:d9:90:cd:f4:42:d7:ec:a8: da:5b:56:44 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxNDRaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFENUQ0QzMyRDRBMTYz RDM4Q0E2NzAyMENCOTA5MjYxRTdDQ0EwODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1CCLxpMcX60T9JL7jnsqnzPbD2w/3PBTYXfAQ7ptmQIueMSH/ fzHs/tRmsegLw9yg4tom/j++rnGDrlZXQ5WJB3QrIL+lAJibiO0M69iOe1q1yBBX pQLtHEsLnl6XNt6sGOwUSIkOiC0hSBfAxYuY4gvJfdlASMTDXEUrsYFMIGWj8WDh 5v5FiqQTAsZjUd6AV5ymdOBaO7SXPCWqUQJC3NpCHkDBUsQHt/BDVrgJSj+KALOe rbLHGd5/GODAAbfgFxlin0lZ5GaBEjPASnSqaboZCRT60jZBf/beO6UF8xFBpp49 ywdDcZcujYJ29BCgLmqaVteYKy1s40Z+Rs2TAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUHV1MMtShY9OMpnAgy5CSYefMoIkwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL0hWMU1NdFNoWTlPTXBuQWd5NUNTWWVmTW9Jay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDTCzANBgkqhkiG9w0BAQsFAAOCAQEAtE7iLTj7eytbbsjZ5FuXxnDzf8MP vaku1t/XlQV67S2MHGGNpYjGp25T4lljz57qVJn3Xwpy+dpB2uPsL4Dy8PpPfFFc Lg47BeZAlOQI2xBi1jFIQE1xVTaoJGowwGV7/jH7waZJtvTV8TgcZWR6a1d1djyj D8sTN/SNf/WF0LSyUQIggnuRpajAZpamBUQV6Hyvy/W1gUsU4hC/3BFiCgpkKuik AAcX86exCKdcTJaKHp5iox4ut9sUhdkNlIwGQZlYGk15Se2XmN73b8zOEskiD5UO XkD2z0q/7X7mieu0GG365ejsVuLCZCoP3vhGpH8kYdmQzfRC1+yo2ltWRA== -----END CERTIFICATE-----Generated at Sat May 17 10:14:06 2025 by rpki-client