$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/L6fAETszSzNSiiERpCM4tUuKPQs.roa File: L6fAETszSzNSiiERpCM4tUuKPQs.roa (raw, json) Hash identifier: xpfNdZ7sYIM2MbvnMdJc0e7ZubLb3tdkJsnD8cwpjCQ= Subject key identifier: 2F:A7:C0:11:3B:33:4B:33:52:8A:21:11:A4:23:38:B5:4B:8A:3D:0B Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 021D Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L6fAETszSzNSiiERpCM4tUuKPQs.roa Signing time: Thu 01 May 2025 01:31:35 +0000 ROA not before: Thu 01 May 2025 01:31:35 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 202.191.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 14:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:35 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=2FA7C0113B334B33528A2111A42338B54B8A3D0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:9b:eb:0f:66:ea:fe:8f:17:92:c9:ce:da:01: f9:d4:3f:a1:6f:31:31:59:53:5b:63:29:f0:00:44: f9:81:a7:bc:f7:81:c8:f0:5a:b3:6e:7d:bf:ba:67: 5f:d6:4b:28:3f:28:ba:ba:80:20:8b:a6:0e:81:80: 2c:4d:a3:c8:00:33:b8:1d:07:11:79:60:84:8b:29: 87:f7:c1:89:9a:6e:e2:a4:01:c9:b8:fa:3c:87:02: 7e:0d:17:d7:53:8d:c5:94:14:b7:83:5b:3a:08:2e: 2c:88:12:fe:48:4c:e8:35:31:82:20:5b:17:d2:b0: 6d:b0:f9:5d:31:25:e8:aa:3d:b6:5d:85:04:0d:fb: 5b:16:88:4b:9e:ad:4a:51:a0:f9:68:8a:e5:07:54: 11:ca:db:1f:59:ec:5c:12:8a:31:38:d2:9e:d3:b6: 2f:50:ff:16:11:f2:83:a6:14:f4:c6:11:4b:6f:3c: 9a:b8:94:c5:b6:f2:f2:c7:c6:2b:93:7a:47:e4:11: 42:85:1c:1a:a8:af:4c:6c:5d:5c:5d:92:05:22:6a: 89:a2:45:84:07:6f:7e:cf:a8:63:f2:7f:36:c2:25: 34:2c:b2:d1:2a:d9:89:f0:6f:07:27:b1:23:18:f9: 68:ec:56:e4:f2:b4:0d:1d:38:c1:51:b4:9a:c2:bc: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A7:C0:11:3B:33:4B:33:52:8A:21:11:A4:23:38:B5:4B:8A:3D:0B X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L6fAETszSzNSiiERpCM4tUuKPQs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.191.16.0/20 Signature Algorithm: sha256WithRSAEncryption 35:44:23:e1:6e:41:8b:99:52:5f:f5:2e:42:d6:d0:07:bc:77: f1:50:33:20:97:19:ff:69:b2:9a:e0:aa:57:57:b0:40:1c:d0: 76:77:3e:18:c5:69:86:cf:eb:21:74:f7:bd:c1:9f:83:14:33: 69:01:6c:ff:03:fc:31:62:8c:47:38:9c:c5:31:5d:8b:c0:07: 00:5e:c8:b3:b7:78:0b:a7:ab:85:65:2e:a5:2c:03:fc:42:e7: 01:97:a4:80:1f:58:72:43:7b:ff:95:8c:ac:fb:5b:40:fb:f0: 6e:2f:ed:1c:95:37:48:1c:0e:64:e9:16:cc:f6:79:0c:78:ee: 6c:e4:33:9a:f9:7d:e0:43:7e:58:02:40:06:66:09:86:78:9b: 32:52:7e:01:c8:1a:31:d8:e3:b2:e0:e0:cd:23:7c:4e:6b:c7: 74:5b:cc:1c:1e:9b:3b:fd:c5:65:d0:f0:84:3b:a8:bd:d5:e8: a9:ba:73:84:fa:d2:44:b0:26:23:70:c4:f6:20:30:ba:5c:90: 7c:f5:99:ce:25:b2:31:28:ea:25:e0:b3:c5:e3:01:a4:68:9e: 16:c4:b9:49:1d:f5:b7:8d:fe:8c:bd:78:ad:98:33:42:bc:06: d9:82:8f:59:71:15:db:5d:9f:d2:22:a8:dc:44:26:27:bc:61: e8:bb:02:bc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxMzVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJGQTdDMDExM0IzMzRC MzM1MjhBMjExMUE0MjMzOEI1NEI4QTNEMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4m+sPZur+jxeSyc7aAfnUP6FvMTFZU1tjKfAARPmBp7z3gcjw WrNufb+6Z1/WSyg/KLq6gCCLpg6BgCxNo8gAM7gdBxF5YISLKYf3wYmabuKkAcm4 +jyHAn4NF9dTjcWUFLeDWzoILiyIEv5ITOg1MYIgWxfSsG2w+V0xJeiqPbZdhQQN +1sWiEuerUpRoPloiuUHVBHK2x9Z7FwSijE40p7Tti9Q/xYR8oOmFPTGEUtvPJq4 lMW28vLHxiuTekfkEUKFHBqor0xsXVxdkgUiaomiRYQHb37PqGPyfzbCJTQsstEq 2YnwbwcnsSMY+WjsVuTytA0dOMFRtJrCvI+pAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUL6fAETszSzNSiiERpCM4tUuKPQswHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL0w2ZkFFVHN6U3pOU2lpRVJwQ000dFV1S1BRcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKvxAwDQYJKoZIhvcNAQELBQADggEBADVEI+FuQYuZUl/1LkLW0Ae8d/FQ MyCXGf9psprgqldXsEAc0HZ3PhjFaYbP6yF0973Bn4MUM2kBbP8D/DFijEc4nMUx XYvABwBeyLO3eAunq4VlLqUsA/xC5wGXpIAfWHJDe/+VjKz7W0D78G4v7RyVN0gc DmTpFsz2eQx47mzkM5r5feBDflgCQAZmCYZ4mzJSfgHIGjHY47Lg4M0jfE5rx3Rb zBwemzv9xWXQ8IQ7qL3V6Km6c4T60kSwJiNwxPYgMLpckHz1mc4lsjEo6iXgs8Xj AaRonhbEuUkd9beN/oy9eK2YM0K8BtmCj1lxFdtdn9IiqNxEJie8Yei7Arw= -----END CERTIFICATE-----Generated at Sun May 18 16:15:35 2025 by rpki-client