$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/NenFa4bKqiECbu3v5BlgK0VE4cY.roa File: NenFa4bKqiECbu3v5BlgK0VE4cY.roa (raw, json) Hash identifier: 4EXqvrdxmLlE2bGzzzI/w0pLr5nMPVubBhnrfRTqG0c= Subject key identifier: 35:E9:C5:6B:86:CA:AA:21:02:6E:ED:EF:E4:19:60:2B:45:44:E1:C6 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 0236 Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/NenFa4bKqiECbu3v5BlgK0VE4cY.roa Signing time: Thu 01 May 2025 01:31:47 +0000 ROA not before: Thu 01 May 2025 01:31:47 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 218.44.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 00:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:47 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=35E9C56B86CAAA21026EEDEFE419602B4544E1C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:29:60:e8:74:bb:b8:61:53:65:87:c1:d4: 44:63:fc:73:6d:01:1f:56:e2:a0:16:af:ec:b7:98: 54:20:3f:88:29:99:63:18:25:24:b8:1f:55:10:e6: 12:29:5d:fb:1b:21:7b:47:00:a7:b7:13:d0:d5:f1: d1:bc:21:f4:b2:21:54:d5:8d:92:cc:ae:b7:a6:5e: b7:a6:fb:1b:34:e0:e2:6b:a7:34:f7:30:4e:c5:12: 1f:22:f7:21:29:cc:f4:6c:43:d8:c9:c2:2c:be:19: ea:a0:23:d5:92:ab:f8:ee:10:86:84:60:b5:68:d4: 5f:a5:a8:a2:30:67:a1:7e:aa:f0:60:52:3c:cf:21: 9e:9d:83:02:cf:ee:bc:87:95:f8:6d:9b:df:72:b8: e7:cf:9e:a1:d4:9d:f2:cd:62:4b:4e:1f:8d:5c:30: e3:9a:46:e6:4e:53:bc:5d:a3:8c:af:59:8a:1b:d7: b7:a8:d3:79:8c:16:8c:cf:e4:ec:ac:31:de:a5:bc: 8e:ac:2a:22:85:bd:e9:63:85:66:5e:0b:ea:b5:76: ae:69:6d:a9:88:2b:68:93:35:2d:29:d9:96:e4:39: 50:c8:ca:d7:37:7a:d5:63:a9:c9:72:7a:7c:ec:e2: ee:9e:75:e4:f1:7a:31:7e:19:44:9b:ab:2c:1b:5c: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E9:C5:6B:86:CA:AA:21:02:6E:ED:EF:E4:19:60:2B:45:44:E1:C6 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/NenFa4bKqiECbu3v5BlgK0VE4cY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.44.0.0/16 Signature Algorithm: sha256WithRSAEncryption a6:77:cf:50:5d:60:ce:61:48:70:8d:1b:80:18:94:d8:7c:40: cc:07:7c:06:cc:2c:93:92:d6:87:98:f3:5e:0e:24:4f:7a:53: 87:d9:30:91:ca:1e:4a:85:8e:00:2a:a2:82:9a:50:65:e4:b2: 79:ca:2d:10:63:b0:d4:27:30:7f:1f:44:ac:ac:9e:0a:aa:46: 98:d0:28:63:e3:7c:d5:41:63:3a:81:74:29:7e:e0:28:48:69: 6c:78:36:ee:6e:4d:7d:c8:3d:51:42:a8:f7:5a:16:93:53:87: 85:a3:92:62:10:26:d3:91:4b:83:38:25:33:6a:64:e6:44:bb: 55:79:50:f2:fd:bd:d9:bc:c0:ed:5c:7b:35:1e:6a:ce:eb:a4: a7:77:74:04:92:6d:07:75:fa:9c:cb:00:a2:49:1a:87:51:2a: 2a:42:c9:9c:32:2b:20:ba:fe:dc:24:fb:67:2e:5d:13:49:85: 6f:c0:06:46:92:ae:98:96:1d:21:41:69:f7:91:b2:cc:70:9b: c4:64:4f:a9:c4:ef:9e:a2:4e:e3:d9:70:e1:f5:46:24:3f:88: f0:40:ab:db:64:99:c0:d6:a2:1c:a4:e2:d0:cc:d7:cb:0a:5d: 21:03:09:33:51:ed:93:3d:3b:4b:13:5a:f8:d5:48:23:f1:f0: 9a:47:b2:e3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxNDdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM1RTlDNTZCODZDQUFB MjEwMjZFRURFRkU0MTk2MDJCNDU0NEUxQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAFylg6HS7uGFTZYfB1ERj/HNtAR9W4qAWr+y3mFQgP4gpmWMY JSS4H1UQ5hIpXfsbIXtHAKe3E9DV8dG8IfSyIVTVjZLMrremXrem+xs04OJrpzT3 ME7FEh8i9yEpzPRsQ9jJwiy+GeqgI9WSq/juEIaEYLVo1F+lqKIwZ6F+qvBgUjzP IZ6dgwLP7ryHlfhtm99yuOfPnqHUnfLNYktOH41cMOOaRuZOU7xdo4yvWYob17eo 03mMFozP5OysMd6lvI6sKiKFveljhWZeC+q1dq5pbamIK2iTNS0p2ZbkOVDIytc3 etVjqclyenzs4u6edeTxejF+GUSbqywbXNK5AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUNenFa4bKqiECbu3v5BlgK0VE4cYwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxL05lbkZhNGJLcWlFQ2J1M3Y1QmxnSzBWRTRjWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDaLDANBgkqhkiG9w0BAQsFAAOCAQEApnfPUF1gzmFIcI0bgBiU2HxAzAd8 Bswsk5LWh5jzXg4kT3pTh9kwkcoeSoWOACqigppQZeSyecotEGOw1Ccwfx9ErKye CqpGmNAoY+N81UFjOoF0KX7gKEhpbHg27m5Nfcg9UUKo91oWk1OHhaOSYhAm05FL gzglM2pk5kS7VXlQ8v292bzA7Vx7NR5qzuukp3d0BJJtB3X6nMsAokkah1EqKkLJ nDIrILr+3CT7Zy5dE0mFb8AGRpKumJYdIUFp95GyzHCbxGRPqcTvnqJO49lw4fVG JD+I8ECr22SZwNaiHKTi0MzXywpdIQMJM1Htkz07SxNa+NVII/Hwmkey4w== -----END CERTIFICATE-----Generated at Sat May 17 03:37:34 2025 by rpki-client